Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/3m1WWwCX9QUSXan91ca9U6GlR80.roa
File:                     3m1WWwCX9QUSXan91ca9U6GlR80.roa (raw, json)
Hash identifier:          u5lplk0u2qm4CVJvpuKUp+9i6DfF6cpM6RFOaoBfhA8=
Subject key identifier:   DE:6D:56:5B:00:97:F5:05:12:5D:A9:FD:D5:C6:BD:53:A1:A5:47:CD
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       72
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/3m1WWwCX9QUSXan91ca9U6GlR80.roa
Signing time:             Sun 01 Mar 2026 01:29:08 +0000
ROA not before:           Sun 01 Mar 2026 01:29:08 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     63789
IP address blocks:        202.9.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Mar  1 01:29:08 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=DE6D565B0097F505125DA9FDD5C6BD53A1A547CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:f0:86:39:b6:eb:ca:99:ce:a9:2b:d3:bd:
                    bf:a4:4d:ee:67:b6:de:a1:ba:19:58:13:a9:43:2a:
                    38:10:f5:a9:ca:a3:8c:ac:cb:0a:9a:a4:28:f1:3d:
                    34:61:d0:f7:23:67:f4:36:47:ce:62:50:12:24:20:
                    7c:73:7c:90:ed:1b:93:a7:39:1f:07:38:0e:bc:84:
                    c4:d3:6b:30:bd:3f:c9:6c:3d:bf:59:74:4f:cf:c8:
                    82:8b:15:21:3f:18:9b:e5:8f:d4:0d:92:2c:0d:f6:
                    19:8b:d5:3d:33:b9:c8:80:ab:f0:65:73:a6:4c:8d:
                    81:d2:06:ad:4b:0e:48:c5:f5:ff:82:01:33:45:66:
                    cf:ac:7f:e8:70:5c:7a:20:45:aa:83:f9:3f:00:be:
                    17:8a:5d:dd:07:c1:fa:90:83:c4:cb:e9:7d:7f:b3:
                    cc:2d:09:40:a2:5b:a5:80:b0:45:0a:0a:78:a7:b5:
                    04:c4:6c:0b:dd:ed:0d:8d:a3:89:d1:39:71:3b:9b:
                    63:05:02:12:94:72:df:67:da:b5:b1:68:f8:42:25:
                    63:20:6f:a0:62:60:18:8d:7a:e2:de:5b:9c:63:19:
                    14:98:a1:fe:66:ec:19:2f:9c:71:96:7d:3d:f2:47:
                    0b:80:02:42:73:f7:74:61:fc:48:65:52:6f:fe:73:
                    ac:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6D:56:5B:00:97:F5:05:12:5D:A9:FD:D5:C6:BD:53:A1:A5:47:CD
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/3m1WWwCX9QUSXan91ca9U6GlR80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:fa:db:db:3f:4c:fe:4e:2b:4a:3f:ce:c4:5c:ab:2c:63:fb:
         46:e1:c0:04:71:3d:01:c7:ba:e1:1a:72:c2:83:55:82:a7:05:
         8d:62:b8:c8:86:fd:44:a3:fb:64:66:9e:ad:1c:23:36:71:ee:
         34:3c:2b:2e:45:ee:37:d5:e0:41:68:0d:e5:6e:24:da:18:2d:
         aa:24:52:a0:e1:9d:53:c8:82:c2:82:3d:b4:c5:5e:62:c1:e2:
         af:a8:69:57:6f:5e:89:64:95:8f:00:5b:0b:1d:eb:c6:74:6d:
         b3:90:ec:63:03:bd:f8:bc:8a:7f:43:b4:e3:1a:36:8d:a0:2f:
         36:b9:9a:cc:cd:67:26:93:fc:63:83:a1:83:7e:b2:36:4f:d4:
         fd:15:69:29:72:94:6b:76:26:0f:3a:ac:c2:c1:27:73:22:87:
         9b:96:3d:6b:78:08:55:4d:4f:04:1b:ad:3d:5a:6f:8a:30:af:
         16:20:e4:fe:a7:83:48:16:df:1c:82:ef:40:31:1f:e4:54:06:
         30:51:f4:5a:9b:8a:a1:33:b4:90:08:aa:11:03:4b:3b:dd:09:
         15:9a:5d:bc:89:42:ab:0e:bd:e8:ff:9e:4a:e9:72:87:3a:96:
         f0:b6:7e:a0:59:05:82:71:48:a8:29:0e:b6:68:39:58:61:6a:
         88:d7:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:20:22 2026 by rpki-client