Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4fbCpUl8VH23ug5aPbAxCxRJdzo.roa
File:                     4fbCpUl8VH23ug5aPbAxCxRJdzo.roa (raw, json)
Hash identifier:          Ji0K1aLUp616/Dikyuf6OE9RxLURPvdMYYfkAw+Crs0=
Subject key identifier:   E1:F6:C2:A5:49:7C:54:7D:B7:BA:0E:5A:3D:B0:31:0B:14:49:77:3A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1312
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4fbCpUl8VH23ug5aPbAxCxRJdzo.roa
Signing time:             Sun 01 Mar 2026 03:32:31 +0000
ROA not before:           Sun 01 Mar 2026 03:32:31 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        61.195.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4882 (0x1312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:32:31 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E1F6C2A5497C547DB7BA0E5A3DB0310B1449773A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:6b:87:55:8d:3a:22:3e:64:56:be:fa:fd:
                    1f:cd:01:c0:4e:68:29:24:38:41:99:cb:8f:8a:cc:
                    20:c1:2b:2f:4f:d7:8d:23:27:9d:30:dc:1a:d8:40:
                    1c:84:95:ad:f8:dd:f5:87:a9:56:64:a2:de:7d:df:
                    7e:a8:26:a4:77:78:43:68:e2:8c:ae:29:02:b2:e2:
                    e2:50:ed:0e:ae:38:f8:fd:e1:1d:e6:dc:a6:72:bc:
                    ea:f1:cd:49:2c:a0:a4:bc:7f:92:a6:bf:c6:27:ae:
                    9b:74:e1:97:51:d1:7a:04:16:fb:09:f7:87:e7:f3:
                    93:c7:82:c1:93:a0:f9:89:c9:39:98:ab:af:9f:90:
                    99:10:35:d8:63:49:40:c5:8d:6a:5a:d5:97:1a:33:
                    17:00:06:5b:6b:ac:1f:b5:57:5a:85:30:3b:e9:8e:
                    80:7f:0f:e1:7a:63:a1:99:e1:58:f3:c2:49:25:cf:
                    55:38:2a:17:67:d4:1d:da:8f:cb:40:88:4b:46:4c:
                    29:86:d8:54:24:84:b8:0c:d1:a7:fe:1a:f3:f1:d1:
                    37:4e:52:bb:56:3a:fb:b5:69:65:34:39:fc:74:5a:
                    29:39:2f:88:74:4b:c0:cd:a8:71:17:76:38:ac:b8:
                    df:eb:26:40:d6:75:d9:e3:73:d0:c7:1c:ef:0a:ee:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F6:C2:A5:49:7C:54:7D:B7:BA:0E:5A:3D:B0:31:0B:14:49:77:3A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4fbCpUl8VH23ug5aPbAxCxRJdzo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:df:a9:f9:1c:e7:c3:e9:b4:fe:0f:bb:89:ae:f7:c6:dd:80:
         25:b8:09:2f:27:de:9b:fe:11:b2:16:f7:06:0b:5b:48:7c:2e:
         dc:27:84:b5:51:6a:68:8b:7d:7a:56:b0:83:1b:2a:17:73:ca:
         d0:62:4b:5d:53:31:ff:e9:4e:7b:52:9e:aa:d3:c1:83:ce:05:
         52:12:f0:d6:53:74:fd:92:32:d3:68:0b:03:15:db:8d:7e:3a:
         c9:ca:34:74:6e:77:cf:63:24:84:93:ae:81:99:bc:78:f9:39:
         c3:ff:5e:b8:29:ab:1c:2e:3c:df:28:11:ea:e3:14:73:17:5f:
         e3:7f:a7:e6:9d:e0:e7:c3:68:bc:ea:5f:48:80:f1:ed:d4:42:
         61:bf:b0:cb:7b:2c:c4:99:7b:e7:8c:50:35:9b:79:e3:53:9c:
         6a:a6:3b:de:b3:24:0b:29:9e:ac:83:8d:71:3a:9b:6a:8e:62:
         39:3e:d5:4f:cf:db:63:6d:62:f8:31:97:d6:d6:6f:d1:78:0d:
         a9:c1:e0:84:d3:f3:a0:2a:7c:ca:7b:c9:6f:cf:86:3f:45:09:
         16:77:04:01:0a:4e:26:66:8d:86:13:40:e9:95:e6:e8:0c:f6:
         e9:0f:46:6c:26:6f:82:9b:ac:86:ed:0a:b8:52:5d:03:e5:39:
         27:14:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:40 2026 by rpki-client