Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_oY_N2pd-6G_PkZl0r653twaphI.roa
File:                     _oY_N2pd-6G_PkZl0r653twaphI.roa (raw, json)
Hash identifier:          um4EI/q5/12b8jY+IbTAZDEtQBz/UQYNlMrejpIdX0I=
Subject key identifier:   FE:86:3F:37:6A:5D:FB:A1:BF:3E:46:65:D2:BE:B9:DE:DC:1A:A6:12
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D07
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_oY_N2pd-6G_PkZl0r653twaphI.roa
Signing time:             Tue 01 Apr 2025 02:11:40 +0000
ROA not before:           Tue 01 Apr 2025 02:11:40 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.105.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3335 (0xd07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:11:40 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=FE863F376A5DFBA1BF3E4665D2BEB9DEDC1AA612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:88:e6:25:45:7b:06:15:e5:ef:39:54:06:
                    d7:d3:cc:06:ca:96:8d:fb:76:85:83:69:be:97:1b:
                    ae:7d:01:ac:43:86:b1:be:87:8e:68:e9:0c:15:f6:
                    8f:a1:06:fe:f2:f3:3c:f3:d3:e8:dc:4c:63:66:f8:
                    ff:9d:82:b9:b0:52:cf:d5:e4:8c:e6:e7:fe:8a:43:
                    9d:b8:b2:fc:f5:14:e9:f2:6d:12:a1:c0:47:52:25:
                    6c:23:a8:ac:62:a0:60:60:f0:c1:33:2a:5d:b3:cb:
                    b7:cb:87:dd:ec:dd:83:12:3c:d7:c1:ee:cc:2c:02:
                    90:67:be:f7:6c:a2:00:65:be:57:56:fe:c2:65:f9:
                    6b:08:c5:28:32:3a:60:70:f2:b6:ae:b8:9a:1c:28:
                    e3:de:d6:7b:30:7f:7a:d4:67:5f:a8:aa:be:e9:c8:
                    c3:73:76:f9:48:4c:70:80:80:f6:b0:96:ae:04:a7:
                    a6:c3:4a:4c:11:5f:a7:53:23:19:73:b1:ef:ba:6b:
                    01:51:9f:ce:ab:32:94:81:7a:6f:be:29:ba:fd:21:
                    02:cf:5b:43:70:e8:83:8e:e4:bf:3b:3e:b5:b3:6d:
                    2d:5a:c7:76:42:59:49:07:ba:2b:1b:66:87:aa:20:
                    47:50:ab:35:02:cb:78:38:d0:17:c0:36:db:28:67:
                    03:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:86:3F:37:6A:5D:FB:A1:BF:3E:46:65:D2:BE:B9:DE:DC:1A:A6:12
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_oY_N2pd-6G_PkZl0r653twaphI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:1f:7a:22:9b:77:4c:2c:ab:dc:55:b8:c8:fd:63:fe:f8:16:
         48:f4:d0:4d:5f:f5:c7:44:a0:ec:e7:c2:b7:98:33:00:51:15:
         14:23:28:39:6d:32:7f:01:5e:02:09:64:11:6d:26:63:fa:31:
         c8:fe:ad:96:e8:f2:bc:ab:9c:03:66:41:8d:0f:91:e9:7c:27:
         d4:ea:08:3b:7c:2b:d1:5c:98:b5:0e:ce:9c:eb:01:d9:ed:96:
         99:07:77:9e:bf:d9:36:42:ce:90:fc:08:df:7f:74:1c:2d:08:
         b1:d7:b8:76:ce:b0:8c:32:1e:8b:bf:31:d2:4f:38:ea:f9:12:
         75:46:9b:a4:b8:8e:4b:96:a5:f5:9e:25:54:76:0b:cc:e7:b3:
         67:42:6e:97:45:d2:aa:d9:2a:db:a2:ea:10:54:5c:57:a2:98:
         bd:ae:f0:ee:43:75:3e:66:11:67:a0:94:0f:18:57:d2:bd:28:
         b9:99:14:a2:ce:52:bc:6e:53:da:b7:6e:dc:97:a1:b3:13:d0:
         bb:6f:ef:13:04:10:8a:48:46:c4:bb:20:60:16:da:24:45:f6:
         27:54:87:b2:0c:3e:4e:a0:a9:c7:90:e9:14:0b:81:75:7e:91:
         8f:b8:4d:b5:7f:e4:03:e3:4a:e1:d2:de:b9:ec:6d:7b:cb:d7:
         4b:c1:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:55 2025 by rpki-client on console.sobornost.net