Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/f-TAcb0uusWF9YzeNPm39tKGhxQ.roa
File:                     f-TAcb0uusWF9YzeNPm39tKGhxQ.roa (raw, json)
Hash identifier:          xeAp+/zpsPHUsfb8LIvMVv9yU7GPIevNvEUQOfbjI/A=
Subject key identifier:   7F:E4:C0:71:BD:2E:BA:C5:85:F5:8C:DE:34:F9:B7:F6:D2:86:87:14
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0BBD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f-TAcb0uusWF9YzeNPm39tKGhxQ.roa
Signing time:             Tue 01 Apr 2025 01:43:43 +0000
ROA not before:           Tue 01 Apr 2025 01:43:43 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3005 (0xbbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:43:43 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=7FE4C071BD2EBAC585F58CDE34F9B7F6D2868714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:02:3b:27:af:2c:cd:42:97:80:ae:ed:02:f5:
                    f8:26:e6:92:13:8f:b8:0c:5f:27:1c:aa:6e:66:7b:
                    69:d8:d0:b1:03:b5:6c:63:93:65:9c:23:6c:f2:cd:
                    a9:9f:2f:6d:84:b6:50:39:7f:f5:5c:d6:09:86:f5:
                    55:5c:8e:81:3e:84:9c:e0:07:3d:b4:9b:d7:82:1d:
                    5f:2e:b7:cd:c3:b3:d7:71:92:2a:1f:6d:e3:09:34:
                    0f:8d:92:7e:53:8d:2b:0d:2f:5e:cc:dd:d0:d3:b9:
                    66:52:19:11:4e:b6:02:89:f3:95:d3:d1:8a:e4:46:
                    d4:43:ec:1c:8c:2c:b1:fb:77:77:b2:c2:91:15:5f:
                    0d:ac:c0:88:b0:c3:1c:78:3f:41:4e:03:7b:2f:eb:
                    bf:b1:ca:14:1f:fe:39:fb:a3:22:e1:e5:df:b9:d4:
                    a9:5e:1a:c4:c5:4b:a2:1f:86:14:dc:39:1f:eb:d2:
                    8f:77:82:61:de:99:5a:7b:1d:eb:02:c0:ac:71:fa:
                    f2:f3:b0:2a:a3:ff:54:d2:2f:b1:e6:91:c8:89:45:
                    45:99:0c:52:81:95:70:aa:d3:be:d0:fb:1a:86:a6:
                    aa:54:ba:c2:4e:48:a4:af:91:6d:fc:f7:ab:61:5a:
                    76:92:cb:6a:84:eb:64:ac:83:b6:a3:5d:07:5a:19:
                    a4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E4:C0:71:BD:2E:BA:C5:85:F5:8C:DE:34:F9:B7:F6:D2:86:87:14
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f-TAcb0uusWF9YzeNPm39tKGhxQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:68:cd:44:91:d5:43:ae:42:5f:b6:dd:12:8b:a9:85:cc:c9:
         82:b9:4c:a6:c7:86:80:7d:2b:e6:ad:61:af:97:0e:c6:91:cf:
         02:0f:98:16:9d:bf:ca:43:01:4a:c8:b0:6e:1d:1a:44:17:5a:
         45:1f:a4:30:9c:13:9a:b8:07:04:7a:3d:5a:6e:a1:ee:5e:53:
         e5:a6:97:9f:40:37:4b:03:7f:c6:d7:3d:01:03:98:69:47:ad:
         da:8e:b3:c4:17:53:37:69:3c:ff:a9:33:1e:4e:6a:d7:11:9d:
         26:1b:e5:57:31:a1:db:ab:fa:d4:9e:aa:41:6c:9b:af:fa:73:
         c1:f5:16:f2:b3:7b:c0:fe:7f:84:0c:8b:05:aa:2f:0f:e8:c4:
         3f:9c:43:c3:37:81:c5:ae:04:b7:8d:70:af:d0:97:8e:75:d8:
         8b:d3:42:e8:6a:33:3a:cf:74:e2:00:8b:45:6a:70:7c:92:72:
         94:bd:22:cc:4f:59:31:1a:26:03:8d:16:92:c2:b3:03:5f:fa:
         86:7e:bc:fe:c7:85:f6:32:03:25:3e:3c:75:b9:98:72:5c:f7:
         ea:55:ff:78:ad:db:48:77:c3:61:78:68:77:e6:96:a8:1b:21:
         25:5b:a9:1e:0c:6b:c0:ff:b4:64:0f:6a:5e:a5:c6:84:2d:b0:
         f1:6e:53:e9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICC70wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MTQzNDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdGRTRDMDcxQkQyRUJB
QzU4NUY1OENERTM0RjlCN0Y2RDI4Njg3MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRAjsnryzNQpeAru0C9fgm5pITj7gMXyccqm5me2nY0LEDtWxj
k2WcI2zyzamfL22EtlA5f/Vc1gmG9VVcjoE+hJzgBz20m9eCHV8ut83Ds9dxkiof
beMJNA+Nkn5TjSsNL17M3dDTuWZSGRFOtgKJ85XT0YrkRtRD7ByMLLH7d3eywpEV
Xw2swIiwwxx4P0FOA3sv67+xyhQf/jn7oyLh5d+51KleGsTFS6IfhhTcOR/r0o93
gmHemVp7HesCwKxx+vLzsCqj/1TSL7HmkciJRUWZDFKBlXCq077Q+xqGpqpUusJO
SKSvkW3896thWnaSy2qE62Ssg7ajXQdaGaTnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUf+TAcb0uusWF9YzeNPm39tKGhxQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2YtVEFjYjB1dXNXRjlZemVOUG0zOXRLR2h4US5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABT1MwDQYJKoZIhvcNAQELBQADggEBAJVozUSR1UOuQl+23RKLqYXMyYK5
TKbHhoB9K+atYa+XDsaRzwIPmBadv8pDAUrIsG4dGkQXWkUfpDCcE5q4BwR6PVpu
oe5eU+Wml59AN0sDf8bXPQEDmGlHrdqOs8QXUzdpPP+pMx5OatcRnSYb5Vcxodur
+tSeqkFsm6/6c8H1FvKze8D+f4QMiwWqLw/oxD+cQ8M3gcWuBLeNcK/Ql4512IvT
QuhqMzrPdOIAi0VqcHyScpS9IsxPWTEaJgONFpLCswNf+oZ+vP7HhfYyAyU+PHW5
mHJc9+pV/3it20h3w2F4aHfmlqgbISVbqR4Ma8D/tGQPal6lxoQtsPFuU+k=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:58 2025 by rpki-client on console.sobornost.net