Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/395KxTD8MJh6WC8wTNrzrwPeYD0.roa
File:                     395KxTD8MJh6WC8wTNrzrwPeYD0.roa (raw, json)
Hash identifier:          F0zl9b/eYSo5ePA58c1fZ3HdNV/kCcTuQZK0KGUkqZ8=
Subject key identifier:   DF:DE:4A:C5:30:FC:30:98:7A:58:2F:30:4C:DA:F3:AF:03:DE:60:3D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       121B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/395KxTD8MJh6WC8wTNrzrwPeYD0.roa
Signing time:             Sun 01 Mar 2026 02:48:45 +0000
ROA not before:           Sun 01 Mar 2026 02:48:45 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.76.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4635 (0x121b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:48:45 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=DFDE4AC530FC30987A582F304CDAF3AF03DE603D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:43:d2:f7:8a:d1:11:32:38:39:62:2d:7e:
                    e9:ec:06:8d:97:14:f4:47:6d:0a:df:ec:50:62:d2:
                    46:3a:62:1f:18:bb:b6:c0:45:7c:8a:61:f9:7a:64:
                    af:53:de:ad:15:9a:2c:97:a0:fd:8b:05:ee:a2:38:
                    f1:e1:15:f6:36:a8:53:8e:69:9a:78:f6:a6:e0:65:
                    d7:7e:8b:2f:51:d0:46:85:cb:89:49:1a:cf:ac:a3:
                    df:d7:6c:f5:66:43:37:9c:78:14:2a:6a:96:09:78:
                    b0:84:5b:fe:8d:7c:bb:e8:2e:b3:5d:a3:00:05:bd:
                    39:92:e8:d7:54:3b:68:8a:60:b2:ed:77:17:8e:ac:
                    9a:2b:c7:80:d7:8c:b0:cb:51:b7:08:1f:9e:33:b3:
                    78:a1:9f:ce:84:e6:2f:85:8d:48:23:19:35:04:4c:
                    a1:6c:6b:dc:5c:e1:88:67:1d:95:5d:53:59:38:c2:
                    7f:e0:40:6e:56:72:d1:95:89:8c:cb:ec:15:55:1a:
                    10:c3:be:73:a8:22:28:9c:53:22:44:f1:ce:02:21:
                    94:fe:da:3b:3f:92:2a:e0:e1:b0:a4:17:55:4b:4b:
                    3f:31:a5:6f:d1:32:89:59:84:b2:25:7a:fd:3a:61:
                    26:0f:06:87:24:da:27:3d:60:3b:e8:cf:23:db:4e:
                    23:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DE:4A:C5:30:FC:30:98:7A:58:2F:30:4C:DA:F3:AF:03:DE:60:3D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/395KxTD8MJh6WC8wTNrzrwPeYD0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:4e:ca:15:af:2a:76:af:23:4b:d6:28:79:4d:72:9b:09:a6:
         85:a9:aa:a1:65:99:e9:8c:8a:e2:27:16:cd:8a:ce:23:47:82:
         e0:55:7f:7e:cd:f8:33:98:7a:bc:74:56:e0:e4:42:57:2d:13:
         af:7f:ea:4f:af:d4:2a:24:36:5e:3c:ba:28:7f:2a:dc:21:62:
         92:ec:19:6a:f1:8e:46:8f:9c:64:f8:d2:09:53:c3:2f:6b:d1:
         7f:cd:06:26:ec:fb:79:ef:09:12:51:83:35:e7:36:17:2e:57:
         1c:e0:0d:06:82:14:0e:e0:9e:f0:8d:ab:60:75:50:bc:33:02:
         24:74:5f:97:10:9c:eb:1d:fa:17:17:35:d7:01:d9:16:e4:01:
         f0:ce:ec:51:9a:b8:a2:82:cb:59:66:cf:77:f3:24:4e:5f:a2:
         f5:3d:0e:11:17:bf:21:3b:04:5a:69:2b:d5:7e:85:c7:84:e9:
         be:dd:15:4c:b9:24:56:54:b8:3c:9b:ac:3f:bc:46:4d:cc:5c:
         ef:e3:53:18:aa:7b:7a:ba:86:46:4e:8a:48:6c:be:19:0e:0a:
         7c:4c:a1:27:8b:04:b9:35:ba:ce:22:05:11:59:8b:fc:91:ee:
         57:02:3c:49:02:5f:fe:5a:54:b7:22:d0:fd:c8:f5:2e:0b:69:
         28:2c:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:36 2026 by rpki-client