Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-S7obF3gMRP3KC79PpfKfcQTSBU.roa
File:                     -S7obF3gMRP3KC79PpfKfcQTSBU.roa (raw, json)
Hash identifier:          8VSq5pNrmb+1C9mda71pVNJwazJH5C8ZX/OpKIIXnUU=
Subject key identifier:   F9:2E:E8:6C:5D:E0:31:13:F7:28:2E:FD:3E:97:CA:7D:C4:13:48:15
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1263
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-S7obF3gMRP3KC79PpfKfcQTSBU.roa
Signing time:             Sun 01 Mar 2026 03:00:29 +0000
ROA not before:           Sun 01 Mar 2026 03:00:29 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4707 (0x1263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:00:29 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F92EE86C5DE03113F7282EFD3E97CA7DC4134815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:69:4d:f5:82:30:35:5b:8b:ad:8a:5f:65:fe:
                    c4:2c:bd:15:60:c7:59:bc:b4:df:79:85:9c:b2:65:
                    8c:aa:62:ca:8c:09:5c:83:84:9d:2f:79:6f:1c:f2:
                    02:e4:2e:6b:ac:07:ea:14:5f:f9:36:0c:a7:69:ae:
                    93:47:84:dd:53:6c:f0:26:a1:94:1f:a1:3c:2c:82:
                    a5:27:38:c2:fe:fb:35:9d:ca:cb:62:af:af:b9:9c:
                    e1:81:cd:e2:c7:d2:a4:d7:b9:c1:42:35:78:8b:c9:
                    59:db:44:e5:7b:43:b8:52:40:2f:21:ee:18:b0:f3:
                    6e:9f:e4:28:69:1d:22:ff:91:d9:d1:22:8c:3c:22:
                    5e:77:71:b0:b2:9a:bc:4a:bf:33:c6:98:74:42:64:
                    04:7e:27:cb:62:e6:7f:3d:a3:08:9e:d5:e4:ee:86:
                    be:8d:0a:b9:6b:01:ce:21:9d:e3:71:79:70:b5:ae:
                    84:47:f1:91:a3:70:82:1f:f6:f6:c2:ae:75:e3:0a:
                    3a:98:25:76:9f:be:02:f2:24:46:e7:e2:6a:31:17:
                    f6:b4:e2:c2:4c:9d:93:53:00:a7:91:fc:29:cc:a6:
                    5b:a7:58:c1:7a:84:2e:f9:08:14:0f:5c:12:24:14:
                    a0:33:08:fa:6a:78:63:a0:49:de:04:8f:b6:3e:e6:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2E:E8:6C:5D:E0:31:13:F7:28:2E:FD:3E:97:CA:7D:C4:13:48:15
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-S7obF3gMRP3KC79PpfKfcQTSBU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:18:c6:fa:5a:8f:3e:95:66:b1:ab:80:0a:f9:85:6c:51:5b:
         1f:7c:6b:66:5a:02:18:9c:e7:46:15:0d:35:df:fa:40:9c:f6:
         74:21:42:87:2c:06:62:f3:bb:20:09:79:61:61:dd:cf:31:b4:
         d2:1e:ae:90:f1:1f:0b:0d:4b:21:0e:3d:c8:c4:24:c8:b1:2f:
         28:e8:86:37:73:7c:ff:10:81:1b:c6:a0:a2:11:18:e8:58:d5:
         6d:db:4a:f8:ca:4c:fd:a0:87:b7:34:d5:ad:10:af:ed:36:8d:
         95:a8:e3:af:00:98:da:cc:fc:d5:34:79:60:d6:52:3f:d9:9a:
         cc:9e:27:28:b7:b1:2c:ee:32:c7:9d:e2:5a:6d:ba:13:2d:64:
         41:dc:e0:62:26:2f:da:68:c2:c0:6c:be:19:ae:f4:86:02:00:
         c0:ef:dd:b2:84:a1:de:48:c7:4f:d8:d0:b7:8f:cd:d0:8c:52:
         70:d3:6d:93:da:5c:06:ea:05:1d:04:d2:86:d3:7c:f0:3b:c7:
         e4:94:c0:c2:38:19:46:84:15:d7:20:e4:57:ee:14:f2:1c:1b:
         e0:71:72:5d:da:b8:56:2c:dc:86:23:eb:2d:a0:94:8d:c9:64:
         42:a3:85:8f:ce:a3:cb:66:03:c2:f9:fc:6a:ab:f5:b3:1b:ff:
         b4:96:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:04 2026 by rpki-client