Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-P3VhDSPow1GicqCBRw7tL71HdI.roa
File:                     -P3VhDSPow1GicqCBRw7tL71HdI.roa (raw, json)
Hash identifier:          dqSErXd0jRLmEQ+ng6TDWZH1GgoJ1N3eDblAom8SVkE=
Subject key identifier:   F8:FD:D5:84:34:8F:A3:0D:46:89:CA:82:05:1C:3B:B4:BE:F5:1D:D2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12EB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-P3VhDSPow1GicqCBRw7tL71HdI.roa
Signing time:             Sun 01 Mar 2026 03:20:46 +0000
ROA not before:           Sun 01 Mar 2026 03:20:46 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4843 (0x12eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:20:46 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F8FDD584348FA30D4689CA82051C3BB4BEF51DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:6b:39:ad:be:27:d9:64:b2:ae:5e:35:be:
                    a6:1a:b3:2b:eb:95:6d:18:64:99:00:9f:c4:46:a9:
                    d2:8f:12:a3:4d:9a:4d:7b:d9:7e:93:ed:da:55:07:
                    80:67:63:ca:77:da:4d:c4:26:b5:8a:0b:91:b7:61:
                    ba:29:32:e6:d9:9d:a3:99:d3:9d:df:3a:c5:4e:90:
                    49:a8:fb:1b:78:40:27:9b:4d:ca:f7:a1:1f:93:bf:
                    d7:8f:cd:39:89:c4:58:ed:16:22:c9:ff:1e:6a:da:
                    88:95:b0:63:16:7d:36:90:70:7c:c0:01:85:9e:ae:
                    aa:aa:c0:a2:d1:1f:2c:11:3b:01:2c:e2:e7:ef:8d:
                    28:be:e3:c8:91:f0:d0:85:39:ed:27:b4:33:9a:ad:
                    56:fd:f8:e5:bb:f7:e3:80:90:29:34:18:6f:dc:63:
                    b7:bb:90:4b:7b:b9:29:9f:f4:77:86:f6:75:2b:59:
                    b0:84:d4:fe:dd:e4:86:79:c9:a2:e6:80:25:b6:93:
                    cc:58:fb:fc:a7:96:0d:03:2f:ce:a6:8b:62:40:12:
                    18:93:d1:a1:4d:a9:04:64:02:b9:de:5e:f2:bc:32:
                    82:a5:cc:38:d5:a7:4d:d5:4f:8e:1f:4c:09:34:08:
                    d3:96:9f:d1:72:04:82:70:e4:f7:ff:a7:ad:cd:3f:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FD:D5:84:34:8F:A3:0D:46:89:CA:82:05:1C:3B:B4:BE:F5:1D:D2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-P3VhDSPow1GicqCBRw7tL71HdI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:a1:b4:55:50:1f:d5:c9:8a:82:ed:86:bb:69:a2:f8:c5:f5:
         ea:42:77:9e:0d:98:f0:42:ee:5e:d4:a1:39:1c:de:e4:65:ae:
         60:f4:d8:f6:77:61:6d:03:ee:16:09:05:0c:7b:74:35:fe:d0:
         9c:5a:72:fd:1d:96:30:58:e8:8b:21:4c:86:05:0e:32:e0:72:
         a4:cf:94:0f:c3:1e:50:4a:84:8f:a4:7d:5e:53:c9:1a:bf:81:
         7e:43:ef:e8:92:07:28:5b:83:e1:12:55:39:e9:f0:47:27:f4:
         5a:b6:3d:86:7a:f6:cf:f9:a4:42:ae:63:be:7c:09:d7:d6:e0:
         02:48:ab:7d:fd:48:0e:e7:63:51:22:30:c9:60:e6:53:c3:34:
         61:72:8f:f8:d2:77:4d:46:4a:f2:b3:72:66:36:21:0d:da:eb:
         3d:30:d0:52:34:df:d1:17:05:52:21:41:10:22:2a:8e:51:09:
         d2:6e:79:9f:76:1d:5f:16:60:7e:c5:2e:2f:17:c0:c5:63:48:
         d5:01:6a:a7:79:c3:68:c2:59:15:35:9e:6d:b2:f1:95:fc:0c:
         0a:ce:8e:30:f3:10:96:a0:9b:3e:e8:08:f4:f7:37:31:7c:1d:
         92:36:ab:03:f5:f8:3b:7d:59:51:3c:6c:60:bd:1c:e7:ab:28:
         4a:46:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:13 2026 by rpki-client