Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eNI6FflXcjtFrJq-wQp_A1omIzY.roa
File:                     eNI6FflXcjtFrJq-wQp_A1omIzY.roa (raw, json)
Hash identifier:          EUxsRpcAJdsNgyD8O0l0qALnDKdsOZzDEYZtIILkaoU=
Subject key identifier:   78:D2:3A:15:F9:57:72:3B:45:AC:9A:BE:C1:0A:7F:03:5A:26:23:36
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0B72
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eNI6FflXcjtFrJq-wQp_A1omIzY.roa
Signing time:             Tue 01 Apr 2025 01:36:45 +0000
ROA not before:           Tue 01 Apr 2025 01:36:45 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.106.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2930 (0xb72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:36:45 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=78D23A15F957723B45AC9ABEC10A7F035A262336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:31:4f:d7:e3:b4:fe:ae:af:9a:f6:07:64:63:
                    cb:3a:d1:41:6d:00:b7:d1:42:54:5c:57:de:ba:99:
                    a2:17:cb:dd:77:c8:ef:1b:c3:f3:e9:b8:a8:ff:78:
                    b8:74:fb:40:84:1b:0f:63:d7:b8:5b:2a:43:92:64:
                    16:08:26:f8:17:ae:4c:2a:68:28:97:9a:c5:a4:b1:
                    f3:5d:8f:08:79:22:39:51:0e:58:9d:a7:f9:ae:d9:
                    eb:bc:f0:01:3d:c2:70:de:9e:9e:5d:10:a3:c1:ed:
                    13:e6:27:72:52:66:00:98:28:f4:df:cc:ee:82:3b:
                    5e:4e:d0:7e:8b:c7:92:a9:b6:d4:5f:bc:44:06:39:
                    57:91:7d:0a:8f:29:43:48:b0:60:67:12:1c:66:c7:
                    46:00:5c:e7:9f:f4:13:81:d0:ad:34:c2:c4:66:00:
                    88:09:24:d1:48:a9:8f:e3:55:89:48:0a:17:39:48:
                    32:29:5a:de:fa:fe:e1:45:f4:5a:d4:d3:36:60:0e:
                    86:d8:e0:cc:dd:56:1f:59:73:69:aa:30:ed:ba:0b:
                    21:fd:5b:6e:80:23:df:ec:ad:0c:08:de:b7:80:a2:
                    66:2b:85:86:46:53:f3:af:e5:98:71:b6:4a:82:ef:
                    0f:7e:9d:c9:63:17:a8:43:0a:1d:84:4d:e9:cb:6c:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D2:3A:15:F9:57:72:3B:45:AC:9A:BE:C1:0A:7F:03:5A:26:23:36
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eNI6FflXcjtFrJq-wQp_A1omIzY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:8e:ce:05:d6:5c:78:31:cb:dc:89:b2:18:5c:4c:7e:5e:63:
         f6:1b:19:e9:32:61:79:8f:c1:59:c9:2e:1e:13:02:00:27:ad:
         01:ad:71:8a:35:31:7b:cb:6f:3d:f5:4d:3c:ba:ae:29:94:fb:
         4a:7c:a1:80:e1:c1:8d:5f:90:d3:59:ed:c9:ff:79:a2:07:23:
         44:5c:7b:50:58:f7:b2:48:a2:e8:8f:21:89:ac:c8:9d:24:d2:
         f9:a6:9e:c3:ce:78:28:88:14:61:25:95:2a:80:6e:19:a3:81:
         46:d0:81:06:00:87:88:f7:43:f7:5f:c9:35:d4:0c:c0:0c:cd:
         3a:b3:2c:67:f3:cc:60:a5:79:a6:86:13:72:61:51:df:33:81:
         01:68:75:fc:fb:ee:a6:73:91:10:06:55:01:a5:72:01:a2:df:
         d2:c6:3d:07:5a:6a:2f:1d:81:bb:02:73:fa:84:92:0f:84:ec:
         5b:e2:e2:e8:a4:ee:77:e6:02:48:50:d5:3c:ab:31:cb:5a:17:
         86:1c:d3:1a:fb:8f:fa:cb:5f:ba:98:17:42:2f:3b:f9:e7:84:
         c8:f4:ea:e5:bf:d9:35:33:b1:8d:20:0b:35:73:d1:5a:0d:13:
         97:46:c3:3c:84:f0:3d:b2:2f:48:70:3c:09:02:a0:84:91:80:
         f6:d5:3f:62
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICC3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MTM2NDVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc4RDIzQTE1Rjk1Nzcy
M0I0NUFDOUFCRUMxMEE3RjAzNUEyNjIzMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYMU/X47T+rq+a9gdkY8s60UFtALfRQlRcV966maIXy913yO8b
w/PpuKj/eLh0+0CEGw9j17hbKkOSZBYIJvgXrkwqaCiXmsWksfNdjwh5IjlRDlid
p/mu2eu88AE9wnDenp5dEKPB7RPmJ3JSZgCYKPTfzO6CO15O0H6Lx5KpttRfvEQG
OVeRfQqPKUNIsGBnEhxmx0YAXOef9BOB0K00wsRmAIgJJNFIqY/jVYlIChc5SDIp
Wt76/uFF9FrU0zZgDobY4MzdVh9Zc2mqMO26CyH9W26AI9/srQwI3reAomYrhYZG
U/Ov5ZhxtkqC7w9+ncljF6hDCh2ETenLbM7PAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUeNI6FflXcjtFrJq+wQp/A1omIzYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2VOSTZGZmxYY2p0RnJKcS13UXBfQTFvbUl6WS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExatIwDQYJKoZIhvcNAQELBQADggEBANqOzgXWXHgxy9yJshhcTH5eY/Yb
GekyYXmPwVnJLh4TAgAnrQGtcYo1MXvLbz31TTy6rimU+0p8oYDhwY1fkNNZ7cn/
eaIHI0Rce1BY97JIouiPIYmsyJ0k0vmmnsPOeCiIFGEllSqAbhmjgUbQgQYAh4j3
Q/dfyTXUDMAMzTqzLGfzzGCleaaGE3JhUd8zgQFodfz77qZzkRAGVQGlcgGi39LG
PQdaai8dgbsCc/qEkg+E7Fvi4uik7nfmAkhQ1TyrMctaF4Yc0xr7j/rLX7qYF0Iv
O/nnhMj06uW/2TUzsY0gCzVz0VoNE5dGwzyE8D2yL0hwPAkCoISRgPbVP2I=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:58 2025 by rpki-client on console.sobornost.net