Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t_i_lWIBFKNiLn6euTu5JlQ196U.roa
File:                     t_i_lWIBFKNiLn6euTu5JlQ196U.roa (raw, json)
Hash identifier:          3AkxVXAOQpYeh8m0Y/wf4JrygdtmdKHEyO+8cZaANqY=
Subject key identifier:   B7:F8:BF:95:62:01:14:A3:62:2E:7E:9E:B9:3B:B9:26:54:35:F7:A5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0C67
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t_i_lWIBFKNiLn6euTu5JlQ196U.roa
Signing time:             Tue 01 Apr 2025 02:00:29 +0000
ROA not before:           Tue 01 Apr 2025 02:00:29 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3175 (0xc67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:00:29 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B7F8BF95620114A3622E7E9EB93BB9265435F7A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:40:df:fc:81:95:e0:d1:e6:cb:88:ff:63:
                    db:22:8b:ad:0e:cc:fc:81:1e:06:31:52:29:74:e8:
                    1d:29:7a:95:23:b3:40:39:61:bb:ac:cc:0f:d6:73:
                    af:af:54:90:7e:ab:9c:79:60:27:41:05:0a:20:59:
                    fb:90:ee:9b:8f:60:64:8c:cf:47:60:f5:32:03:70:
                    65:07:9c:07:57:b4:89:a6:c9:e3:91:08:c5:ec:cf:
                    b9:fa:4f:3b:2b:8f:73:f1:06:dc:a5:c4:e5:8f:73:
                    eb:de:9d:03:39:6f:7d:27:85:6d:1d:ce:a0:62:9a:
                    b0:d4:14:5b:24:4f:58:38:88:ed:2c:c7:37:2f:e7:
                    f1:90:9c:13:52:4d:c1:3d:a8:8d:e1:85:29:e2:89:
                    8e:2e:e9:18:4e:16:bf:f5:f6:11:64:7a:98:e5:46:
                    b3:9c:20:c9:47:ca:ce:a7:24:da:74:d9:2a:f2:86:
                    30:51:13:02:4a:2d:e4:db:74:e0:60:68:74:7d:03:
                    e3:02:9f:f2:05:b5:3d:b4:c3:2a:b1:7a:2e:60:b6:
                    7f:21:a5:fd:e3:57:ef:53:6b:32:26:4d:f1:16:6c:
                    8c:a3:7e:39:be:df:ab:fe:40:71:69:99:12:cf:9c:
                    75:29:e6:0e:bc:06:77:8e:dc:cf:ff:cc:1b:37:4b:
                    3b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F8:BF:95:62:01:14:A3:62:2E:7E:9E:B9:3B:B9:26:54:35:F7:A5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t_i_lWIBFKNiLn6euTu5JlQ196U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2d:dc:f8:e0:9e:0b:da:6d:5a:00:4f:8f:ca:e5:e0:56:29:
         b7:7d:44:58:55:f6:9e:19:12:ea:ee:30:7a:1f:e2:fe:01:07:
         84:7a:72:53:ae:77:5a:cc:d2:63:82:86:21:bf:ed:55:ff:4e:
         c9:f5:a6:ae:a6:b6:05:3e:f3:ba:bd:0e:37:7f:4b:b6:f4:a3:
         36:3b:eb:66:a9:dc:96:06:91:85:e4:18:d7:f0:83:18:2f:ad:
         e0:0b:04:d6:fe:6a:5a:ae:1d:c2:11:b6:99:7d:02:55:43:5b:
         ec:20:fa:84:ca:11:14:05:7b:4e:e3:cf:6b:39:eb:bb:bc:b5:
         de:e3:c1:38:a1:b3:57:66:f8:4a:5c:2e:ac:e0:db:60:f6:ab:
         37:c2:8d:dc:a0:ae:05:b1:15:85:c1:c0:ea:b8:59:31:f8:6b:
         6b:3d:4e:73:04:ff:fc:7b:65:f7:7c:d9:98:21:1f:38:06:3e:
         1a:a0:59:b0:02:ad:6a:56:03:23:e0:6c:06:8b:ef:f6:da:22:
         9f:e2:ae:52:ac:c2:b2:31:8f:d8:2d:3f:dc:1e:32:34:e4:28:
         64:66:f2:e4:98:0d:f0:c7:37:86:a5:91:87:0a:52:6d:1d:ff:
         51:20:40:1e:db:52:c3:ec:2c:cb:32:f4:f7:83:33:6e:b1:51:
         3d:a7:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:39 2025 by rpki-client