Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0MR7EPGrMEgy8wWWQhvktUlFnOw.roa
File:                     0MR7EPGrMEgy8wWWQhvktUlFnOw.roa (raw, json)
Hash identifier:          mIgW/ye9ducoLNWtnNp9NmXvSFiy/BYw62621CZUJmM=
Subject key identifier:   D0:C4:7B:10:F1:AB:30:48:32:F3:05:96:42:1B:E4:B5:49:45:9C:EC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0CD6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0MR7EPGrMEgy8wWWQhvktUlFnOw.roa
Signing time:             Tue 01 Apr 2025 02:09:15 +0000
ROA not before:           Tue 01 Apr 2025 02:09:15 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3286 (0xcd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:09:15 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=D0C47B10F1AB304832F30596421BE4B549459CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:ef:15:20:ff:11:2e:34:71:61:bc:d0:01:
                    6f:86:e4:b5:11:ec:58:5d:84:24:dd:31:16:2b:7d:
                    11:7a:d3:5b:ca:b4:50:65:3a:5e:93:11:84:63:57:
                    2b:cc:19:6d:73:60:ab:dd:bd:79:28:85:89:28:27:
                    dd:c4:f7:8e:03:3b:a4:88:32:5d:59:ac:e5:14:f2:
                    0c:9c:81:18:db:c9:ed:3e:d0:eb:00:a3:b1:5d:07:
                    1c:0b:9e:a9:18:bf:a7:56:50:e6:fd:57:2d:dc:ff:
                    d9:04:48:bc:df:d6:20:7f:5b:89:7e:24:4c:d8:18:
                    8c:27:ac:6a:ef:7a:9b:5f:21:45:bf:d4:80:63:98:
                    47:64:8d:1b:8d:00:42:25:4d:aa:39:79:14:6f:51:
                    ec:80:f8:14:fd:7a:f3:b9:dc:36:0d:1e:8e:67:32:
                    f4:fd:d5:fd:65:1a:fc:06:88:0e:9b:d3:a0:75:d2:
                    34:31:9f:08:44:78:f9:48:c5:0f:25:90:71:3d:b2:
                    2b:e7:95:2a:a8:91:47:c1:a9:55:ef:21:83:19:3f:
                    84:48:54:3c:75:52:39:67:f3:5e:a2:b9:15:c9:c2:
                    00:ab:78:29:62:89:ff:82:c4:1e:f6:85:85:96:7d:
                    37:d6:fc:20:ad:1e:33:e9:d8:eb:db:23:62:a0:b3:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C4:7B:10:F1:AB:30:48:32:F3:05:96:42:1B:E4:B5:49:45:9C:EC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0MR7EPGrMEgy8wWWQhvktUlFnOw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:8d:cd:a8:6b:29:df:d0:f2:25:d1:27:bd:19:67:ae:d4:b3:
         17:b4:ca:b7:70:6d:f4:f7:34:10:61:11:20:60:ec:47:77:9d:
         de:ad:aa:91:a0:99:9f:5d:d6:74:aa:69:73:be:a6:8f:60:c5:
         18:11:1a:c8:92:a8:b4:6e:c2:cb:48:ad:22:5f:81:9d:7b:8d:
         ed:a9:0a:eb:a6:ff:e8:b1:63:58:08:93:0b:59:84:f2:9b:47:
         04:b3:95:a9:f4:2b:2a:15:35:e7:bc:ac:32:b7:e5:20:29:f9:
         da:fa:06:35:5a:46:ae:ba:4c:3c:40:26:bf:b0:b5:6b:a1:6d:
         1c:7d:3f:68:c2:e0:0b:d4:c3:13:1d:80:40:20:16:13:1b:28:
         7f:e9:4c:6b:1c:00:84:50:91:e2:cf:21:da:3f:7b:7a:c0:78:
         5b:ae:83:79:6d:56:03:c6:be:5b:97:03:5f:90:21:a8:8b:a0:
         21:73:67:a2:45:f8:22:c5:4f:ae:21:f3:1a:33:6f:fb:a4:39:
         33:4d:6d:61:c7:3b:64:86:1f:c5:02:03:88:c4:63:2a:98:f8:
         26:04:53:2d:21:3a:32:26:83:79:67:ea:c2:2f:33:c5:7d:9d:
         dc:e5:c2:d4:b7:57:db:d0:5c:bb:ff:42:4a:b9:15:b3:91:92:
         bc:67:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:03 2025 by rpki-client