Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7RFj9kS1_YFYbwNV8D3c2sCjGUc.roa
File:                     7RFj9kS1_YFYbwNV8D3c2sCjGUc.roa (raw, json)
Hash identifier:          k7VsmPKu6JUEFQcS8G7hUMBH1/mRCJLZVQN7Jhpp26Y=
Subject key identifier:   ED:11:63:F6:44:B5:FD:81:58:6F:03:55:F0:3D:DC:DA:C0:A3:19:47
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E34
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7RFj9kS1_YFYbwNV8D3c2sCjGUc.roa
Signing time:             Tue 01 Apr 2025 02:33:35 +0000
ROA not before:           Tue 01 Apr 2025 02:33:35 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 16:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3636 (0xe34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:33:35 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=ED1163F644B5FD81586F0355F03DDCDAC0A31947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:d5:da:c7:f8:74:33:b2:8c:66:6c:bf:30:
                    04:72:14:ab:3d:c9:0e:eb:9a:72:fb:85:97:cf:b9:
                    9e:21:61:0a:e5:60:af:fb:ab:85:ef:bb:79:1d:5a:
                    ea:f1:08:52:75:32:a3:1d:7f:00:76:0e:3b:56:0d:
                    c4:5b:fe:76:b5:92:ff:1c:2c:1a:ce:80:77:37:d0:
                    45:50:fb:eb:6f:19:3f:2c:d6:34:4e:f6:d3:b3:f0:
                    55:dc:b6:79:36:4e:6b:da:34:54:1d:ca:d4:d4:c7:
                    50:3b:aa:19:df:08:6c:25:90:e0:55:b2:6e:2f:12:
                    7c:52:ea:4a:c6:76:23:14:c2:68:46:33:2f:f8:06:
                    d8:53:dd:ee:30:4d:d1:da:2a:e9:4d:d7:5d:1a:35:
                    be:b1:07:43:c5:d5:f2:ed:01:20:5f:05:d9:44:7a:
                    b5:ab:33:4e:95:6f:a3:21:25:af:5d:a2:63:89:58:
                    54:e1:21:f8:d2:03:c4:c2:24:af:c2:d3:e8:9e:a5:
                    a3:88:e1:19:7b:08:c8:62:d6:9b:8e:a1:28:f1:dc:
                    47:0d:4e:cb:81:26:74:64:9f:61:77:bf:8c:58:c7:
                    4a:50:a9:c8:bc:7e:3a:b2:5e:28:63:83:78:ac:c4:
                    85:1f:f9:3b:ca:77:f6:10:25:c1:2c:d7:5b:6a:52:
                    92:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:11:63:F6:44:B5:FD:81:58:6F:03:55:F0:3D:DC:DA:C0:A3:19:47
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7RFj9kS1_YFYbwNV8D3c2sCjGUc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:3e:4e:5a:8b:f6:b6:67:d6:dd:3f:89:d8:74:13:dd:bf:34:
         78:2e:68:8c:ea:4c:ff:c8:b7:69:e5:97:71:9c:6e:00:c2:69:
         53:a4:95:e7:54:b0:a2:f2:58:0c:04:08:f5:0f:0a:80:51:8a:
         79:9e:e5:29:82:4c:62:87:83:4e:14:8d:47:70:7b:30:7d:28:
         cb:cb:d5:7d:6f:a8:c0:df:43:84:0f:ec:a7:81:df:c4:92:7e:
         39:39:07:df:e7:01:e1:b3:b9:78:a6:50:62:e4:5e:a9:43:5d:
         e9:03:31:b2:f9:4e:2a:84:ff:8b:1c:92:72:73:da:cf:56:35:
         e4:8f:73:dd:f6:92:cd:67:cf:18:db:8b:b3:0d:30:df:66:75:
         78:10:e7:78:56:0d:3a:3a:4b:d6:8f:79:6d:31:ff:c6:ee:88:
         67:6e:c0:a8:7f:35:b4:3f:89:8c:72:80:10:f0:44:f8:53:53:
         b3:34:9e:8b:30:e2:92:43:76:7a:31:d4:14:40:9b:32:98:37:
         1e:7c:d8:0c:fe:9e:fd:f3:56:00:c3:ff:3f:e8:2e:c8:81:db:
         7f:cd:45:a3:fb:53:a5:32:cd:98:31:41:21:d7:5c:06:72:75:
         27:90:b7:90:d3:15:1c:5e:1a:5e:17:be:a2:cb:97:86:2b:5f:
         a7:5f:d3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:42:58 2025 by rpki-client