Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6nEnsYrkmIDLQVyLHck0mCHdaT4.roa
File:                     6nEnsYrkmIDLQVyLHck0mCHdaT4.roa (raw, json)
Hash identifier:          IlIKwpbs3+XpdPBGY/ScvFzevGYAaJwTPQ3DzIi/HFg=
Subject key identifier:   EA:71:27:B1:8A:E4:98:80:CB:41:5C:8B:1D:C9:34:98:21:DD:69:3E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1285
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6nEnsYrkmIDLQVyLHck0mCHdaT4.roa
Signing time:             Sun 01 Mar 2026 03:04:44 +0000
ROA not before:           Sun 01 Mar 2026 03:04:44 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4741 (0x1285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:04:44 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=EA7127B18AE49880CB415C8B1DC9349821DD693E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:05:55:fa:ed:a3:7f:d6:df:c0:17:96:fd:6a:
                    2f:29:45:43:75:60:ba:b4:80:61:db:3d:67:97:71:
                    89:1e:42:b5:9f:40:c4:55:9a:86:26:86:09:73:41:
                    1f:92:2d:77:b9:16:fc:de:2c:a4:01:d8:40:96:68:
                    3a:39:21:da:10:20:96:7c:9f:29:0b:c1:76:d7:a4:
                    5d:d7:97:3b:f4:01:cf:c9:ec:ab:68:27:1f:fe:38:
                    e1:49:3f:ab:7c:ae:ca:f7:ba:6f:e7:4d:a6:14:65:
                    4b:59:e6:94:56:53:ce:c8:1b:da:56:9e:a9:ab:20:
                    59:28:b5:32:56:4c:79:53:fe:a4:47:c8:87:27:cd:
                    bc:59:ed:6f:d6:fd:de:26:88:ec:84:1b:ef:1d:27:
                    2b:0c:77:78:41:41:d8:2c:a0:35:9d:0b:b2:86:1b:
                    0d:73:76:72:b5:fc:ac:dc:2b:20:64:60:d2:91:d6:
                    48:f7:3a:8c:04:3c:54:7e:53:ba:49:bb:9b:03:fe:
                    d1:bc:80:1c:cf:ac:11:29:97:8f:cb:d8:7f:93:7a:
                    88:64:67:43:75:3d:50:e1:3c:95:1e:ee:58:b0:54:
                    31:2f:ed:d6:db:59:3b:52:71:6e:b2:26:70:a8:fc:
                    8e:a8:a2:97:dd:8b:9f:f9:0b:e4:d1:2a:62:9f:5b:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:71:27:B1:8A:E4:98:80:CB:41:5C:8B:1D:C9:34:98:21:DD:69:3E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6nEnsYrkmIDLQVyLHck0mCHdaT4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:25:82:9f:6c:de:93:f2:8a:8d:d4:c9:60:33:e5:4e:0e:07:
         bd:39:af:57:eb:e7:73:76:b4:20:64:14:6e:8c:6e:43:9a:79:
         27:46:11:af:78:9d:ab:e4:ae:ac:1c:75:59:68:ae:2c:65:08:
         ec:02:86:4c:80:36:fb:b4:ee:e6:35:0a:36:f8:ce:40:0c:22:
         f7:6e:01:95:86:a8:89:65:b5:a2:a2:f3:3a:38:50:2c:9d:86:
         d9:2e:64:8b:ca:6d:f8:c2:09:ae:8a:0b:56:cc:66:c4:32:a0:
         a9:36:5b:d6:ee:c4:41:bb:04:cb:f0:d0:44:00:cf:3c:bd:f2:
         b3:f0:48:cd:5d:fe:d5:57:6f:a4:b9:77:10:c4:47:2e:4d:91:
         f3:53:18:6c:0e:c3:cc:24:4f:56:08:4a:0c:f7:fa:01:94:1b:
         20:e2:97:52:3e:40:3e:71:f6:80:45:3f:0d:d7:17:7f:1a:95:
         5d:26:37:3e:c4:84:83:f2:43:08:10:d3:c2:c9:e5:0c:8d:87:
         e7:95:60:c9:0c:47:a1:41:2b:30:27:09:65:ad:3a:fd:50:ac:
         a5:4f:fa:fa:07:3e:62:bf:ec:e5:99:3f:6a:4b:cb:04:88:f3:
         66:ae:6f:63:49:45:0d:c3:99:9f:8c:36:d7:2d:13:5f:3c:e8:
         37:e5:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:34 2026 by rpki-client