Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OoeX5wI8B8H-K66Uaj-0Tyxnlfw.roa
File:                     OoeX5wI8B8H-K66Uaj-0Tyxnlfw.roa (raw, json)
Hash identifier:          r2qfzWODzsRGTwbEa7XNGtxss011oPRMJqFpdSPAboc=
Subject key identifier:   3A:87:97:E7:02:3C:07:C1:FE:2B:AE:94:6A:3F:B4:4F:2C:67:95:FC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D72
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OoeX5wI8B8H-K66Uaj-0Tyxnlfw.roa
Signing time:             Tue 01 Apr 2025 02:19:23 +0000
ROA not before:           Tue 01 Apr 2025 02:19:23 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3442 (0xd72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:19:23 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=3A8797E7023C07C1FE2BAE946A3FB44F2C6795FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:69:93:2b:48:68:e4:5d:f3:d9:55:38:54:
                    fa:2e:08:87:6e:2e:c3:c2:03:83:ea:62:96:5f:dc:
                    71:41:dc:68:bd:65:f0:50:8c:85:7e:3b:4f:79:72:
                    9e:b8:95:ea:99:e3:d8:de:34:da:cf:42:82:ed:ae:
                    fc:11:12:74:e2:46:cc:19:98:8f:df:74:fe:a5:80:
                    3d:87:db:e8:bf:7b:8f:50:83:85:55:e0:fb:8b:69:
                    af:22:05:37:09:61:b0:7d:29:05:a3:b1:48:88:1e:
                    5a:d5:42:5e:da:1b:9d:3d:d5:4f:57:6b:ac:58:42:
                    d1:31:b4:4d:de:23:dc:98:e2:65:2e:aa:7a:b5:5a:
                    05:bd:ee:4b:bd:6f:f5:fe:42:ca:24:9d:74:e4:f2:
                    1a:79:f7:81:d3:e3:10:2c:e1:76:33:ad:7f:15:8a:
                    85:a2:7f:94:37:51:3c:ba:ab:94:77:c0:5f:13:c9:
                    ac:9d:a7:2d:06:97:c6:f8:31:94:56:86:11:2a:2a:
                    ea:83:c6:85:9f:b2:ae:06:e8:14:16:c4:42:30:27:
                    9d:fd:4c:16:2d:0d:04:4b:b0:b0:b3:37:56:41:9d:
                    de:66:b2:96:50:16:20:9c:cc:db:26:94:21:63:26:
                    cb:a5:7e:5d:25:e4:3b:c6:fc:d8:ae:ce:f1:a7:97:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:87:97:E7:02:3C:07:C1:FE:2B:AE:94:6A:3F:B4:4F:2C:67:95:FC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OoeX5wI8B8H-K66Uaj-0Tyxnlfw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ad:13:52:2f:de:bd:49:70:b4:13:9b:f6:71:c3:67:15:23:
         2f:be:3f:8f:91:14:09:d5:25:1d:6b:4f:f0:05:fb:2a:81:52:
         cb:b0:8d:88:bc:d1:23:e2:ab:28:ef:d3:d2:d2:da:6b:70:b0:
         0f:12:8b:29:b7:0b:74:52:50:57:b8:e7:c9:4c:66:9c:77:03:
         90:25:e8:70:e4:b3:ba:d8:da:a2:2a:b8:c6:bf:d4:55:95:49:
         c4:c1:6f:ec:86:38:a7:f3:d2:88:fe:c6:84:9e:ef:40:16:1b:
         d4:02:f4:a3:27:d4:65:af:33:27:19:a4:56:0c:06:5f:1a:b7:
         12:7b:cf:c3:be:a1:ea:fa:3a:7a:69:3e:99:a7:eb:c8:80:be:
         3e:b0:4e:50:0c:88:b5:87:f7:26:e2:b7:6f:03:29:99:c3:14:
         aa:fb:71:2e:ed:c1:51:10:d3:a5:5d:e8:c1:07:62:b7:27:bf:
         44:52:64:10:f0:4c:da:2a:81:d8:7b:7c:c3:31:a6:3d:f8:1c:
         40:08:e2:66:95:17:ac:ac:84:76:33:bc:e1:df:fc:fa:58:3f:
         94:11:5d:ef:c3:df:b1:9d:c3:2e:38:c1:47:f5:5c:4f:f0:78:
         d2:7d:69:ea:b5:18:7e:79:b7:06:d6:a7:41:f6:63:33:ab:44:
         e4:a3:99:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:39:42 2025 by rpki-client