Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1yxyzkp_K94DnhZ3PvXRPwjasKs.roa
File:                     1yxyzkp_K94DnhZ3PvXRPwjasKs.roa (raw, json)
Hash identifier:          z8bxhuOoAjh8SGbgz/2bE9IiukyIVDN7tMhVxLTwz20=
Subject key identifier:   D7:2C:72:CE:4A:7F:2B:DE:03:9E:16:77:3E:F5:D1:3F:08:DA:B0:AB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11B9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1yxyzkp_K94DnhZ3PvXRPwjasKs.roa
Signing time:             Sun 01 Mar 2026 02:36:25 +0000
ROA not before:           Sun 01 Mar 2026 02:36:25 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4537 (0x11b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:36:25 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D72C72CE4A7F2BDE039E16773EF5D13F08DAB0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:e5:8a:f1:ff:3a:7b:08:b4:19:07:86:61:
                    a1:60:25:ce:32:e2:23:fe:be:53:7a:27:ce:fc:9e:
                    65:6e:3f:be:69:b5:7b:99:c8:8f:06:f6:12:d2:54:
                    6d:15:ea:9a:93:a0:ee:7b:c6:85:0b:88:da:ca:34:
                    10:0b:d7:6a:cc:65:7b:8f:1e:d7:d7:f2:47:70:00:
                    cb:f0:f8:e5:b7:26:30:f7:a1:1d:1d:ec:c4:b1:93:
                    7e:fd:e2:76:26:30:39:6a:fa:5e:4d:97:80:71:21:
                    2a:a0:d3:67:74:eb:cf:7e:6b:ae:53:c2:14:e8:4c:
                    18:07:33:c2:16:1d:80:cf:a4:ef:c2:73:c6:73:a2:
                    61:67:c8:1a:6c:24:94:29:15:31:93:43:f4:cd:dc:
                    97:1c:41:6a:93:85:0b:a4:13:c0:b4:74:a6:76:ce:
                    82:55:55:26:21:a2:0e:65:08:54:59:33:c4:1b:cf:
                    58:04:2f:bf:77:57:f9:67:6c:00:57:12:a8:9f:d7:
                    76:ec:40:68:cd:6c:e0:8b:f3:2e:1d:ac:ee:de:61:
                    1d:fa:51:58:d8:1e:85:fb:f4:5d:f5:b6:69:ad:3d:
                    7a:e8:76:73:26:a4:8d:84:d7:38:53:b8:9c:96:82:
                    98:d3:3f:32:a8:6a:03:88:c4:ac:af:0b:3b:12:7d:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2C:72:CE:4A:7F:2B:DE:03:9E:16:77:3E:F5:D1:3F:08:DA:B0:AB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1yxyzkp_K94DnhZ3PvXRPwjasKs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:ef:26:f2:e6:01:28:93:58:56:47:7d:4c:c8:dc:9c:1a:ff:
         82:96:e8:d9:9e:a1:90:fc:97:1f:4d:35:78:72:20:25:68:16:
         b7:ea:83:32:0f:49:cb:73:34:08:55:a8:27:cb:45:aa:e0:ed:
         32:5d:2a:01:79:41:fb:a2:38:eb:7e:53:8b:ef:d7:7a:e9:79:
         14:9d:fd:0e:16:07:39:b9:47:68:b2:c7:b9:c0:2e:59:a5:4f:
         0c:36:df:c8:b0:09:9b:c5:82:0b:c7:a7:a7:d4:b8:e0:c5:f0:
         83:5c:80:d0:eb:e2:a3:f4:50:16:74:1a:83:91:1c:5d:0b:eb:
         22:a7:ca:52:f0:83:dc:60:34:79:91:da:1f:f4:9f:03:3e:29:
         26:a7:f6:22:bf:7a:f7:2c:25:a7:5a:e0:25:ee:c5:54:d9:14:
         a5:cd:cd:38:c6:2c:c9:43:d8:2c:9b:94:c8:96:19:32:0d:8c:
         df:d0:d5:ee:03:0b:73:5e:4d:5e:2c:ee:a6:54:99:12:95:a1:
         b3:c4:dd:51:58:58:52:bb:1a:56:77:25:26:52:85:c2:12:0b:
         36:80:6a:7f:39:4c:03:2c:6d:a0:4a:10:75:3f:ba:b4:44:4d:
         8f:04:08:2d:99:a8:35:65:ad:ac:4b:c2:5c:cb:7b:47:7b:3b:
         44:c2:9c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:02 2026 by rpki-client