Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/c12jRkJc4Ajj-4CRK2Imqd2xhZI.roa
File:                     c12jRkJc4Ajj-4CRK2Imqd2xhZI.roa (raw, json)
Hash identifier:          tKKMsuJCcTntFOCj/FuVBw0WnW0b6Kh1aOJXCK41qMM=
Subject key identifier:   73:5D:A3:46:42:5C:E0:08:E3:FB:80:91:2B:62:26:A9:DD:B1:85:92
Certificate issuer:       /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial:       1A
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/c12jRkJc4Ajj-4CRK2Imqd2xhZI.roa
Signing time:             Wed 09 Apr 2025 07:14:24 +0000
ROA not before:           Wed 09 Apr 2025 07:14:24 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     45687
IP address blocks:        103.74.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
        Validity
            Not Before: Apr  9 07:14:24 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=735DA346425CE008E3FB80912B6226A9DDB18592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6b:a1:5c:b0:29:3f:c0:27:8f:1c:73:6f:10:
                    e0:f6:b8:e5:af:87:f4:1c:54:77:b0:29:b0:5c:69:
                    ec:60:1b:9e:2c:42:bc:17:d8:82:37:e6:70:78:58:
                    4b:42:8b:c4:3b:2c:44:25:b8:e5:f3:70:be:69:5e:
                    89:87:da:85:8f:97:d9:49:42:7f:16:3e:6d:f0:26:
                    e8:3e:f4:08:26:a1:b7:5a:e8:4f:2c:0f:39:72:29:
                    0b:13:6a:a8:aa:13:1b:b9:c8:3c:d1:9a:87:a4:30:
                    ca:51:ca:cf:dd:35:78:60:a2:18:d0:c5:3f:86:49:
                    85:d9:d0:89:eb:26:9b:7f:ca:7d:17:a8:45:67:e5:
                    51:6a:9e:d7:ff:d7:d5:7f:72:95:c5:01:44:4f:f8:
                    65:fd:8b:f5:8f:89:da:57:90:9f:f8:57:6b:12:5f:
                    69:2e:e6:b6:1a:ee:97:85:ea:2e:b5:52:80:89:9f:
                    cb:23:c1:29:8f:ed:43:6b:dd:74:79:f5:36:5e:3d:
                    e4:d9:bd:19:2a:d3:52:b6:8b:b5:ad:96:97:b5:72:
                    c1:0f:29:da:41:86:16:c2:85:ac:ff:02:3c:c8:10:
                    9a:82:bc:4f:4c:d1:a3:a4:d1:e4:8a:9c:9e:64:56:
                    51:99:48:49:10:43:46:7f:70:78:68:d5:5e:8f:2e:
                    57:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5D:A3:46:42:5C:E0:08:E3:FB:80:91:2B:62:26:A9:DD:B1:85:92
            X509v3 Authority Key Identifier:
                keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/c12jRkJc4Ajj-4CRK2Imqd2xhZI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:a1:94:7a:af:85:16:3a:fc:10:bd:95:bf:1e:dc:5a:a4:1b:
         b2:ea:69:fa:66:57:af:ae:22:37:7a:17:bb:cc:ff:f4:22:81:
         ae:4e:06:60:6f:a3:29:51:b1:70:4f:2d:aa:55:06:1d:a5:3b:
         a4:4d:50:4e:03:9a:3b:02:2c:b5:1e:2b:3f:5e:74:16:17:da:
         64:e3:10:98:d4:9a:49:0c:99:31:01:be:55:35:7b:e7:84:5a:
         ae:3b:a6:52:cf:15:e0:bc:12:f8:ea:57:26:24:7c:dd:37:b1:
         e3:77:a1:d6:e1:cd:1b:1a:ae:e5:b7:f9:38:d0:65:1e:81:f5:
         a8:f2:99:be:80:03:fc:27:62:5b:5c:cf:5a:95:cd:73:ca:f1:
         74:a6:4b:10:01:5a:46:71:5d:52:7b:eb:a8:29:72:ab:62:50:
         72:09:85:14:c8:be:2d:3f:64:d5:be:2d:c9:20:9b:c7:f4:0d:
         10:b4:fe:53:0f:2e:b4:2e:7a:4d:24:b0:ca:47:ad:8e:f3:f4:
         3f:d8:18:74:ce:79:fb:f1:1a:78:b1:f1:79:63:4a:7d:8b:99:
         c3:df:d1:a8:ab:d9:3b:f6:24:eb:41:25:dd:74:b8:59:60:24:
         63:55:03:40:5f:87:4f:f7:5e:01:75:31:d2:22:7d:09:25:75:
         13:01:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:01 2025 by rpki-client on console.sobornost.net