Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rVlSzRY4UmSLwNCpmLS8VOObp98.roa
File:                     rVlSzRY4UmSLwNCpmLS8VOObp98.roa (raw, json)
Hash identifier:          BMyTgaq0lPHa7TI3CJEWfzUfTBQBnKDJqfitSBEiOtw=
Subject key identifier:   AD:59:52:CD:16:38:52:64:8B:C0:D0:A9:98:B4:BC:54:E3:9B:A7:DF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E05
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rVlSzRY4UmSLwNCpmLS8VOObp98.roa
Signing time:             Tue 01 Apr 2025 02:29:16 +0000
ROA not before:           Tue 01 Apr 2025 02:29:16 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.103.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3589 (0xe05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:29:16 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=AD5952CD163852648BC0D0A998B4BC54E39BA7DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:57:7d:b8:13:d8:7b:c0:56:a0:56:0b:a0:d1:
                    6c:15:cc:1c:5b:4a:1c:f8:2e:a1:b1:60:ee:e6:b0:
                    72:b1:7b:97:3d:82:54:33:a1:8e:42:2a:97:6e:ab:
                    44:72:16:a6:e7:b8:61:67:f7:51:22:0d:de:70:2c:
                    9c:9b:f7:13:55:54:b2:37:9b:b5:65:f8:41:64:d3:
                    d5:a1:84:94:a3:e9:39:f8:20:52:9d:a1:68:de:4b:
                    13:a1:e4:65:bc:32:68:47:3d:fe:d5:2a:6e:88:b1:
                    10:73:be:31:1e:48:14:73:4a:03:13:48:cf:8b:a5:
                    dc:14:19:1a:ec:e6:02:99:65:dc:b7:0b:f7:97:71:
                    d9:e1:d9:fc:ef:fb:f8:ef:d2:6d:3e:6b:6e:b7:d2:
                    97:e8:d4:fd:c1:64:67:c1:b4:a3:1f:40:14:fa:3f:
                    f4:47:31:d8:4a:76:38:7e:c5:8a:72:e6:6c:b6:88:
                    10:19:b2:c8:76:eb:6a:b7:48:62:0d:54:b6:7a:11:
                    5d:77:89:ba:42:e1:72:f1:5d:83:2f:aa:f9:44:63:
                    fe:f8:80:ad:57:75:31:49:9e:e0:ce:e6:2f:54:ab:
                    d3:2e:cc:29:60:1c:7b:04:4e:bb:d2:e8:73:bf:21:
                    fb:b9:7f:cb:6b:3d:8f:39:38:62:ad:d5:37:5d:8c:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:59:52:CD:16:38:52:64:8B:C0:D0:A9:98:B4:BC:54:E3:9B:A7:DF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rVlSzRY4UmSLwNCpmLS8VOObp98.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:0b:b9:1f:6e:fe:89:14:63:ad:84:5e:a7:b3:0b:00:06:5c:
         42:8a:71:9b:65:fe:0c:fc:df:d6:17:e1:a4:7f:d9:99:f5:66:
         80:94:d5:94:99:98:3b:9d:25:d8:15:d4:bf:74:6f:70:87:f5:
         e1:51:f8:72:76:f0:03:7c:24:8a:40:41:5f:bf:f2:c9:ec:a2:
         30:3e:a1:84:91:1d:76:2f:72:26:fc:14:10:d3:f1:88:e4:61:
         bc:94:e2:32:0c:a3:f6:e2:a8:a0:eb:60:99:71:94:f3:fa:c4:
         b2:ce:81:2b:b3:86:67:1e:6f:76:b6:a8:90:f0:a7:df:60:35:
         ec:5c:9d:df:81:96:73:d6:90:94:f4:55:1a:74:00:82:08:e1:
         f6:6f:94:9e:6b:bf:60:21:9e:cf:b4:36:43:8b:d1:02:01:82:
         77:e7:2f:3f:a8:41:f7:2e:ca:a0:26:b1:19:23:d2:fb:59:84:
         fc:b6:9b:09:d3:8c:d8:5e:de:41:74:8a:de:d1:33:a7:38:94:
         ce:27:0b:9e:67:3a:ef:bf:e7:ee:d8:02:ad:32:97:c9:6c:f8:
         14:0e:47:6e:e2:c8:e7:be:3f:0d:50:b5:dc:8c:f4:bf:5a:81:
         75:ae:fc:d9:58:cc:5c:c0:78:32:e3:06:2c:a5:b7:12:86:9b:
         dd:e1:9c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:25 2025 by rpki-client on console.sobornost.net