Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_wM6pDnGAxnr1JKriPUmP3My0t8.roa
File:                     _wM6pDnGAxnr1JKriPUmP3My0t8.roa (raw, json)
Hash identifier:          Vl3lI/pajdYY7fy1QEEK3jBO43ISK8FosvFFDsPTpvc=
Subject key identifier:   FF:03:3A:A4:39:C6:03:19:EB:D4:92:AB:88:F5:26:3F:73:32:D2:DF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0DAA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_wM6pDnGAxnr1JKriPUmP3My0t8.roa
Signing time:             Tue 01 Apr 2025 02:24:40 +0000
ROA not before:           Tue 01 Apr 2025 02:24:40 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3498 (0xdaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:24:40 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=FF033AA439C60319EBD492AB88F5263F7332D2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6d:be:91:70:2d:9c:19:a9:d7:d5:04:55:db:
                    d7:8d:72:ed:8d:ae:6f:0f:02:cc:08:3d:72:ee:bd:
                    b9:f9:f8:0a:df:d8:3a:74:73:07:52:ae:44:13:83:
                    8e:3c:9c:a9:a9:8c:39:7a:9c:80:e1:fd:16:f0:c2:
                    a1:8f:b9:6a:99:4f:a0:c2:ed:ad:23:bf:50:05:69:
                    05:5e:f6:5b:85:ff:8e:5b:38:d0:bf:10:7b:9e:db:
                    de:7b:51:43:fa:28:15:62:7b:96:7f:51:a8:bd:92:
                    ee:3a:39:f3:6a:a4:c1:ea:bd:d2:79:03:19:04:af:
                    1b:2e:29:b3:61:3f:f1:5f:d8:da:07:ef:ea:1f:01:
                    11:23:39:37:52:3c:3e:e6:d2:96:5f:bb:6a:35:c8:
                    f8:77:b7:ff:60:cd:a1:d1:45:57:cc:a8:8a:95:e7:
                    23:67:0e:fe:26:8a:14:6c:26:56:98:b1:5b:2e:fa:
                    18:53:45:69:60:62:a3:30:f1:a9:a6:16:16:d4:d9:
                    ae:a3:3c:c4:bb:41:fa:33:b8:b6:2c:66:80:62:94:
                    4a:ef:aa:c4:04:51:bc:ae:34:3a:88:dd:1b:c6:1f:
                    54:97:b4:01:1d:df:0b:e0:2d:b2:3d:78:f3:a0:6b:
                    18:6e:a2:55:92:ed:65:53:9c:3a:3d:af:1e:91:35:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:03:3A:A4:39:C6:03:19:EB:D4:92:AB:88:F5:26:3F:73:32:D2:DF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_wM6pDnGAxnr1JKriPUmP3My0t8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d2:3b:4b:ff:60:75:f0:db:ee:af:4b:17:06:b2:db:1e:1c:
         65:c2:a2:9a:98:32:4e:5f:38:fc:7c:a4:e7:8e:60:ae:f9:cd:
         e6:8d:69:0b:e0:25:57:c4:fc:43:43:ff:56:48:ed:86:d2:41:
         f9:53:6c:4e:87:18:78:83:3b:50:38:16:bb:04:97:76:62:da:
         d4:0d:09:31:54:cc:ed:f1:c6:8f:6c:73:d2:e5:bc:86:52:d0:
         ac:2a:56:d8:d6:81:ec:47:a6:07:ea:40:30:9b:36:5b:9a:97:
         b5:50:3a:59:3f:a3:61:03:dd:71:32:01:38:6a:b2:99:c6:6e:
         3d:6a:73:b8:20:3f:bb:eb:b7:de:31:17:e2:5f:90:b3:40:ef:
         73:9b:c4:3a:3b:31:6f:87:d3:9b:e8:b5:2a:96:c5:96:3a:36:
         86:e4:85:5e:9a:55:b7:5f:20:3e:f0:0b:f7:76:0d:f6:b4:45:
         99:3a:69:3a:a0:8c:bd:06:ba:87:3e:4b:f5:de:33:a0:ff:f1:
         61:15:b7:15:f8:09:96:8b:24:84:73:00:cd:c2:01:10:f8:e0:
         5f:d9:65:6d:45:1d:e4:5f:93:92:69:33:a2:73:fc:a2:ba:fa:
         3a:40:59:46:fe:88:f4:5e:82:b9:34:9a:85:80:0e:15:1f:5f:
         fd:ab:19:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:36 2025 by rpki-client