Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/J6UeQjamMIABQXYNZji5dzC5Pdk.roa
File:                     J6UeQjamMIABQXYNZji5dzC5Pdk.roa (raw, json)
Hash identifier:          +WaOTzS9zifRTM5aEwCflEtYL4WAsIiF2AtPd90Fxq8=
Subject key identifier:   27:A5:1E:42:36:A6:30:80:01:41:76:0D:66:38:B9:77:30:B9:3D:D9
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0181
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/J6UeQjamMIABQXYNZji5dzC5Pdk.roa
Signing time:             Tue 01 Apr 2025 01:30:19 +0000
ROA not before:           Tue 01 Apr 2025 01:30:19 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     2527
IP address blocks:        36.2.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Apr  1 01:30:19 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=27A51E4236A630800141760D6638B97730B93DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:6a:89:1d:11:5b:97:74:c8:0c:52:a8:23:
                    d6:cf:29:0b:50:23:38:be:a2:df:98:e2:71:d5:b5:
                    26:63:cd:be:8b:a2:67:70:2c:8b:90:8c:72:ee:6f:
                    4a:c2:ef:42:a6:41:c4:55:82:95:26:9e:fb:fd:9d:
                    95:f0:f8:80:5a:09:51:55:b2:36:cb:95:56:73:0d:
                    f5:05:4a:a6:ab:ab:d3:28:55:80:d1:30:80:49:38:
                    22:e6:f2:59:4b:d0:c3:2a:7e:76:67:46:11:06:19:
                    28:90:04:ff:d1:1f:70:a8:87:54:d6:19:10:fe:94:
                    c2:28:fa:d9:99:94:f4:86:4b:e6:e4:ed:ed:cc:ca:
                    e2:36:e3:89:ed:5f:ca:a4:40:2e:24:1a:21:45:e3:
                    34:65:f0:06:81:79:3d:bb:8d:be:d6:da:ad:d3:0e:
                    78:bf:03:0e:bc:f7:cc:76:2a:26:79:da:b5:af:48:
                    e5:d8:42:a8:b8:af:4e:a2:e6:f4:1d:a3:cc:7b:76:
                    d4:7c:17:c9:03:43:69:e8:85:78:da:62:73:54:06:
                    4c:64:c4:d3:11:85:e0:d8:97:ee:60:95:3c:a3:89:
                    92:8c:3b:51:21:69:66:bf:ce:e3:4f:3c:20:1c:5e:
                    22:6e:9b:e1:4f:39:59:d9:b3:1a:6a:64:e5:ad:d8:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A5:1E:42:36:A6:30:80:01:41:76:0D:66:38:B9:77:30:B9:3D:D9
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/J6UeQjamMIABQXYNZji5dzC5Pdk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.2.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:65:a9:83:fa:51:2f:32:b6:eb:c9:97:d6:da:fe:3c:40:
         53:ce:c1:c2:91:03:ca:7c:4b:cb:73:2a:dc:af:29:0f:dd:dd:
         14:3e:62:4b:dd:00:1d:d6:6f:7f:8f:02:13:10:24:7d:22:94:
         2b:1b:4b:c3:9e:0b:1a:98:8f:9c:b0:d8:39:17:f7:5d:bd:31:
         39:c5:49:44:a5:eb:ec:51:bd:a0:31:ef:40:59:23:37:d9:3e:
         8c:4a:e5:61:71:62:de:55:00:6e:06:ff:2c:bf:52:67:6a:c5:
         b4:24:a0:cd:3b:43:16:4e:94:c3:31:83:5e:85:7e:81:59:95:
         a0:4b:7a:e9:bb:60:c8:af:39:e6:8f:dd:15:26:a6:c2:54:c7:
         9c:4b:55:a5:6e:7a:74:5c:db:7e:5a:39:e6:d6:71:f9:66:fa:
         39:90:a8:83:fa:63:07:a8:5e:aa:fb:a5:f0:78:3e:ce:3b:34:
         41:d2:f1:be:37:2c:55:20:30:ad:9b:66:b5:88:5b:41:d5:27:
         a0:de:48:39:ef:f8:1e:2c:03:42:2c:41:82:bd:95:a3:04:4a:
         3d:ca:ed:a9:5e:4d:70:16:83:9f:7b:48:dd:5e:4d:5e:08:29:
         39:84:ff:ae:19:bf:40:58:67:b6:e4:cf:98:4b:94:a9:c7:c7:
         4d:24:94:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:38 2025 by rpki-client on console.sobornost.net