Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yDgozBOuWqh4CSrwoG--xO2nygA.roa
File:                     yDgozBOuWqh4CSrwoG--xO2nygA.roa (raw, json)
Hash identifier:          o8PY2VvX/YjVgk0jBL19pgdDKumlJ/f8bIzqohgXVO0=
Subject key identifier:   C8:38:28:CC:13:AE:5A:A8:78:09:2A:F0:A0:6F:BE:C4:ED:A7:CA:00
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0C66
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yDgozBOuWqh4CSrwoG--xO2nygA.roa
Signing time:             Tue 01 Apr 2025 02:00:29 +0000
ROA not before:           Tue 01 Apr 2025 02:00:29 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.98.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3174 (0xc66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:00:29 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=C83828CC13AE5AA878092AF0A06FBEC4EDA7CA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:0d:ee:88:49:10:18:07:23:f7:01:03:1c:
                    6a:bd:72:cc:ca:fc:f3:33:4f:42:d8:02:63:6e:a7:
                    ca:df:64:bf:30:97:20:e2:89:ae:de:d8:bb:e6:c7:
                    83:4c:db:53:90:d2:b7:86:be:c2:bf:71:3e:f9:35:
                    f5:dc:c1:74:20:35:16:51:68:64:85:9e:2d:b7:d1:
                    c6:2d:cf:9a:78:95:9f:c5:3b:d5:03:47:cf:4d:4c:
                    f0:9e:e0:88:99:9c:a8:bd:c9:46:e8:1b:f8:09:e1:
                    4a:c3:cd:60:81:e4:a5:55:62:85:09:ad:00:a7:9a:
                    a0:95:5b:f1:a6:ff:ac:63:90:2c:8f:5e:8a:a4:b1:
                    b2:38:bd:f1:61:da:f9:a2:e3:59:f3:b0:34:cc:6c:
                    9a:54:72:fd:28:a7:76:8b:bf:b9:27:3f:e7:7e:d4:
                    c0:d2:4f:f6:d5:ff:7d:c4:c1:ba:7a:bf:ae:99:ab:
                    80:26:d1:c3:64:36:60:40:b6:c2:1d:85:0d:28:de:
                    92:50:09:d3:75:fe:f7:7f:c8:9d:00:78:53:db:10:
                    e2:11:e5:64:0d:80:9c:ae:2c:43:6d:95:c4:6f:2c:
                    ff:eb:de:41:b8:ce:a2:c0:a6:ef:59:f1:4b:ce:71:
                    5c:65:8f:28:a1:66:ec:82:e6:8d:34:1d:f1:55:89:
                    34:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:38:28:CC:13:AE:5A:A8:78:09:2A:F0:A0:6F:BE:C4:ED:A7:CA:00
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yDgozBOuWqh4CSrwoG--xO2nygA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:f8:da:1a:bc:de:f3:e8:67:db:7c:6d:b0:b0:55:5c:c0:60:
         27:06:f7:22:70:98:4f:38:c7:f1:09:95:ff:e9:20:86:59:62:
         de:71:d5:13:4b:30:84:ad:30:49:16:35:d9:fd:da:a2:4a:c0:
         98:fc:56:57:27:a5:d0:35:83:20:72:83:5e:35:12:4c:dd:be:
         f2:ca:81:5b:93:ca:a3:34:ac:7e:72:c1:ad:e1:53:37:e2:c4:
         dd:ce:55:5e:3d:8c:f8:77:ea:ac:97:cd:e1:de:86:c6:67:72:
         88:be:a4:d8:2f:b4:32:97:12:7c:2b:a6:1e:d3:ee:05:59:b1:
         4f:ea:1b:06:fa:a7:ed:c2:e7:b7:aa:e6:53:b8:cc:36:21:cd:
         d7:2f:f2:58:9c:42:cb:46:7a:8e:c2:ae:5f:00:df:2e:56:73:
         c0:ce:a9:22:19:f2:2e:9a:d9:79:81:f3:8d:40:27:90:68:2b:
         34:1e:3e:83:85:fe:7e:b1:86:d8:26:4e:ab:01:8f:d5:39:85:
         d1:ab:74:d7:0f:27:32:68:12:c3:30:c3:a8:93:14:05:ca:39:
         2a:2e:e6:51:65:55:d2:70:29:34:90:3c:b4:57:08:8e:48:6f:
         38:de:d6:81:07:7c:78:50:ae:4e:d5:00:4d:21:29:3e:e6:6b:
         12:d2:79:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:28 2025 by rpki-client on console.sobornost.net