Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/m01SLxWdirmfV6HcMYpXTs-1Qmo.roa
File:                     m01SLxWdirmfV6HcMYpXTs-1Qmo.roa (raw, json)
Hash identifier:          OwOAWlP3S95gOo2h+jVu0cbYSYQ2G7j3WutoWCl1pnc=
Subject key identifier:   9B:4D:52:2F:15:9D:8A:B9:9F:57:A1:DC:31:8A:57:4E:CF:B5:42:6A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D4D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m01SLxWdirmfV6HcMYpXTs-1Qmo.roa
Signing time:             Tue 01 Apr 2025 02:17:12 +0000
ROA not before:           Tue 01 Apr 2025 02:17:12 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3405 (0xd4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:17:12 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=9B4D522F159D8AB99F57A1DC318A574ECFB5426A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:df:24:d6:d9:23:58:f0:a0:6e:fd:d1:8b:
                    da:b4:a0:77:84:06:ae:52:29:92:a7:d3:2f:8f:40:
                    62:e8:64:dc:d2:f3:14:45:ab:38:6a:29:a0:4c:f3:
                    2a:c2:06:11:59:34:7b:8e:66:96:cf:2e:fe:2e:e0:
                    92:95:1a:a7:26:3f:35:50:a8:4c:32:90:fe:ca:57:
                    bd:a6:8d:ed:e5:48:7a:3a:61:99:ae:48:24:ff:83:
                    23:75:1f:80:40:ba:47:16:4f:5e:76:e7:7c:6e:a9:
                    e6:a5:3d:59:b9:b5:dc:72:f1:2f:4d:c2:64:58:33:
                    e3:e8:b7:65:2a:52:f0:83:c7:2c:79:6f:07:e8:85:
                    e3:e6:92:d3:68:52:1b:84:e2:8d:31:ad:0d:7b:e9:
                    67:d5:17:76:3d:5d:a8:30:82:e6:f7:4e:6b:4c:c5:
                    31:25:7d:67:c0:97:bf:88:c3:87:20:59:ff:19:39:
                    f0:dc:d2:33:f6:02:87:1a:93:25:28:54:8d:b1:a0:
                    41:5c:e0:ef:12:10:ab:48:6b:01:b7:c4:5f:f2:c0:
                    be:c8:d7:70:9c:ec:1f:51:e2:f3:e0:42:15:b8:08:
                    dd:4e:d0:6f:88:ea:5a:51:e6:6c:51:c0:f7:bf:47:
                    42:96:41:89:3b:e4:7a:51:ce:de:48:51:b0:5e:50:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4D:52:2F:15:9D:8A:B9:9F:57:A1:DC:31:8A:57:4E:CF:B5:42:6A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m01SLxWdirmfV6HcMYpXTs-1Qmo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:4e:5a:71:e5:a2:24:72:6c:17:0f:b1:64:3c:c8:98:dc:33:
         6c:55:49:23:f4:da:4a:fa:87:f0:3e:3c:e0:30:0f:a8:e6:1c:
         f5:7d:b5:e6:ca:99:f4:35:d1:8a:7a:92:23:f9:58:07:8e:a2:
         7b:da:26:52:6f:8e:1c:f5:c0:6a:a6:fe:97:dc:12:c0:f9:f9:
         4b:86:17:73:c7:46:df:21:1e:40:7f:79:2d:db:ce:82:d0:4a:
         33:e1:98:f1:13:cb:31:b8:4d:1b:ec:c0:e0:fa:ce:21:bd:22:
         3e:ec:96:13:8d:1b:5b:d1:0f:88:2a:d1:88:b7:0c:4f:8b:e2:
         b8:25:29:f1:1b:04:84:4a:c4:3e:f3:45:38:9e:9a:79:11:df:
         83:36:2b:a9:74:bd:ab:b9:09:81:85:df:9f:7b:86:ea:ae:1b:
         79:d3:91:1e:3e:24:6c:ff:0b:50:57:55:8f:d2:63:c1:cf:a0:
         6c:93:f1:9b:1c:40:0a:47:d7:00:0c:b3:f0:e5:d9:9f:8a:79:
         65:97:b8:75:17:b7:fd:33:3d:85:cd:a4:fd:77:e0:4f:f9:fb:
         b9:7c:92:39:19:77:77:79:42:21:2f:3a:6a:0b:17:24:e6:b5:
         cb:df:89:73:91:6c:2b:79:df:60:c7:fc:4d:2c:b5:c1:a3:ab:
         4d:c8:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:44:57 2025 by rpki-client