Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XgzQhy0QBGyM-BV_UluoIRNDLis.roa
File:                     XgzQhy0QBGyM-BV_UluoIRNDLis.roa (raw, json)
Hash identifier:          uwBj9lu8rExXkvQgNIJVZbP/gVei6uQYn+c4fRyR738=
Subject key identifier:   5E:0C:D0:87:2D:10:04:6C:8C:F8:15:7F:52:5B:A8:21:13:43:2E:2B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F2C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XgzQhy0QBGyM-BV_UluoIRNDLis.roa
Signing time:             Tue 10 Jun 2025 11:24:29 +0000
ROA not before:           Tue 10 Jun 2025 11:24:29 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        1.79.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 18:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3884 (0xf2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:24:29 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=5E0CD0872D10046C8CF8157F525BA82113432E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:db:d1:61:47:fd:87:22:d1:68:83:df:c7:
                    4d:d2:5b:82:57:55:cf:ab:48:e8:a9:3a:d3:15:01:
                    70:58:c4:a1:2e:e3:84:f1:86:2d:20:4c:0b:62:45:
                    54:60:c4:94:a5:24:42:55:d3:ad:d7:ce:81:cb:37:
                    15:3d:c4:f2:da:7d:43:37:5f:57:4c:1c:22:03:9c:
                    01:7a:76:67:b1:8d:88:e0:ae:b3:08:b7:3e:98:61:
                    a7:75:8c:dd:a8:96:90:ec:01:a1:6e:4e:ac:6e:8f:
                    86:c0:f3:33:08:ac:9a:86:0c:e4:fd:d5:cc:9b:29:
                    66:2f:73:11:25:7e:aa:0a:a9:ee:b0:a2:7e:57:9f:
                    1f:17:8e:c3:f6:e1:a3:32:dc:a1:c8:98:c0:d2:0a:
                    33:69:6b:de:75:4b:a6:8f:0c:ca:71:0c:5a:77:8b:
                    b7:5b:28:21:4f:51:76:17:ea:df:f5:40:35:54:d2:
                    5b:86:82:e1:4c:53:5d:c7:fa:31:40:31:e2:c7:91:
                    3d:a9:1a:1c:26:d0:07:ec:a6:d9:ab:b3:18:2c:48:
                    86:ae:94:ac:7b:d2:36:4b:69:0d:db:8e:6e:d4:a8:
                    53:5f:87:bb:8d:c2:e4:93:64:0a:8a:d0:d6:cd:71:
                    bb:ee:30:a0:54:23:7f:71:aa:69:81:50:92:f9:18:
                    e7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0C:D0:87:2D:10:04:6C:8C:F8:15:7F:52:5B:A8:21:13:43:2E:2B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XgzQhy0QBGyM-BV_UluoIRNDLis.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:53:32:75:0a:9c:6b:45:d5:76:7b:9c:4c:b0:78:e1:78:d9:
         e5:17:87:92:e6:f2:3a:fe:7b:1c:45:e6:b6:c0:4b:31:21:57:
         15:3c:3c:f8:09:f7:11:95:54:cb:f6:53:a6:41:91:01:5c:bf:
         fe:c4:4d:4d:69:f6:27:ca:b2:2f:d0:0e:fe:a7:60:e6:69:ab:
         49:6f:af:5c:6d:9e:79:9f:4d:f4:a3:fc:4b:36:07:63:a8:9e:
         8a:35:b3:6f:40:5e:f0:0c:da:38:1c:36:92:8b:02:e8:1c:3c:
         97:83:7b:f7:6d:b7:5f:0b:9e:e1:ff:c2:c8:f0:bf:d8:dd:a5:
         3c:de:52:94:4e:4c:d0:1b:d9:10:52:e6:03:66:b5:88:66:af:
         6c:c6:04:13:a4:60:e2:7d:8b:42:55:1d:bb:89:d4:e2:b1:da:
         6c:e4:c7:63:eb:96:36:eb:96:b5:d1:09:1f:d3:70:4a:41:dc:
         af:b8:2f:ee:1e:03:08:1e:fd:7d:fe:17:03:97:41:af:43:5e:
         7e:f1:9f:a0:a8:bb:bf:62:41:21:71:81:78:c7:88:53:ff:b2:
         68:a0:18:5a:6f:9e:9f:1f:92:3b:ab:63:eb:85:0e:91:9c:57:
         90:60:31:12:6d:75:e9:b8:14:3d:d0:8c:43:94:7f:01:f2:b2:
         de:a6:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 20:05:30 2025 by rpki-client