Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ioVp0O2Q2Bu-trJKoBaCVn5p7Vs.roa
File:                     ioVp0O2Q2Bu-trJKoBaCVn5p7Vs.roa (raw, json)
Hash identifier:          KQy0QJvyRDjMwQjreoODFXDqEN0pjsCLwcB+FlHJhbk=
Subject key identifier:   8A:85:69:D0:ED:90:D8:1B:BE:B6:B2:4A:A0:16:82:56:7E:69:ED:5B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0DCD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ioVp0O2Q2Bu-trJKoBaCVn5p7Vs.roa
Signing time:             Tue 01 Apr 2025 02:27:19 +0000
ROA not before:           Tue 01 Apr 2025 02:27:19 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3533 (0xdcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:27:19 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=8A8569D0ED90D81BBEB6B24AA01682567E69ED5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:95:4e:a3:9c:2f:51:15:b9:de:ad:d2:d0:36:
                    7a:09:39:87:37:26:32:02:1b:8b:69:cd:ba:19:8b:
                    96:c7:dd:e2:25:04:9f:a8:e2:4e:9f:e9:37:56:2b:
                    6f:de:34:d0:ce:8a:65:28:47:33:94:f5:2d:13:91:
                    81:62:64:21:08:68:46:59:ed:5c:7d:f1:4f:4c:37:
                    15:24:69:e8:33:1b:7a:68:a2:64:36:f1:dd:bf:a0:
                    4f:42:36:19:31:11:ea:30:e0:46:30:7f:dc:c5:8f:
                    c5:5d:b8:70:00:09:54:6f:7b:b2:11:d7:8e:d9:7d:
                    e9:05:24:1b:7f:39:2b:25:98:f7:45:db:74:a5:1d:
                    21:5e:1b:61:72:f8:e9:5a:b6:7b:cc:fb:8c:3b:4b:
                    51:4c:30:2e:b3:83:a6:58:a3:93:d5:76:9a:7e:e0:
                    e7:a1:af:c7:6c:bf:3f:7a:82:a9:e6:70:77:72:84:
                    99:9b:31:d3:bb:c5:cb:19:3d:46:f2:2b:41:ef:5b:
                    cc:d2:39:d4:83:9e:c0:4d:7e:8d:d3:7d:b4:07:4d:
                    87:e2:60:af:d6:5b:f3:e2:e7:f8:21:e3:f7:83:a6:
                    a1:dd:fc:05:36:ff:8c:ac:60:1d:69:fd:9c:ec:12:
                    ca:71:e9:0c:2c:c4:1a:5a:61:3c:79:01:8a:84:e7:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:85:69:D0:ED:90:D8:1B:BE:B6:B2:4A:A0:16:82:56:7E:69:ED:5B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ioVp0O2Q2Bu-trJKoBaCVn5p7Vs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:e9:27:1f:e7:6a:2e:3c:62:f6:aa:b6:9a:1c:b7:8c:5c:05:
         46:38:02:e2:c9:06:0b:92:22:de:ac:75:e7:4a:0e:10:fc:6a:
         af:3a:29:ed:1e:ad:c8:15:35:c9:6e:c7:46:80:5b:3e:e0:7b:
         67:b5:1b:af:98:0e:57:90:bc:2f:f9:e6:d1:11:0e:46:2e:2a:
         26:1b:e3:66:62:cd:fd:2a:38:77:f4:b6:f4:30:ff:99:e9:09:
         8b:b5:71:d0:85:5e:fe:c6:e1:e1:14:69:65:b6:7a:5f:60:c8:
         6a:41:a1:7e:64:16:bd:23:50:6f:b9:d7:96:25:9d:c8:66:73:
         1a:bb:7b:fe:b5:0a:87:6b:b3:33:b7:0d:fe:7d:e6:e6:df:b2:
         53:68:1a:78:91:14:71:e3:48:d5:1d:e5:6c:01:6d:96:24:4d:
         a4:11:d0:54:ff:63:4f:76:db:1b:b2:34:7a:2f:4d:85:1e:40:
         7d:a8:54:89:6a:a2:8f:2d:ea:04:ba:d4:e7:2a:28:0f:05:91:
         16:b4:6e:69:01:7c:2c:ab:28:1f:57:6a:de:5c:80:9e:67:1f:
         af:98:dc:d1:8f:dd:4f:a4:4c:f4:05:5b:65:77:f1:9c:57:5a:
         40:5b:5b:71:17:7c:cd:4f:2e:c3:6a:22:a3:c1:9e:da:50:24:
         4c:60:48:dd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDc0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MjI3MTlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhBODU2OUQwRUQ5MEQ4
MUJCRUI2QjI0QUEwMTY4MjU2N0U2OUVENUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDplU6jnC9RFbnerdLQNnoJOYc3JjICG4tpzboZi5bH3eIlBJ+o
4k6f6TdWK2/eNNDOimUoRzOU9S0TkYFiZCEIaEZZ7Vx98U9MNxUkaegzG3poomQ2
8d2/oE9CNhkxEeow4EYwf9zFj8VduHAACVRve7IR147ZfekFJBt/OSslmPdF23Sl
HSFeG2Fy+OlatnvM+4w7S1FMMC6zg6ZYo5PVdpp+4Oehr8dsvz96gqnmcHdyhJmb
MdO7xcsZPUbyK0HvW8zSOdSDnsBNfo3TfbQHTYfiYK/WW/Pi5/gh4/eDpqHd/AU2
/4ysYB1p/ZzsEspx6QwsxBpaYTx5AYqE57+9AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUioVp0O2Q2Bu+trJKoBaCVn5p7VswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2lvVnAwTzJRMkJ1LXRySktvQmFDVm41cDdWcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBTxAwDQYJKoZIhvcNAQELBQADggEBAHzpJx/nai48Yvaqtpoct4xcBUY4
AuLJBguSIt6sdedKDhD8aq86Ke0ercgVNclux0aAWz7ge2e1G6+YDleQvC/55tER
DkYuKiYb42Zizf0qOHf0tvQw/5npCYu1cdCFXv7G4eEUaWW2el9gyGpBoX5kFr0j
UG+515Ylnchmcxq7e/61CodrszO3Df595ubfslNoGniRFHHjSNUd5WwBbZYkTaQR
0FT/Y0922xuyNHovTYUeQH2oVIlqoo8t6gS61OcqKA8FkRa0bmkBfCyrKB9Xat5c
gJ5nH6+Y3NGP3U+kTPQFW2V38ZxXWkBbW3EXfM1PLsNqIqPBntpQJExgSN0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:59 2025 by rpki-client on console.sobornost.net