Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9Dipw3nPFFKqiwyDlR0jcrvOc8M.roa
File:                     9Dipw3nPFFKqiwyDlR0jcrvOc8M.roa (raw, json)
Hash identifier:          78KvKM3EsTxpBHZ8MBLAV1Ab0udwPut/BtuYsWEkQ5I=
Subject key identifier:   F4:38:A9:C3:79:CF:14:52:AA:8B:0C:83:95:1D:23:72:BB:CE:73:C3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0B5C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9Dipw3nPFFKqiwyDlR0jcrvOc8M.roa
Signing time:             Tue 01 Apr 2025 01:33:21 +0000
ROA not before:           Tue 01 Apr 2025 01:33:21 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.104.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2908 (0xb5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:33:21 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=F438A9C379CF1452AA8B0C83951D2372BBCE73C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:f4:de:66:8c:5d:f4:d1:f0:cd:68:4c:ba:
                    00:2d:f8:47:ef:f9:19:59:ff:82:14:cf:d4:98:e9:
                    af:d3:ca:22:7a:19:e8:ee:71:ce:c3:8b:fb:ea:41:
                    50:1e:38:da:be:7a:06:78:a4:51:d6:55:72:ad:50:
                    19:c7:d9:02:e5:1c:83:19:9b:ff:12:f7:59:53:f6:
                    5a:b5:a2:ef:91:0a:11:ab:8f:d5:66:fc:14:ec:f9:
                    15:15:f3:70:82:09:03:36:3f:f7:38:13:ac:7a:19:
                    7f:b9:0a:14:88:55:3f:13:66:6c:ef:0b:97:a3:46:
                    e5:34:1b:06:31:b1:1d:cf:fc:c4:a2:14:28:48:3a:
                    d8:2c:5d:f7:b1:62:93:af:2d:b4:1b:96:f7:1b:21:
                    cf:9f:be:ac:85:83:2a:0e:a0:e0:99:b8:77:44:36:
                    1e:56:a8:02:4a:92:17:12:dc:19:47:f2:8b:86:91:
                    e9:91:9d:72:6d:4b:48:df:a4:3f:30:c9:ee:12:68:
                    e4:59:b5:54:0e:74:77:99:fe:26:a9:f0:1a:90:69:
                    b4:38:65:75:90:2f:9e:de:34:a8:94:4d:f2:f4:a1:
                    49:f5:60:ec:c2:af:e7:92:71:c1:9b:19:f5:f6:3d:
                    43:18:03:e3:99:b3:b5:e9:be:7b:8f:da:ae:23:3a:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:38:A9:C3:79:CF:14:52:AA:8B:0C:83:95:1D:23:72:BB:CE:73:C3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9Dipw3nPFFKqiwyDlR0jcrvOc8M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:52:3d:4e:3d:83:29:c9:09:74:e1:bd:50:15:17:50:d5:0c:
         cd:8f:d6:f8:07:a1:00:18:7a:8a:47:3d:fe:aa:d5:3d:4d:d5:
         03:a7:9e:5a:9e:44:d3:c7:b8:8a:69:95:a6:44:60:b4:b2:c7:
         49:dd:d0:78:90:f7:fb:26:82:85:df:65:e7:54:6d:89:4d:07:
         1e:9e:d0:14:b0:8c:1b:ac:ba:ba:33:3a:16:7c:6b:36:0c:dd:
         1a:d0:e3:e9:78:77:b3:09:88:83:99:63:49:a0:c9:73:a7:b5:
         28:11:ea:1a:d1:92:29:37:38:16:2b:1a:ce:1d:ce:82:3a:7a:
         1a:f5:76:cf:db:2c:33:5f:cb:5e:b3:ba:f8:9c:83:28:dd:67:
         a4:38:4f:16:53:06:3b:4b:ce:ce:a3:77:3d:09:c3:b4:05:e8:
         a1:39:80:15:38:a1:38:a9:b8:07:d7:ec:6b:ce:1d:f0:1a:f5:
         4b:b5:7b:42:f0:6e:bb:96:4d:b1:ed:69:88:ea:c4:ae:9d:cd:
         fb:31:9d:4b:29:03:00:50:47:9e:48:fc:34:c8:32:72:d6:4e:
         aa:12:6b:62:11:cf:a9:6b:b3:a0:51:2a:d0:e5:4f:52:90:e7:
         91:b3:95:ac:5e:a8:4f:12:0e:5a:f8:b3:96:18:0b:4f:90:9b:
         e1:f7:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:12:05 2025 by rpki-client