Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mXmMQZHUpBZbhEuZ0036uGkxljk.roa
File:                     mXmMQZHUpBZbhEuZ0036uGkxljk.roa (raw, json)
Hash identifier:          9e5z07HnQOioxj/U/VUSSg3yRgir43RQusFVkbB/A6Y=
Subject key identifier:   99:79:8C:41:91:D4:A4:16:5B:84:4B:99:D3:4D:FA:B8:69:31:96:39
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0BF7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mXmMQZHUpBZbhEuZ0036uGkxljk.roa
Signing time:             Tue 01 Apr 2025 01:51:26 +0000
ROA not before:           Tue 01 Apr 2025 01:51:26 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3063 (0xbf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:51:26 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=99798C4191D4A4165B844B99D34DFAB869319639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:31:c5:97:9a:04:f8:7f:51:7e:55:44:0c:
                    b3:06:3b:95:31:98:ab:8c:f5:3a:49:67:2d:66:17:
                    22:95:cb:ca:cb:ad:0c:fb:e2:37:8d:4f:52:b3:3d:
                    59:79:bb:a8:70:2c:73:7a:44:a3:4e:ca:5a:d1:90:
                    5f:a6:74:a9:b0:62:68:3b:dd:e8:2e:68:02:13:97:
                    c0:f2:fc:de:2e:38:0f:a5:13:1d:1f:58:25:b6:f3:
                    ef:5e:48:a3:72:11:90:10:f0:3e:91:97:33:28:93:
                    f7:61:60:c8:ef:0d:18:24:10:9d:9f:be:53:00:2a:
                    c3:52:08:e7:cd:a8:68:91:ac:48:25:ca:c5:df:03:
                    83:55:b3:7e:ff:31:3e:fc:c0:9b:0d:de:e3:72:02:
                    a7:a2:1b:9e:00:7f:28:db:45:67:aa:de:31:9c:04:
                    af:32:ea:f5:d7:49:ef:41:75:ad:a7:3b:cb:b1:f4:
                    99:60:1a:be:d9:0b:5e:34:6f:14:07:73:06:43:6e:
                    7c:f1:e2:16:77:a2:8c:67:34:e5:ee:d6:59:47:5f:
                    5e:94:c9:da:63:60:2a:58:04:2a:15:c5:17:3e:44:
                    82:0f:11:12:24:71:96:c9:52:66:8e:4d:bb:ae:65:
                    ef:7f:10:49:22:47:a1:8e:28:2c:b7:15:7a:4e:15:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:79:8C:41:91:D4:A4:16:5B:84:4B:99:D3:4D:FA:B8:69:31:96:39
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mXmMQZHUpBZbhEuZ0036uGkxljk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:47:88:96:7d:5e:3a:d1:6b:86:33:1a:8d:2d:85:15:44:91:
         2c:5c:fc:c1:30:45:76:77:d5:20:e2:2f:86:52:c0:57:22:3d:
         be:5b:3e:5c:e8:53:61:80:29:49:94:65:29:8b:eb:13:06:b8:
         c8:74:9f:bd:44:f6:ae:4b:e0:07:2d:75:d0:a9:3a:7b:81:f2:
         f9:6a:e6:2b:ed:f7:af:69:77:12:8d:5b:fd:30:69:14:46:59:
         a3:c1:bd:03:ea:57:34:4a:f6:59:ae:64:99:51:14:6a:8f:61:
         4d:48:52:03:31:b8:93:30:21:3a:88:43:2e:99:bf:7f:4e:cd:
         3c:8b:66:27:4d:27:ab:0f:d1:00:3f:47:d1:2a:5d:27:5e:91:
         2a:eb:02:a6:30:43:82:16:aa:7b:ab:61:9a:65:ea:03:15:cf:
         5d:e7:fc:1e:ac:14:f2:8f:c3:02:64:ab:0a:7a:fb:ec:8e:5e:
         34:27:6f:b7:eb:88:cf:c8:fb:fd:d6:b9:b7:c2:dd:69:0b:15:
         e0:97:85:81:37:01:a8:15:42:e5:11:a8:40:0a:ea:3f:c3:4d:
         43:60:50:79:48:8a:6c:e6:0c:16:9b:fb:be:c0:39:7a:4b:f4:
         11:fb:12:3b:a6:8d:12:67:d7:45:bd:d9:35:03:49:93:0d:21:
         88:9f:5d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:08 2025 by rpki-client