Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NTaFiubeRoFpsDUSL86Hus18ENE.roa
File:                     NTaFiubeRoFpsDUSL86Hus18ENE.roa (raw, json)
Hash identifier:          +WZNFmj1SQ1ReXBt89OeDU4dp0JgD7SlGq7AnDhgBfU=
Subject key identifier:   35:36:85:8A:E6:DE:46:81:69:B0:35:12:2F:CE:87:BA:CD:7C:10:D1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0C23
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NTaFiubeRoFpsDUSL86Hus18ENE.roa
Signing time:             Tue 01 Apr 2025 01:54:02 +0000
ROA not before:           Tue 01 Apr 2025 01:54:02 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.105.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3107 (0xc23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:54:02 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=3536858AE6DE468169B035122FCE87BACD7C10D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:e8:d4:be:57:90:0f:ee:7c:66:f3:97:b9:
                    31:88:ea:27:2c:e7:92:aa:14:68:0b:25:77:95:d8:
                    4e:25:bb:31:33:2f:a7:be:a9:26:44:9b:24:61:22:
                    f3:27:78:b7:8b:17:19:a2:ee:ae:0b:2b:82:64:6d:
                    ed:8d:c9:e5:6a:53:e5:93:ca:df:f6:9c:d5:37:66:
                    c8:78:bd:e1:16:8d:90:ee:85:dd:c3:08:2a:43:0d:
                    06:1e:f4:d7:6c:ca:7f:1a:a7:ce:f9:e4:fb:f8:ce:
                    05:30:0c:f8:71:11:d4:4b:cc:f0:18:32:75:7a:c2:
                    b8:5c:9b:5d:68:49:49:f9:e0:44:01:a2:b8:c3:23:
                    20:7d:8e:d9:42:33:dc:52:86:fc:3c:31:10:f8:56:
                    14:ce:12:0f:bd:d2:e3:f7:8f:f1:a3:f8:32:e0:60:
                    df:8d:25:bf:38:57:e1:c8:0f:d5:06:38:1f:53:ff:
                    37:9c:a5:f6:c9:21:05:ee:ff:6b:d7:9e:2f:b7:24:
                    72:24:a4:e2:a4:a5:ba:63:49:16:f5:7c:45:fe:64:
                    80:9b:af:68:1b:32:8b:76:73:fd:cb:c3:00:d3:90:
                    5c:66:6b:c3:09:fc:1b:80:9b:9b:9a:a6:eb:89:f1:
                    b8:0e:0a:22:7d:45:94:57:dd:33:65:30:83:c0:c5:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:36:85:8A:E6:DE:46:81:69:B0:35:12:2F:CE:87:BA:CD:7C:10:D1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NTaFiubeRoFpsDUSL86Hus18ENE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:22:1b:64:94:49:eb:91:8f:e6:db:4d:6e:40:85:c2:8e:f4:
         2e:d6:78:f7:b2:ed:06:9a:f0:6b:0d:59:2a:6e:20:cd:f0:54:
         d3:7d:6e:05:76:20:35:e8:24:69:e1:dd:92:d6:8f:3b:6c:ee:
         d1:4d:0c:01:72:62:af:ea:ae:6b:c6:e6:b8:57:9a:dc:25:89:
         9b:4d:13:dc:eb:07:40:46:87:54:c6:1f:7f:89:8d:d9:7d:24:
         8a:13:ad:d0:e0:4a:5d:c4:c0:6e:be:71:18:63:44:f7:87:ea:
         56:f2:d9:c7:42:f2:e1:ad:2a:dd:78:cb:f0:b9:61:59:01:7c:
         67:fa:a6:88:a8:90:da:a1:57:3c:71:ca:03:6b:0f:9b:38:f7:
         95:c5:18:af:a0:8e:6a:f3:83:93:4f:80:19:34:6b:0c:35:b1:
         c4:60:e3:97:db:e6:b1:62:c8:6f:d4:5c:f6:43:d6:ec:2e:38:
         78:3a:ea:1a:b5:5f:35:08:a1:8d:4c:9b:34:9e:1e:37:99:19:
         b1:63:ad:15:4e:f4:8d:2c:97:f8:f7:65:2f:63:fe:cb:33:4a:
         1c:c4:59:61:4c:53:c7:71:f5:e9:f0:ba:a7:10:b3:08:ad:26:
         cf:ee:88:a0:0d:ff:05:e3:74:26:ab:f3:ce:d4:25:f6:c2:cd:
         63:9f:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:20:38 2025 by rpki-client