Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pUvi6XrJ91rpuM-4L7HXnq-4DyE.roa
File:                     pUvi6XrJ91rpuM-4L7HXnq-4DyE.roa (raw, json)
Hash identifier:          SaxVUpL4SS6F5uPJjxC+7u7Mao9/UCLpLuMEg6KDy+M=
Subject key identifier:   A5:4B:E2:E9:7A:C9:F7:5A:E9:B8:CF:B8:2F:B1:D7:9E:AF:B8:0F:21
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0DB9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pUvi6XrJ91rpuM-4L7HXnq-4DyE.roa
Signing time:             Tue 01 Apr 2025 02:24:45 +0000
ROA not before:           Tue 01 Apr 2025 02:24:45 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        27.230.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3513 (0xdb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:24:45 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=A54BE2E97AC9F75AE9B8CFB82FB1D79EAFB80F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:0e:6e:ff:3b:dd:83:13:7d:90:6f:77:73:
                    b3:14:e2:39:4b:f6:4f:77:02:cd:53:c7:6f:56:7b:
                    93:73:cb:ef:47:15:0c:94:5b:74:64:4c:1c:d0:4f:
                    8c:3b:52:c8:a5:82:5a:ef:9e:a8:d5:da:44:93:ad:
                    9c:32:33:ed:ef:09:5b:82:c4:3b:56:23:13:b8:25:
                    9f:05:00:da:93:cc:cd:f4:37:34:d1:48:4f:35:db:
                    2e:53:22:72:dc:ee:08:d4:e9:98:ab:b8:42:a4:7c:
                    90:ee:ec:86:83:3b:d8:da:33:62:8f:14:4c:a8:6b:
                    a4:cc:ce:89:a5:8a:0d:1b:42:48:b8:86:11:93:32:
                    aa:cc:80:96:90:6e:8a:db:35:0d:e2:bd:f8:ec:38:
                    41:9e:b6:08:c9:63:4b:d1:0f:ce:70:eb:96:0d:fa:
                    5e:6f:44:bf:3c:0c:ab:59:48:5d:b0:73:2f:9c:a9:
                    ce:c6:f3:74:46:3d:86:8d:b7:64:8f:19:21:2c:73:
                    48:a1:ac:42:6e:26:b7:58:e9:16:2b:6d:de:52:e0:
                    cf:c1:ab:82:96:d1:34:99:b8:0c:3d:6f:34:a2:5e:
                    f7:24:c8:6d:99:57:03:87:af:38:13:92:87:cb:5b:
                    af:05:94:62:f6:c2:0a:0d:c8:f1:61:7d:1c:78:63:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4B:E2:E9:7A:C9:F7:5A:E9:B8:CF:B8:2F:B1:D7:9E:AF:B8:0F:21
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pUvi6XrJ91rpuM-4L7HXnq-4DyE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:4a:93:46:67:d1:f5:39:d4:95:80:92:76:0a:6e:48:7f:15:
         2e:1b:d5:6c:67:85:6b:56:80:67:12:50:ef:d6:75:63:d4:5f:
         27:81:f5:6a:c8:ad:6b:35:b0:07:43:fe:d4:bb:91:b2:59:20:
         68:06:70:07:46:4d:f1:30:43:55:4d:9d:06:a8:f9:e6:d6:99:
         d2:9f:34:4e:a8:1f:16:e1:48:b5:24:6e:d6:80:54:fb:6b:07:
         b5:5e:58:c1:3c:72:32:e6:22:7e:22:de:31:dd:3c:8c:8f:0a:
         5c:4d:be:11:e9:fe:7f:34:bf:e4:6e:97:ce:a6:59:24:ab:ba:
         f7:82:61:34:62:84:26:eb:16:5e:10:41:db:d2:49:de:db:ea:
         42:fe:0d:a9:84:81:3c:91:74:08:58:97:6d:6f:b1:f0:34:07:
         8a:30:6f:4c:39:bc:1d:03:82:1b:e1:ae:c2:81:59:97:89:86:
         fa:dc:0e:7a:74:44:17:29:ff:af:d8:d9:f2:82:a0:c6:a6:98:
         28:97:80:f3:7d:c2:f4:76:fd:a9:4e:81:0d:ef:bd:38:fe:37:
         c8:5f:46:3f:16:2d:8a:7a:ab:b0:1d:f8:a5:5f:ac:cb:aa:63:
         2f:81:5f:fe:14:bf:46:de:7b:de:18:86:66:7f:c1:60:e1:94:
         5f:9a:4c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:03 2025 by rpki-client on console.sobornost.net