Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/3cyM1kWl18sB6ZEpMUg_EV-x4mw.roa
File:                     3cyM1kWl18sB6ZEpMUg_EV-x4mw.roa (raw, json)
Hash identifier:          XZBZV0QDHFYVA239i1+VNwveN3vJvlcTgtd8UjoTA1s=
Subject key identifier:   DD:CC:8C:D6:45:A5:D7:CB:01:E9:91:29:31:48:3F:11:5F:B1:E2:6C
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       76
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/3cyM1kWl18sB6ZEpMUg_EV-x4mw.roa
Signing time:             Tue 01 Apr 2025 01:29:57 +0000
ROA not before:           Tue 01 Apr 2025 01:29:57 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     63804
IP address blocks:        101.78.4.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Apr  1 01:29:57 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=DDCC8CD645A5D7CB01E9912931483F115FB1E26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:5f:3d:17:1f:7f:da:86:47:ca:b1:ee:5c:
                    9d:7b:8f:9c:fb:3f:09:e3:ce:55:03:ed:f6:6a:6a:
                    c4:72:cd:8b:a3:dd:bc:65:70:6b:a5:15:31:d2:bf:
                    aa:dd:d3:fe:1e:98:97:ce:87:86:3b:1b:74:66:c5:
                    ec:75:7d:b5:cd:d4:71:29:30:27:e7:70:c3:c3:3c:
                    e3:0a:54:67:77:a8:66:a4:90:52:7c:fe:07:3b:40:
                    94:db:70:50:a0:9b:32:a9:08:90:be:07:e9:8b:c7:
                    47:7c:19:61:69:34:47:dd:4f:f1:37:7a:44:fc:f9:
                    9a:d2:3a:ab:73:79:52:35:63:55:b2:42:7b:91:85:
                    99:25:36:ec:22:39:a7:a1:25:ac:6e:80:bd:75:63:
                    f1:2c:50:1f:69:77:56:39:2d:b5:2e:b6:73:b4:6c:
                    55:66:58:9c:ef:31:98:c0:52:36:16:32:0e:4a:bd:
                    2a:6e:e3:ec:7b:78:14:6d:5c:bf:b7:5f:28:50:d9:
                    46:33:29:59:5d:3e:41:8c:15:76:d9:05:b7:e7:ed:
                    7b:2d:8d:6b:f8:c7:3d:a1:87:d2:58:3d:0a:af:e8:
                    81:ed:7e:81:c8:ff:02:58:08:df:71:f6:d4:f5:ec:
                    bd:2f:b1:55:b4:10:77:f6:cf:fa:16:f6:92:dd:bc:
                    40:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CC:8C:D6:45:A5:D7:CB:01:E9:91:29:31:48:3F:11:5F:B1:E2:6C
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/3cyM1kWl18sB6ZEpMUg_EV-x4mw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.78.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:15:b7:bd:f3:c3:93:03:1f:77:33:2e:1a:5e:04:e8:cc:
         68:5a:3e:0a:60:5c:ba:d6:5d:8f:c5:11:0b:5d:ce:31:7d:c7:
         77:d3:ef:18:d5:04:99:fd:46:cc:34:78:12:ce:63:1d:23:37:
         a0:e0:92:05:02:ce:86:95:f5:0c:b9:3f:e2:1a:db:09:b1:58:
         7d:ff:5d:0e:c3:61:83:62:c8:b6:6f:f1:ed:54:44:6a:ec:47:
         b8:10:39:45:3c:8a:cc:86:86:08:45:cf:c6:9e:d2:75:41:8f:
         30:54:b6:8f:a7:1b:a9:e9:17:32:6a:09:37:b2:b2:f7:23:3d:
         e1:4e:2b:36:35:71:9c:33:ba:a1:c5:38:47:a7:1d:5e:7a:83:
         9f:38:44:a5:a0:9e:c5:a9:66:4d:05:31:36:71:30:9c:bf:36:
         bf:ed:ad:bd:9e:c5:1f:81:88:f7:ba:9f:13:dc:64:71:06:7a:
         f5:f1:89:2a:73:b4:a9:70:ec:bd:8e:59:91:d7:a6:09:e1:37:
         e6:ad:0e:fe:9b:58:c6:d4:7c:3f:53:5a:5f:89:c1:3d:62:c8:
         a9:a3:cb:b5:f2:28:a0:ce:f1:a6:e9:91:18:92:35:c6:09:87:
         a0:ba:51:0f:60:ea:48:ba:46:84:94:07:f0:71:e4:5c:95:35:
         e3:79:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:00 2025 by rpki-client on console.sobornost.net