Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7VZghflS7k_A5eVVk0BcxgUCl5k.roa
File:                     7VZghflS7k_A5eVVk0BcxgUCl5k.roa (raw, json)
Hash identifier:          GFXCXvLvpRmnvR+F/BVlgtalUGKvITSmeZ+EnT5hi1s=
Subject key identifier:   ED:56:60:85:F9:52:EE:4F:C0:E5:E5:55:93:40:5C:C6:05:02:97:99
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11FE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7VZghflS7k_A5eVVk0BcxgUCl5k.roa
Signing time:             Sun 01 Mar 2026 02:44:39 +0000
ROA not before:           Sun 01 Mar 2026 02:44:39 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4606 (0x11fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:44:39 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=ED566085F952EE4FC0E5E55593405CC605029799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:92:b9:29:ec:3c:4f:88:4a:d7:18:f7:3a:
                    b7:99:41:c7:84:25:fd:13:3b:87:e5:da:29:39:86:
                    2f:5c:ef:84:5b:f9:ca:cf:75:b8:d5:d8:34:8a:a7:
                    e7:0b:fc:9d:9e:a3:4b:fc:22:ad:32:df:b7:37:8a:
                    26:5e:fc:57:ce:03:35:19:0e:92:d3:5f:62:d2:38:
                    10:f4:11:a4:5e:e2:b1:b3:d6:04:17:ec:6e:5e:a6:
                    00:4e:dc:69:ed:ad:75:e9:e5:82:8b:22:bd:0b:b8:
                    13:df:e4:f1:e7:ab:34:e2:69:8a:15:f3:d7:17:a9:
                    70:4d:9e:b9:a4:0f:42:f3:de:b8:43:8b:93:bc:2c:
                    b2:ce:e1:ca:86:4f:7e:35:78:aa:82:be:6b:33:fc:
                    28:37:b3:1b:84:5d:b9:9a:d1:6a:c2:e9:91:b4:72:
                    76:16:e1:2c:e6:8f:cf:25:b5:28:a4:5a:61:d0:82:
                    8a:b8:89:6a:2f:f5:6c:7e:8a:85:2b:e3:f7:d5:86:
                    d2:a6:19:32:70:3f:09:6c:01:0d:6c:31:74:ac:27:
                    48:5c:36:61:15:77:1e:e9:23:d5:1f:47:80:2e:52:
                    02:b1:ea:80:38:48:8c:ae:46:d9:09:a1:eb:51:4b:
                    1e:22:b2:68:34:21:4b:48:f8:d1:00:6f:3e:08:8b:
                    33:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:56:60:85:F9:52:EE:4F:C0:E5:E5:55:93:40:5C:C6:05:02:97:99
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7VZghflS7k_A5eVVk0BcxgUCl5k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:04:f8:f2:5a:e5:1b:9e:0a:0e:8c:69:ab:af:44:7d:e4:a8:
         d4:17:5c:d1:3e:60:3b:fc:9b:be:c2:02:39:37:e1:ab:5e:0d:
         f6:e5:fe:f2:c2:2d:8f:ed:9a:53:35:0f:96:2e:f6:ac:e8:27:
         80:0f:9d:11:91:3b:94:55:59:07:80:b0:07:9c:29:9a:64:80:
         c4:8b:e4:38:e1:47:7d:57:32:1c:c9:98:89:71:56:2b:70:43:
         04:21:c6:f0:3c:6d:30:00:50:27:6a:e5:19:f7:10:ea:53:10:
         07:c4:ee:cb:74:84:ea:30:26:8f:ee:ca:af:5a:68:31:11:b6:
         0c:cf:95:2f:37:bb:04:f6:1c:c5:16:5a:0b:77:2d:86:4b:c3:
         07:00:b5:f4:8d:39:79:5d:e5:cc:5f:24:bd:00:66:6b:af:d7:
         b3:3c:47:cb:6e:3b:9d:e9:4a:13:35:df:72:cc:47:c0:4c:e6:
         c3:f9:02:e3:09:fc:ac:59:54:b3:7c:54:75:44:b7:7c:49:9b:
         94:72:64:24:8d:c3:60:3e:2f:29:3b:a2:38:dc:09:ff:ca:a8:
         2f:bb:e2:99:ed:60:51:d5:2c:96:66:b5:61:aa:0a:5b:48:7f:
         c7:97:c1:ae:aa:77:5a:31:01:36:2a:5e:4e:60:eb:89:fd:05:
         c7:80:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:33 2026 by rpki-client