Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/inCfLkSP5z7Z7iaEp1nH1VgSfrY.roa
File:                     inCfLkSP5z7Z7iaEp1nH1VgSfrY.roa (raw, json)
Hash identifier:          IvFV42XtFflYq89ld+8iIYXap9LhC4212H3lxruIbtA=
Subject key identifier:   8A:70:9F:2E:44:8F:E7:3E:D9:EE:26:84:A7:59:C7:D5:58:12:7E:B6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0DD8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/inCfLkSP5z7Z7iaEp1nH1VgSfrY.roa
Signing time:             Tue 01 Apr 2025 02:27:25 +0000
ROA not before:           Tue 01 Apr 2025 02:27:25 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.96.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3544 (0xdd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:27:25 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=8A709F2E448FE73ED9EE2684A759C7D558127EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bb:af:21:92:cc:8f:bc:cd:fa:22:e2:da:67:
                    52:6b:1a:44:9f:62:57:14:f2:0f:32:25:e4:95:ae:
                    a8:0b:b5:91:bb:68:d7:96:2e:95:42:2d:0c:28:37:
                    e3:2a:ba:8f:f5:a4:6b:e7:17:c1:91:bf:a7:9c:db:
                    d8:d5:22:35:58:2e:bd:65:db:cc:87:47:29:06:48:
                    87:6c:9c:b1:74:e4:70:fc:a3:ff:f6:07:4f:3b:5f:
                    35:b1:50:dd:18:f1:b2:1b:d5:92:1d:15:c6:16:08:
                    0a:75:26:2f:78:0e:bb:0a:3b:bb:30:f5:a2:5d:c2:
                    90:43:ef:41:81:6f:f0:e1:01:f3:90:ae:3a:0c:2d:
                    99:d2:0d:76:f5:16:2f:97:6b:67:35:b1:95:3d:db:
                    c9:f5:b9:53:cb:43:78:64:53:0d:4e:92:97:23:ce:
                    cc:b8:9b:3f:0f:e6:00:f7:1d:73:f1:f0:eb:f0:31:
                    bf:b8:ee:f6:f6:b6:19:d2:a0:10:40:a7:b3:d8:18:
                    61:72:ae:95:85:96:cd:9e:47:b0:7b:a8:cf:d9:81:
                    fc:f0:91:5f:f2:c5:32:37:21:6a:b5:cd:be:65:54:
                    4e:51:ff:79:82:de:df:f6:48:d9:46:e5:14:5a:08:
                    9d:97:b6:7d:28:34:cc:7c:f2:7d:32:0a:21:9d:97:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:70:9F:2E:44:8F:E7:3E:D9:EE:26:84:A7:59:C7:D5:58:12:7E:B6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/inCfLkSP5z7Z7iaEp1nH1VgSfrY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:67:8a:2b:c0:37:03:fb:26:63:02:c5:ad:92:5d:90:9d:0a:
         2e:93:29:90:ae:7d:0f:95:f3:12:ed:f6:e7:6a:e9:5f:f5:26:
         98:5b:63:57:45:48:47:ab:65:59:ef:54:11:c8:76:a2:85:24:
         f9:94:a8:5d:c0:4e:c4:c0:7b:43:24:55:1c:81:71:2d:20:c9:
         d8:79:91:6e:2d:17:ae:f8:8d:21:22:70:ac:7c:4d:6f:85:b7:
         cd:67:4d:81:a9:b8:27:f4:d1:80:bf:ee:ca:f3:55:a7:c4:e0:
         1b:92:b8:ef:2b:5a:ba:ea:e6:5d:8a:52:e7:31:5c:56:01:e6:
         8e:9c:2b:66:03:0c:e6:d9:7c:3e:f4:f4:c8:0a:eb:06:03:d8:
         0a:9b:dd:93:f8:21:69:b5:5e:c0:b5:05:51:83:1d:7e:50:26:
         ab:cf:1e:cb:4b:65:c4:ba:23:50:5b:00:da:37:ee:46:31:c3:
         ab:fa:c9:ab:58:1b:73:d4:dd:5d:48:b2:84:26:39:86:6f:b5:
         b5:3d:11:60:fe:14:8f:95:50:ff:1e:a6:f4:fd:16:2f:32:82:
         e2:0b:da:a3:c5:54:27:36:3d:5e:a6:e4:f8:d9:d3:fb:2c:83:
         c3:22:97:e8:9d:46:86:81:5d:14:6f:16:c9:7c:b0:35:96:8b:
         05:af:ef:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:59 2025 by rpki-client on console.sobornost.net