Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/ucLnLB-OnNXJ5rn9FADqN8YGxj4.roa
File:                     ucLnLB-OnNXJ5rn9FADqN8YGxj4.roa (raw, json)
Hash identifier:          DkgGRBDToPP1fqMqqt356eBNizFUzzsaWYf3AYdg5cY=
Subject key identifier:   B9:C2:E7:2C:1F:8E:9C:D5:C9:E6:B9:FD:14:00:EA:37:C6:06:C6:3E
Certificate issuer:       /CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Certificate serial:       47
Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/ucLnLB-OnNXJ5rn9FADqN8YGxj4.roa
Signing time:             Tue 01 Apr 2025 01:30:00 +0000
ROA not before:           Tue 01 Apr 2025 01:30:00 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     24289
IP address blocks:        103.18.60.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85
        Validity
            Not Before: Apr  1 01:30:00 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B9C2E72C1F8E9CD5C9E6B9FD1400EA37C606C63E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ad:03:00:5e:e2:c3:88:19:c6:90:d1:2b:62:
                    ab:39:17:02:10:a5:10:a4:34:85:df:94:5d:c9:56:
                    ef:a6:bd:50:2e:1b:9f:a9:2f:43:11:6c:66:13:a7:
                    f7:6d:17:7f:67:f5:7d:1a:77:7a:25:6f:28:b8:19:
                    4e:15:62:cc:ff:0b:e9:02:7d:6a:0b:7c:74:ef:2f:
                    c8:93:64:b6:64:ef:fc:94:f6:03:49:45:6a:1d:3d:
                    3a:15:83:c0:cd:9b:55:e3:0a:a2:79:75:8f:f7:f3:
                    ea:26:62:4d:8e:af:4d:44:8a:a1:a2:b2:32:8a:57:
                    74:89:75:0b:78:4c:38:c6:d4:f5:f6:a7:7e:8f:be:
                    1d:b7:4b:f9:c4:78:c5:70:e9:4a:b3:f6:98:93:47:
                    57:b5:2c:c2:64:ee:2d:b0:d2:ed:b6:5a:e2:cd:69:
                    f6:b7:e6:78:68:e2:c6:59:0f:79:c4:c8:09:fd:b1:
                    3e:2e:c7:83:07:07:db:14:2b:4d:70:b9:85:18:bb:
                    73:f8:92:8f:1d:49:cb:1c:65:e5:9d:31:28:6e:5d:
                    6b:47:25:00:61:85:dd:e8:33:f7:51:a5:fd:dd:5d:
                    00:d9:c5:b4:4d:29:e1:64:6e:dd:d9:b2:8a:78:b4:
                    4a:71:cf:a4:bd:9e:ab:30:33:dd:b4:8c:fc:9e:71:
                    ed:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C2:E7:2C:1F:8E:9C:D5:C9:E6:B9:FD:14:00:EA:37:C6:06:C6:3E
            X509v3 Authority Key Identifier:
                keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/ucLnLB-OnNXJ5rn9FADqN8YGxj4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:78:da:7d:dc:79:86:89:d5:56:a3:88:9a:38:7e:19:de:
         2d:3b:0a:82:bf:3b:b6:ae:43:a2:49:35:d3:a6:ca:4f:9e:72:
         1e:fb:89:07:eb:3e:84:c8:9f:7d:5b:b8:cb:7f:6b:74:98:66:
         58:6a:3b:38:56:b7:6e:a6:68:e5:de:80:9a:8d:06:31:6e:6f:
         55:7b:9e:14:71:bc:a2:75:61:2d:99:5c:c8:96:3b:fe:1c:4c:
         af:dd:e7:f3:82:95:12:6c:74:53:17:15:a9:7e:3f:96:d1:ea:
         76:b2:48:15:0a:9d:6c:37:b6:41:80:dc:77:47:36:18:53:0a:
         21:b3:37:94:2c:43:9e:8a:30:52:2f:e3:2e:6a:9c:69:0a:0f:
         cf:fd:5e:9f:39:d5:07:3f:81:2f:ae:e1:51:cd:d5:54:a3:5a:
         30:6d:61:07:2d:e3:d1:ce:d7:e2:f6:d9:8c:72:80:54:79:c2:
         66:60:fa:0a:5b:4b:bb:cf:f3:f7:cf:1f:63:b7:4d:d4:64:54:
         e0:31:91:e8:14:56:d6:73:4e:30:8d:49:14:a8:39:f8:17:12:
         4f:b2:3d:64:fe:48:c9:28:67:b8:73:7a:24:22:cc:5f:e8:ad:
         8d:51:99:dd:0f:fd:f2:9d:52:35:8a:4d:b4:03:1c:46:79:a6:
         c5:7c:7f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:59 2025 by rpki-client on console.sobornost.net