Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4SgShPbY_WDZ68-sk07yHv7NkSo.roa
File:                     4SgShPbY_WDZ68-sk07yHv7NkSo.roa (raw, json)
Hash identifier:          ij5e9txQSx4nxgvsnYCK/ZvFQKlwpefhaQwOfsMNj8c=
Subject key identifier:   E1:28:12:84:F6:D8:FD:60:D9:EB:CF:AC:93:4E:F2:1E:FE:CD:91:2A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12E1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4SgShPbY_WDZ68-sk07yHv7NkSo.roa
Signing time:             Sun 01 Mar 2026 03:20:39 +0000
ROA not before:           Sun 01 Mar 2026 03:20:39 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4833 (0x12e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:20:39 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E1281284F6D8FD60D9EBCFAC934EF21EFECD912A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:51:f5:a0:b3:b6:b1:23:ef:9c:ed:28:2f:d3:
                    1d:b2:59:7d:b6:91:f8:70:b0:56:b5:93:5b:be:2f:
                    0e:d0:a9:5a:9a:ce:6f:d9:e7:76:95:99:10:83:9f:
                    ca:92:53:50:aa:97:84:fb:05:59:48:d8:60:10:7b:
                    3c:62:93:ef:a0:2c:31:d4:d3:ee:31:09:19:b1:e4:
                    12:ce:16:8f:0e:3a:10:03:62:ff:33:e8:16:c1:76:
                    d4:e5:87:60:70:1c:39:0d:38:67:6c:44:5b:79:97:
                    d6:0a:a3:dd:7a:2d:58:d6:cc:e4:e7:05:9d:d5:cf:
                    d5:54:7b:4f:8f:b2:fa:57:d2:b1:fa:5c:3f:d7:6f:
                    ea:6e:08:97:1c:7c:de:32:16:5f:02:b8:15:e9:40:
                    e5:2f:4f:35:2f:10:0c:21:a0:1b:d8:87:0f:e1:1b:
                    26:99:f9:85:de:37:0b:2b:90:95:bc:4f:39:56:97:
                    a5:5d:f4:c2:be:db:4d:30:e0:72:e7:3f:2b:ca:38:
                    98:66:8c:e9:d3:6e:92:4c:1b:5d:69:eb:46:89:95:
                    c3:ed:30:b3:d3:aa:4c:9b:2d:a2:90:1e:ea:d1:45:
                    50:2a:50:50:29:e5:82:6b:65:2e:ac:3b:54:73:8b:
                    95:2e:cc:42:04:e7:a4:84:67:56:ac:4d:a2:b4:6b:
                    a2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:28:12:84:F6:D8:FD:60:D9:EB:CF:AC:93:4E:F2:1E:FE:CD:91:2A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4SgShPbY_WDZ68-sk07yHv7NkSo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b6:ee:1d:48:bb:98:b0:19:42:34:98:a7:26:b0:4a:7f:5a:9a:
         f9:dc:06:17:2d:85:c4:5c:eb:65:a8:a3:b4:c3:77:b5:78:7a:
         b5:f0:33:72:5b:ee:ef:24:d3:bd:d0:4d:52:e3:3b:e8:86:15:
         67:6c:ab:10:1c:a6:c7:f6:35:45:6b:a3:11:11:b3:30:39:9f:
         70:27:0c:e4:a8:ac:18:85:0b:79:0b:60:9b:c9:b8:40:94:f9:
         a4:28:05:d3:50:f5:8b:b2:ae:7d:47:3d:2b:c0:8e:c2:f7:94:
         72:88:62:a7:ff:64:21:17:59:b0:0b:ef:41:52:25:c6:b3:23:
         9a:7b:01:15:00:0d:e9:33:a5:6d:4e:a0:e6:27:ea:71:9f:7d:
         ef:f3:5f:92:d6:d2:9e:18:3e:0e:bb:a3:ed:bd:91:99:0c:cc:
         42:5a:79:1b:cf:f4:d1:16:2d:cc:d8:69:b5:7b:9e:30:8a:56:
         de:0b:c4:b3:fa:7c:ef:dd:de:bb:b4:8a:4c:d8:eb:a4:dd:28:
         2e:f1:92:1e:80:dd:87:6f:32:e0:d5:3a:c0:43:e6:34:7e:08:
         f0:1b:f0:8e:00:7d:d2:71:e0:1c:8c:3b:aa:cd:67:d3:d2:4b:
         4e:a2:75:4e:2c:d1:30:17:80:65:02:80:54:26:51:b4:e2:95:
         15:8b:5e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:23 2026 by rpki-client