Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6J6LOmSb4Hr4ignKmrDXh126nxk.roa
File:                     6J6LOmSb4Hr4ignKmrDXh126nxk.roa (raw, json)
Hash identifier:          tGvkhaBYiLa2RWD4yDCyFWadmNmsOjsqBLcnW8AxqX4=
Subject key identifier:   E8:9E:8B:3A:64:9B:E0:7A:F8:8A:09:CA:9A:B0:D7:87:5D:BA:9F:19
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10B8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6J6LOmSb4Hr4ignKmrDXh126nxk.roa
Signing time:             Sun 01 Mar 2026 01:49:20 +0000
ROA not before:           Sun 01 Mar 2026 01:49:20 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.159.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4280 (0x10b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:49:20 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E89E8B3A649BE07AF88A09CA9AB0D7875DBA9F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:71:91:b1:24:da:26:92:3a:62:e5:9e:36:02:
                    bc:67:2c:cb:f4:f4:79:d4:d5:a5:61:5b:b4:29:57:
                    e0:61:ae:bf:2c:c5:2d:9e:9a:f3:44:2c:6d:5a:3f:
                    d8:fa:2d:29:7b:ff:e7:01:bc:59:58:99:97:9a:1e:
                    7e:58:85:8c:86:da:55:57:d8:c0:0c:1e:d1:c1:0b:
                    a2:c2:a8:27:5c:54:74:1e:06:c4:31:97:99:5a:2f:
                    df:cc:ce:51:70:b9:49:01:40:df:80:4d:89:3a:67:
                    fa:8b:62:2f:23:c2:bc:78:81:5b:65:33:8a:00:8e:
                    35:27:b5:8a:48:cd:cb:32:63:96:52:37:87:b0:0d:
                    61:d1:31:5b:cf:20:f4:69:3d:71:d7:59:cd:d0:0d:
                    b3:7b:3f:7d:e1:25:9c:b4:a1:53:e3:8b:ea:4b:c8:
                    6c:26:c6:f4:f7:6f:92:c3:10:76:0b:b2:d9:98:c9:
                    1e:c2:3e:73:26:95:f5:df:c1:67:c8:59:92:0d:ac:
                    4c:af:39:66:21:15:65:89:7c:be:fe:77:4b:d0:46:
                    f2:32:52:fb:b5:c2:66:33:56:fb:bd:d4:00:de:73:
                    d1:d6:77:5d:cd:37:6b:87:9a:83:e7:73:5c:7c:88:
                    2f:5e:3d:26:52:48:f7:8f:97:14:1a:4d:c8:8f:2e:
                    73:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9E:8B:3A:64:9B:E0:7A:F8:8A:09:CA:9A:B0:D7:87:5D:BA:9F:19
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6J6LOmSb4Hr4ignKmrDXh126nxk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:45:5b:c2:68:89:32:cd:54:d9:6e:f8:d4:29:ee:23:54:4a:
         bb:fe:55:6a:60:a7:fc:50:4a:11:f1:89:3b:ae:a3:13:c2:66:
         d8:ff:6e:81:ae:3d:ae:6b:7b:6d:ff:26:c1:e2:e4:1a:b3:46:
         ee:58:0d:81:b6:63:22:59:2a:f6:2f:df:cc:f7:c4:da:7e:12:
         d1:1a:ff:9a:09:24:02:e6:10:c8:21:66:0c:3c:0b:21:a4:43:
         bd:d2:fc:37:ea:26:3d:ce:39:c4:3c:ce:a3:76:de:49:32:c4:
         a0:89:a2:ae:7b:3f:cb:5b:3c:e8:b5:88:19:f7:34:9a:43:56:
         5a:0b:dd:ef:79:33:3e:f2:d3:e1:c4:19:8c:25:8b:7a:cd:17:
         09:31:2f:65:45:a4:c9:70:b8:20:4f:d7:fb:a7:cc:12:b5:26:
         78:b2:52:09:57:d8:9a:f2:19:b3:83:b3:e2:96:e1:5d:6f:0e:
         67:35:55:7e:45:c8:c1:52:ab:de:50:30:b1:6a:aa:3a:6e:0f:
         ed:37:24:be:43:75:f3:bc:e5:4f:9d:82:87:07:a8:ee:32:1d:
         45:88:3a:12:16:2b:a7:83:6a:fb:e1:d7:9d:eb:7a:16:14:5f:
         17:39:81:11:69:cf:71:14:7f:4a:67:00:ce:a1:81:6b:b4:93:
         6d:2c:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:26 2026 by rpki-client