Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4uuG26qH4RUJ0j1CcMyH7-h9RNU.roa
File:                     4uuG26qH4RUJ0j1CcMyH7-h9RNU.roa (raw, json)
Hash identifier:          VNB8ooiBTufIGxLE97eY2+vQLKHfLtjEzYxR3YFMJ5k=
Subject key identifier:   E2:EB:86:DB:AA:87:E1:15:09:D2:3D:42:70:CC:87:EF:E8:7D:44:D5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1258
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4uuG26qH4RUJ0j1CcMyH7-h9RNU.roa
Signing time:             Sun 01 Mar 2026 03:00:23 +0000
ROA not before:           Sun 01 Mar 2026 03:00:23 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.67.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4696 (0x1258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:00:23 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E2EB86DBAA87E11509D23D4270CC87EFE87D44D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:79:e0:1c:2c:f4:52:01:99:a6:32:e7:4d:
                    30:e4:e5:e6:2a:81:0f:c9:ab:b2:ae:a1:1c:ae:3f:
                    05:8c:b5:33:71:1f:76:6f:a5:ae:65:a0:c7:d9:58:
                    1c:6d:f4:42:73:e2:df:5d:82:83:93:df:b7:51:59:
                    87:22:c1:3c:33:07:b2:88:a3:bd:0e:86:35:d8:e1:
                    9e:e7:a0:ab:6d:95:2c:9c:5c:a2:1c:a7:e1:76:1a:
                    81:e2:d3:42:76:97:e9:75:95:5a:fa:16:44:17:2d:
                    58:21:b8:11:65:0e:f7:0b:e8:97:59:86:d6:54:09:
                    12:f6:73:20:f9:55:88:13:93:1c:e4:25:7b:2a:73:
                    c8:86:55:ea:fd:46:c0:94:8e:8e:8a:b2:ca:87:1c:
                    e2:02:7e:a9:77:47:50:ce:ab:7e:76:03:4a:43:19:
                    dc:da:46:e0:d0:a0:66:0c:3b:dc:cc:d1:bc:81:a0:
                    d3:dd:02:d8:81:6d:5d:d8:ff:b6:7b:e0:01:71:95:
                    85:4b:1c:01:e2:77:50:76:c1:48:c3:2a:f2:a9:4e:
                    0a:e3:f0:f8:66:09:d5:11:df:a9:6e:da:d7:62:73:
                    95:93:8d:32:c2:e6:b5:32:ac:74:3f:ed:3d:01:6c:
                    1d:bd:d7:a1:25:79:25:b9:67:6b:04:6c:ba:14:c2:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EB:86:DB:AA:87:E1:15:09:D2:3D:42:70:CC:87:EF:E8:7D:44:D5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4uuG26qH4RUJ0j1CcMyH7-h9RNU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.67.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1d:29:be:eb:92:50:8f:3a:dc:94:03:26:47:f9:94:b3:78:38:
         c5:ea:34:f6:de:81:d7:90:2e:1d:d8:f0:c9:f4:3d:40:34:5e:
         ce:02:12:07:f7:2e:81:0a:de:ad:26:64:ba:91:6b:66:0c:fc:
         72:cb:a7:0c:6c:bc:0e:3f:2d:53:27:c4:20:18:29:2c:cb:49:
         06:a7:9a:99:c1:cb:d4:0e:c4:ee:11:a2:6f:95:08:b6:83:a7:
         aa:44:6e:77:ec:93:dd:5f:98:88:6e:72:96:0e:3b:8a:f6:95:
         0a:e2:51:84:26:8b:26:88:04:db:10:58:4f:1e:6c:73:89:42:
         bb:5d:73:96:76:f2:0e:b7:20:9e:48:a8:a2:68:4c:41:a2:33:
         52:67:f7:28:89:a2:d0:ca:f8:6a:2f:5c:0f:4b:f4:55:06:8b:
         c9:71:ea:2a:73:03:4d:bb:70:27:3d:d9:8e:bb:fa:b6:2f:c0:
         a0:85:2b:c0:0b:d9:62:18:86:ec:0a:13:76:e4:8a:37:59:59:
         0c:50:a0:6e:e4:dd:81:96:3e:e1:86:90:92:d8:4e:a2:2d:0c:
         02:30:1d:9e:cd:4d:ed:35:9f:5c:1d:f5:e4:70:a6:4f:3b:4a:
         2e:8f:ae:2e:15:b3:4d:9b:fa:21:76:6a:85:a2:79:d6:40:20:
         02:b5:5d:ca
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICElgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzAwMjNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUyRUI4NkRCQUE4N0Ux
MTUwOUQyM0Q0MjcwQ0M4N0VGRTg3RDQ0RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFknngHCz0UgGZpjLnTTDk5eYqgQ/Jq7KuoRyuPwWMtTNxH3Zv
pa5loMfZWBxt9EJz4t9dgoOT37dRWYciwTwzB7KIo70OhjXY4Z7noKttlSycXKIc
p+F2GoHi00J2l+l1lVr6FkQXLVghuBFlDvcL6JdZhtZUCRL2cyD5VYgTkxzkJXsq
c8iGVer9RsCUjo6KssqHHOICfql3R1DOq352A0pDGdzaRuDQoGYMO9zM0byBoNPd
AtiBbV3Y/7Z74AFxlYVLHAHid1B2wUjDKvKpTgrj8PhmCdUR36lu2tdic5WTjTLC
5rUyrHQ/7T0BbB2916EleSW5Z2sEbLoUwrgrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU4uuG26qH4RUJ0j1CcMyH7+h9RNUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzR1dUcyNnFINFJVSjBqMUNjTXlINy1oOVJOVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcBQwAwDQYJKoZIhvcNAQELBQADggEBAB0pvuuSUI863JQDJkf5lLN4OMXq
NPbegdeQLh3Y8Mn0PUA0Xs4CEgf3LoEK3q0mZLqRa2YM/HLLpwxsvA4/LVMnxCAY
KSzLSQanmpnBy9QOxO4Rom+VCLaDp6pEbnfsk91fmIhucpYOO4r2lQriUYQmiyaI
BNsQWE8ebHOJQrtdc5Z28g63IJ5IqKJoTEGiM1Jn9yiJotDK+GovXA9L9FUGi8lx
6ipzA027cCc92Y67+rYvwKCFK8AL2WIYhuwKE3bkijdZWQxQoG7k3YGWPuGGkJLY
TqItDAIwHZ7NTe01n1wd9eRwpk87Si6Pri4Vs02b+iF2aoWiedZAIAK1Xco=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:47 2026 by rpki-client