Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pjn17koJQ9T6w8m8mK9EEsJ9gLg.roa
File:                     pjn17koJQ9T6w8m8mK9EEsJ9gLg.roa (raw, json)
Hash identifier:          1guHWrQMiivrumn3UFLvu4y5x5kjWIKC1bkBkHRppBM=
Subject key identifier:   A6:39:F5:EE:4A:09:43:D4:FA:C3:C9:BC:98:AF:44:12:C2:7D:80:B8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0DB1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pjn17koJQ9T6w8m8mK9EEsJ9gLg.roa
Signing time:             Tue 01 Apr 2025 02:24:43 +0000
ROA not before:           Tue 01 Apr 2025 02:24:43 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3505 (0xdb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:24:43 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=A639F5EE4A0943D4FAC3C9BC98AF4412C27D80B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e6:93:9c:1b:59:90:4b:80:88:26:b0:b2:8d:
                    51:99:c2:1e:b4:39:fa:71:26:da:e8:ca:0f:a9:52:
                    dc:8e:ef:bb:2e:5b:82:70:73:27:ea:fe:c0:a4:b8:
                    f9:c9:1f:cc:2c:00:89:fd:27:1d:ca:f2:c0:f8:ed:
                    64:4c:44:59:b0:93:4d:c3:a6:cb:10:02:c9:8a:30:
                    10:09:57:1f:cf:0c:89:d3:d1:10:22:9f:16:97:ea:
                    30:5d:ab:01:1c:f1:72:71:bf:89:49:cd:b8:9a:88:
                    3f:06:8c:1d:d1:ec:58:1b:66:b9:8e:6a:34:f6:1c:
                    fe:bb:27:5b:6f:62:40:33:94:c5:3d:15:a2:4a:80:
                    73:85:3f:62:44:4b:a7:9b:89:20:53:3f:49:81:19:
                    78:1e:32:b4:f5:7c:be:54:80:4a:5b:b7:79:10:1c:
                    8b:8e:a6:f0:fa:69:58:89:fc:32:ea:1d:4c:eb:a4:
                    4b:ad:29:32:05:ce:b1:c0:4a:c5:8d:5c:d9:7a:df:
                    e1:ac:97:6f:24:3c:6a:3d:a2:5c:94:c6:4b:82:ae:
                    67:b5:98:19:0a:3d:ca:9d:35:46:0c:98:37:ff:9d:
                    19:c0:e8:8d:b6:fa:53:1a:9b:82:94:d3:82:4f:e9:
                    4b:93:3b:7d:63:49:8d:54:6a:7b:9c:11:17:f8:05:
                    72:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:39:F5:EE:4A:09:43:D4:FA:C3:C9:BC:98:AF:44:12:C2:7D:80:B8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pjn17koJQ9T6w8m8mK9EEsJ9gLg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:87:ee:44:4f:b0:5f:70:66:a7:43:c5:60:e9:23:9c:58:fd:
         47:90:f3:58:f4:95:b5:d1:1b:87:bc:35:7b:cb:c1:a7:96:94:
         a4:cb:a3:59:dc:59:1b:dc:0c:5a:8e:88:b0:13:ba:de:ee:07:
         e2:d6:c4:30:8d:cb:06:b6:d5:4e:28:49:bd:ed:c7:0c:be:3d:
         ac:d1:87:02:d5:84:1e:30:19:76:f4:d4:e6:1f:cb:87:0b:c6:
         a1:ad:16:64:7d:09:d4:a3:32:29:0a:67:58:8b:2e:bd:65:da:
         33:8d:93:c9:3d:f7:df:39:12:d8:fc:1c:f2:73:ec:4b:4f:41:
         55:bf:7c:f5:b9:0c:a8:7d:8a:ca:51:24:88:2f:ce:57:43:7c:
         a6:52:8a:1c:18:89:2a:6e:20:dd:27:a4:65:a9:36:33:fd:3b:
         69:ef:32:e5:b1:1c:ed:44:56:87:18:aa:07:6e:b6:9d:5e:df:
         91:a8:6e:71:58:1a:8b:8c:d0:ca:a2:97:58:5d:ce:7b:07:f4:
         81:32:fb:8e:c1:da:f4:f4:7f:db:46:04:fb:5a:ee:15:37:8b:
         13:ae:4f:9f:56:ba:45:9c:a1:ee:0a:ad:6c:be:66:48:7c:30:
         9f:ec:a4:8d:34:ce:0d:99:32:a3:b4:f4:91:5e:be:6e:03:61:
         b6:13:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:24:29 2025 by rpki-client