Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dNlMn1a7GDVqpk6XDK0aVqHaaYc.roa
File:                     dNlMn1a7GDVqpk6XDK0aVqHaaYc.roa (raw, json)
Hash identifier:          Hvst04i4wefxLY7WK3n/eaFu3VE20wvY8GN7e0fNAv0=
Subject key identifier:   74:D9:4C:9F:56:BB:18:35:6A:A6:4E:97:0C:AD:1A:56:A1:DA:69:87
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0CF4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dNlMn1a7GDVqpk6XDK0aVqHaaYc.roa
Signing time:             Tue 01 Apr 2025 02:11:31 +0000
ROA not before:           Tue 01 Apr 2025 02:11:31 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        183.75.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3316 (0xcf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:11:31 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=74D94C9F56BB18356AA64E970CAD1A56A1DA6987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:1d:2e:56:cb:a9:17:5d:45:ac:f6:43:ce:
                    21:98:01:63:9a:98:4d:d2:25:f9:1d:4e:32:3b:af:
                    d6:66:4b:fe:62:04:fb:d6:ae:ec:68:a1:08:84:01:
                    51:90:78:f7:f9:00:ee:18:b7:6c:33:95:33:39:3e:
                    bf:6e:37:ce:bc:52:5c:e6:26:0e:b0:74:b3:f8:5f:
                    0a:8d:37:25:3b:93:9e:b4:cb:d4:b4:66:0e:96:21:
                    9c:b6:2e:a2:52:74:a3:fe:16:1a:bf:e9:1e:f8:41:
                    e9:84:0d:d8:b8:1b:00:8b:7c:ee:13:89:15:56:76:
                    56:f7:af:6a:a1:6c:d6:e3:b5:30:09:97:04:d8:ed:
                    03:6e:e1:01:e5:d2:f1:02:1f:03:60:e4:33:df:0c:
                    85:bc:ee:0d:a6:b2:6a:bc:25:3e:d8:ef:4d:ab:58:
                    9d:b3:36:0c:cc:bc:39:7a:3c:c8:d4:57:26:37:30:
                    59:52:c5:de:f3:75:66:10:d2:fb:ea:10:6e:cd:5f:
                    2f:af:40:d0:8c:ac:50:8f:99:6d:fa:fb:e7:e4:10:
                    39:15:e7:d8:69:f7:b9:00:d4:f6:79:e1:df:92:15:
                    3f:de:7b:d6:f4:96:99:43:b5:83:78:b8:78:cc:2b:
                    54:dd:40:4e:3e:49:cf:22:b2:71:e3:8e:47:c0:3c:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D9:4C:9F:56:BB:18:35:6A:A6:4E:97:0C:AD:1A:56:A1:DA:69:87
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dNlMn1a7GDVqpk6XDK0aVqHaaYc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e1:87:b3:0c:6f:90:bf:d3:aa:c7:d8:51:85:e7:d4:8d:3c:
         83:a7:41:0f:b6:90:b0:43:c6:75:aa:d1:6b:2a:c0:64:5c:90:
         9e:84:be:1b:4d:4a:dc:c7:42:f2:f8:80:0c:a1:d8:ea:2f:01:
         d2:f1:1c:9a:9e:11:2e:e2:6a:32:86:b5:6d:83:20:fd:52:12:
         47:ef:d7:30:bd:ac:11:e8:65:5e:6f:ad:61:ff:00:4a:2a:45:
         a1:ad:1f:37:cc:2f:1e:7f:4a:87:92:ef:8d:0c:f6:d6:c2:5b:
         98:03:24:85:cf:02:f8:b0:15:79:ad:04:d3:fc:55:f7:91:62:
         bb:59:97:3b:f1:5d:ba:65:fc:14:5b:1e:2d:45:0e:77:e2:87:
         d5:6e:59:57:c5:66:10:18:f9:51:0c:72:34:93:31:9b:60:8e:
         5f:e8:dc:27:b4:62:a9:46:ff:49:ba:84:53:55:80:66:bb:a6:
         ed:84:ab:0a:a7:f6:d5:ee:03:b9:b7:e4:41:1a:db:df:24:81:
         86:8d:2e:88:03:db:cc:09:05:7d:86:4c:cd:85:f0:f3:ea:dd:
         cb:ad:d6:77:53:aa:42:6a:99:ff:dd:56:b0:d8:e1:53:77:9d:
         86:02:01:03:83:6f:24:ea:46:86:88:89:a3:4a:22:01:a0:82:
         96:77:f2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:57 2025 by rpki-client on console.sobornost.net