Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FGVNPcY3_88f_l9aF4gtEe_5CkA.roa
File:                     FGVNPcY3_88f_l9aF4gtEe_5CkA.roa (raw, json)
Hash identifier:          zuBVzMYwxr4wzaJUF4PnAat6QOF/85GGHHkTV8hRFOo=
Subject key identifier:   14:65:4D:3D:C6:37:FF:CF:1F:FE:5F:5A:17:88:2D:11:EF:F9:0A:40
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       69
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FGVNPcY3_88f_l9aF4gtEe_5CkA.roa
Signing time:             Tue 01 Apr 2025 02:29:15 +0000
ROA not before:           Tue 01 Apr 2025 02:29:15 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        146.160.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Apr  1 02:29:15 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=14654D3DC637FFCF1FFE5F5A17882D11EFF90A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:43:a4:d1:10:8f:07:5a:b1:75:28:46:cc:af:
                    ee:67:33:97:2a:e5:8c:fc:77:d7:14:73:5b:19:9e:
                    25:0f:52:46:60:3b:1d:4d:27:cd:73:34:d7:69:d1:
                    e4:5e:be:88:fd:cd:c0:57:2a:68:a7:a9:fb:9d:2c:
                    a2:3a:da:4f:df:68:4e:fd:88:76:26:82:18:41:c2:
                    f5:3f:9b:15:12:67:fc:60:d5:75:22:f4:d8:f3:16:
                    eb:12:f3:b0:60:17:bd:0b:be:03:99:34:f6:3a:9b:
                    6c:e5:61:ff:47:bd:ae:fa:b0:bc:97:38:d1:94:7e:
                    37:5e:c7:3e:a9:6a:d0:c3:f4:f2:1a:6a:56:77:66:
                    7a:f3:c1:e4:29:5e:b0:99:74:fb:2f:a8:27:f0:ca:
                    10:b2:73:22:47:0a:52:cc:c2:23:e9:7f:37:90:d0:
                    dd:e3:92:10:69:e8:1a:4f:11:9a:a6:e2:a9:35:3a:
                    97:b8:81:e7:f1:88:31:0b:cb:a2:7e:ce:a2:f6:93:
                    30:7f:06:51:2a:03:79:b9:01:b9:da:3f:8f:27:e1:
                    bf:bb:b5:b6:22:be:e3:51:75:2d:ab:0f:98:da:5e:
                    d3:38:82:94:cb:6f:1d:5f:03:4e:21:db:99:4f:fe:
                    83:e3:1c:7e:80:5d:49:2b:4e:66:ea:d6:31:8f:9e:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:65:4D:3D:C6:37:FF:CF:1F:FE:5F:5A:17:88:2D:11:EF:F9:0A:40
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FGVNPcY3_88f_l9aF4gtEe_5CkA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:71:a1:dd:01:ad:62:1e:b4:bd:f0:fa:7e:28:73:5f:16:76:
         b9:ee:02:b1:cc:4d:96:8c:e1:3c:87:19:ad:4e:82:67:27:31:
         5d:a5:60:76:1f:01:bb:bf:28:84:1b:b0:e8:54:bf:95:40:21:
         e0:79:e1:12:a5:27:00:83:c3:7b:3e:43:f6:f8:67:db:24:97:
         06:3c:65:45:97:6e:75:05:34:cd:5c:92:d4:74:a2:c4:82:71:
         b7:1f:40:d6:fb:92:08:4a:c2:39:0f:c3:17:19:50:d3:2d:64:
         e0:38:8f:be:26:cc:16:10:70:a4:1a:75:bb:46:f8:dd:94:85:
         20:aa:37:a8:29:0e:9f:59:84:a7:5a:ab:7e:09:67:4a:b4:8c:
         1d:ad:23:4f:20:d7:99:08:e9:de:4c:6b:cf:5a:11:39:32:32:
         f8:f6:72:1d:1a:25:48:bd:24:f9:e1:5e:fb:4a:8d:99:cd:d2:
         78:40:c4:42:ca:de:a9:c3:33:f0:c5:b3:d6:e0:4e:c9:b0:34:
         c2:47:a6:56:53:91:45:9d:50:2c:ce:f9:b2:9f:82:f1:9f:85:
         54:0b:21:b2:35:ce:89:33:43:e5:78:e6:0a:52:93:a7:cb:5f:
         d1:53:46:e3:f9:f9:7c:a6:cc:19:fe:df:a2:21:ff:f5:f4:d5:
         c2:78:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:20 2025 by rpki-client