Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/see5Qi0RZLZLYaw7Bt_-SatUQ5Y.roa
File:                     see5Qi0RZLZLYaw7Bt_-SatUQ5Y.roa (raw, json)
Hash identifier:          SA7MQErmJdYSzU5c8rSS92QOxnBy2OeIlIIB7dK1FcI=
Subject key identifier:   B1:E7:B9:42:2D:11:64:B6:4B:61:AC:3B:06:DF:FE:49:AB:54:43:96
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D30
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/see5Qi0RZLZLYaw7Bt_-SatUQ5Y.roa
Signing time:             Tue 01 Apr 2025 02:13:53 +0000
ROA not before:           Tue 01 Apr 2025 02:13:53 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.78.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3376 (0xd30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:13:53 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B1E7B9422D1164B64B61AC3B06DFFE49AB544396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:f8:db:70:02:68:a2:d1:cf:a3:e3:15:50:
                    cf:77:eb:44:e7:de:84:1e:c3:98:fd:59:80:17:62:
                    7c:26:c8:82:0b:90:6c:3c:f3:87:42:1e:0e:7b:32:
                    ba:55:70:bd:2f:ea:2c:ff:9a:29:ce:ae:42:a0:9a:
                    ad:ca:20:84:c7:fe:b7:4c:4e:87:a2:e3:a3:bd:5b:
                    61:67:f0:7d:d9:79:0e:1b:1f:44:65:29:62:46:ce:
                    63:a8:3d:9d:47:04:01:c5:42:61:c8:29:b1:16:fc:
                    73:3c:aa:b3:64:d5:de:d5:b3:71:76:b9:08:36:a0:
                    55:7f:35:51:f4:f7:85:90:07:f7:b2:90:ac:60:65:
                    ad:83:21:60:c7:2f:7c:e6:e4:a0:ec:83:fe:c1:64:
                    6b:a9:2f:d5:61:56:59:34:42:c9:f8:2f:98:a0:f1:
                    43:ce:71:64:db:47:06:1f:e8:54:da:5e:46:4d:32:
                    58:92:7a:e2:ba:df:cf:55:33:89:70:f5:87:96:20:
                    61:86:b3:68:d0:c0:84:95:db:7e:4b:3f:0e:51:e0:
                    bc:88:a6:b0:bd:6e:fe:d0:7f:bc:3f:16:55:da:47:
                    e8:2c:a3:c1:c6:54:7d:e0:4d:ad:3e:da:12:9e:f7:
                    40:5f:d1:76:9b:69:10:4f:30:d0:be:31:74:c4:bd:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E7:B9:42:2D:11:64:B6:4B:61:AC:3B:06:DF:FE:49:AB:54:43:96
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/see5Qi0RZLZLYaw7Bt_-SatUQ5Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:eb:f6:ce:e4:c0:a8:31:a9:34:cd:f3:54:1b:7f:6c:ab:4c:
         4b:af:7f:36:71:94:05:bb:87:a2:23:fe:e4:51:f4:d6:8b:6a:
         34:9a:de:8f:f3:db:68:c4:3b:55:fa:04:13:c4:a9:7d:7d:36:
         51:87:cb:50:93:91:de:97:16:b7:6c:0d:74:fe:e7:81:5e:14:
         22:ff:9b:0b:87:25:a3:66:74:b0:d0:df:80:3b:6b:3e:3a:87:
         5b:0d:fa:d8:3c:82:39:5b:52:7b:d2:58:76:03:7c:74:f0:c9:
         87:3f:3f:92:05:50:93:29:95:7c:45:0c:93:da:7f:e1:f6:34:
         1c:23:72:30:77:c9:aa:b7:07:eb:5e:b1:59:c8:40:61:cc:41:
         e1:6f:7b:38:60:06:c4:cd:46:3f:1a:e9:fc:9e:65:27:14:c9:
         40:74:05:dd:7c:dc:8a:8e:2b:20:69:52:59:3a:87:e4:0c:f2:
         9b:d9:3d:e0:c6:0f:70:a2:a6:ff:62:c0:7c:b0:5f:ff:78:e7:
         d8:8d:57:81:23:43:b9:0f:7a:d8:07:c9:78:46:26:4f:0d:40:
         02:99:c4:e7:76:d9:d8:1e:78:fb:61:2e:8d:d2:0c:f7:38:6d:
         55:af:9e:30:b6:03:b0:ab:58:02:58:cf:b5:7f:6c:50:3d:e2:
         2a:67:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:44 2025 by rpki-client