Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1B7-v77TR_8BsPOyJAkDWxzBnH8.roa
File:                     1B7-v77TR_8BsPOyJAkDWxzBnH8.roa (raw, json)
Hash identifier:          UaLBgYKC4Nwgkw09slnxZU62c/SG/Azz1JDup/InnXg=
Subject key identifier:   D4:1E:FE:BF:BE:D3:47:FF:01:B0:F3:B2:24:09:03:5B:1C:C1:9C:7F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0CA8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1B7-v77TR_8BsPOyJAkDWxzBnH8.roa
Signing time:             Tue 01 Apr 2025 02:05:37 +0000
ROA not before:           Tue 01 Apr 2025 02:05:37 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3240 (0xca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:05:37 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=D41EFEBFBED347FF01B0F3B22409035B1CC19C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:f3:d3:49:f0:20:14:a7:da:06:3a:71:63:
                    79:a6:ca:b4:72:b4:86:88:99:13:ad:16:b7:6b:1a:
                    e2:8c:a0:c5:b8:54:b3:f5:6e:d1:e1:9d:24:bb:cf:
                    08:e3:be:e7:e3:75:d2:9d:65:0c:e6:38:90:e4:e1:
                    87:a3:b0:23:e2:7b:6a:f4:d4:08:88:a9:3c:96:76:
                    80:b0:5b:3d:0d:87:28:07:62:67:9a:27:6b:f6:c4:
                    7e:6a:c9:28:5d:c7:51:d4:b3:41:de:a3:78:6c:66:
                    ac:e0:55:1f:1b:c1:2f:6d:77:82:34:a8:9c:29:f5:
                    59:f3:67:68:96:63:03:f6:cf:6e:f9:d0:59:80:d0:
                    08:d0:c0:f1:a5:f5:1b:fb:0a:85:89:fd:c2:9c:0b:
                    d1:41:d9:a4:a2:92:5e:b0:88:b7:88:31:32:9c:f6:
                    15:7a:bb:88:49:fe:54:ff:a5:9a:5f:10:06:2e:bd:
                    03:69:fe:47:fb:95:37:e0:63:5a:ef:b1:0c:60:09:
                    b9:ea:2a:20:3a:46:68:e4:b1:b2:32:e9:61:b3:d2:
                    4b:52:81:c7:99:67:36:05:69:66:b5:f3:e1:88:f3:
                    71:fd:32:5f:2c:39:8d:67:92:77:74:84:d1:cf:ca:
                    1a:80:00:e1:0a:1c:24:e9:f3:97:1a:a1:05:66:73:
                    f5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1E:FE:BF:BE:D3:47:FF:01:B0:F3:B2:24:09:03:5B:1C:C1:9C:7F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1B7-v77TR_8BsPOyJAkDWxzBnH8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:dd:b4:11:04:c1:ef:8f:8c:7d:3d:a9:ea:8d:ec:b6:85:79:
         6b:02:10:6a:69:69:74:df:6c:44:84:01:f7:45:de:c7:e4:e9:
         31:6a:cf:92:20:7e:08:5f:07:d5:98:18:b3:86:fd:60:a2:94:
         82:d1:d5:94:e8:ac:f5:4b:2f:ed:d6:b3:19:18:1e:8e:3e:96:
         43:5b:5a:46:43:15:7d:d6:f1:35:bc:b0:98:9f:7c:2b:07:c4:
         69:7f:e5:09:9b:32:44:1e:76:8c:81:2f:c3:52:66:a3:9f:95:
         a8:79:58:f3:cc:23:78:2d:ca:61:30:04:e1:25:73:fc:ab:8f:
         7c:09:05:33:5a:ab:1b:37:da:83:27:f7:79:16:a8:73:e8:04:
         ae:9a:f8:7b:10:ad:62:6b:6e:82:7a:cd:d9:80:c3:b6:79:c4:
         9d:9c:81:7e:9b:a6:dc:39:0e:be:c5:95:cd:2b:49:f2:42:be:
         c2:cd:0f:37:3e:8f:89:71:a8:ca:72:a3:76:19:44:27:bc:8f:
         13:b6:6b:85:c8:3f:d9:cb:4b:82:df:f1:89:db:71:e1:88:ec:
         76:d8:a4:fd:db:40:ea:bc:01:c0:26:93:77:6d:e5:34:e3:74:
         83:69:e0:73:14:c7:15:d7:14:30:61:3a:b3:69:50:7d:ab:f1:
         ed:33:94:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:22:48 2025 by rpki-client