Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/d4jWiOncTSSvSk0M8GQ9RoNqWl4.roa
File:                     d4jWiOncTSSvSk0M8GQ9RoNqWl4.roa (raw, json)
Hash identifier:          pQmrG7iNdgNBluwAzClNwVytjPwAhj7xtZyLZRo5wx4=
Subject key identifier:   77:88:D6:88:E9:DC:4D:24:AF:4A:4D:0C:F0:64:3D:46:83:6A:5A:5E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0C0C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d4jWiOncTSSvSk0M8GQ9RoNqWl4.roa
Signing time:             Tue 01 Apr 2025 01:51:35 +0000
ROA not before:           Tue 01 Apr 2025 01:51:35 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.78.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3084 (0xc0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:51:35 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=7788D688E9DC4D24AF4A4D0CF0643D46836A5A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:18:44:a5:f6:41:71:26:b4:6a:51:bc:3d:
                    11:8c:7c:d3:c2:e4:16:25:e7:f5:a4:83:ab:57:be:
                    6b:c1:8d:24:63:2e:68:2d:51:05:32:c5:ab:fb:79:
                    60:bb:34:87:4b:42:13:b2:da:8f:52:dd:e1:2d:db:
                    f0:2d:d8:1e:8e:e8:fe:00:14:7e:5a:29:15:e5:6e:
                    1a:d1:c0:25:a7:e5:6f:6b:8a:3c:1c:1e:af:5c:cc:
                    aa:2b:3c:ad:1b:73:8f:ec:f4:21:b4:5d:af:14:61:
                    ee:ff:58:eb:26:70:e0:da:11:4a:b6:a0:49:14:cf:
                    a4:07:c4:61:57:e1:93:99:b0:32:ee:06:22:09:0b:
                    d3:50:6e:c1:42:5c:13:7d:6c:63:06:2b:0b:c9:36:
                    4d:27:d9:3c:74:10:33:f7:88:c0:ce:08:e1:f7:b4:
                    d1:84:ed:32:ce:3a:41:c7:c3:45:4d:63:e2:03:52:
                    b3:91:a3:c4:84:40:db:e8:2d:40:27:57:3d:85:ec:
                    7c:0f:24:91:ef:18:77:d8:49:ea:a1:a7:ac:43:70:
                    93:91:24:1a:70:9c:86:5b:5f:05:72:86:dd:e0:d9:
                    3a:76:0a:4d:ee:37:aa:98:61:9b:2b:59:e8:8f:8a:
                    52:5d:fe:f0:42:cd:e7:9a:85:7a:82:87:6c:cc:e0:
                    b7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:88:D6:88:E9:DC:4D:24:AF:4A:4D:0C:F0:64:3D:46:83:6A:5A:5E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d4jWiOncTSSvSk0M8GQ9RoNqWl4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:2f:b7:18:8f:cf:90:f5:3b:d3:37:58:4d:36:4b:81:c4:9b:
         49:d6:49:db:0b:4b:72:62:4c:26:69:8e:7a:a8:59:b4:1d:53:
         81:ac:b0:9a:d0:54:53:b6:eb:d5:8e:17:14:5b:2d:51:ac:b9:
         21:dc:ea:4b:06:61:75:1e:56:86:2e:69:4e:bf:8d:7b:31:22:
         dd:64:6a:49:73:37:89:bb:39:7e:2d:f5:91:b2:2e:9b:e4:d9:
         13:c5:ba:4b:ce:ca:6c:b5:fb:5c:81:16:f7:d2:37:e7:d3:cc:
         74:6b:7e:6d:c4:aa:44:df:36:bb:f6:84:db:42:ac:69:ab:27:
         79:9e:3f:b3:2e:e4:84:ea:b0:69:01:59:00:05:9d:4a:57:ee:
         94:25:f8:80:27:34:b8:f9:45:d4:55:01:7b:6f:48:0c:3f:55:
         fc:e7:21:a9:96:5e:45:e6:72:2a:89:d9:95:16:12:a0:c7:67:
         d9:7c:11:28:94:e6:7e:ff:21:16:30:2d:23:df:c4:d9:85:9a:
         38:5b:b8:75:12:9f:5c:de:32:c2:08:1a:56:fe:86:26:f6:9d:
         af:8f:33:c8:f5:94:0b:7f:14:18:b7:bf:a9:05:c6:92:07:e4:
         97:d9:f9:1d:c9:fd:e5:01:fd:5e:bb:66:4d:7f:78:2c:cd:e6:
         81:f8:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:13 2025 by rpki-client