Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8mFtErebI2Ev6L4DMaCgFvWQIzU.roa
File:                     8mFtErebI2Ev6L4DMaCgFvWQIzU.roa (raw, json)
Hash identifier:          HDr63FdO6q4oUQD6vJQ0/A3ZYhuF51HcfLv/rIibtG8=
Subject key identifier:   F2:61:6D:12:B7:9B:23:61:2F:E8:BE:03:31:A0:A0:16:F5:90:23:35
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12F8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8mFtErebI2Ev6L4DMaCgFvWQIzU.roa
Signing time:             Sun 01 Mar 2026 03:27:56 +0000
ROA not before:           Sun 01 Mar 2026 03:27:56 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4856 (0x12f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:27:56 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F2616D12B79B23612FE8BE0331A0A016F5902335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:fb:5a:f5:4e:f9:66:4e:7b:46:4f:e4:ae:
                    0f:4d:40:f7:a7:aa:3e:a0:95:ce:bd:e3:60:0f:48:
                    97:55:30:d9:0b:b4:77:b6:25:d4:4a:9c:54:c9:fd:
                    ae:e3:97:37:3e:00:ba:0d:45:b0:b4:10:f4:07:86:
                    0c:c2:67:fd:47:99:53:1a:e2:a4:50:42:cf:3b:28:
                    c1:c3:02:ff:2e:05:e1:49:4a:a2:30:48:02:69:e1:
                    28:03:af:9e:74:9e:58:92:80:71:d8:08:e0:cb:04:
                    fa:16:3a:64:a9:0c:44:a7:34:5a:d7:30:82:8e:17:
                    5f:60:76:f0:2d:f7:38:05:72:e6:8c:9d:83:ea:a1:
                    6e:e4:3d:3b:19:c1:66:9a:34:ae:b4:56:35:aa:16:
                    46:ab:51:37:3e:ed:f7:92:21:99:50:5b:93:e4:1f:
                    bc:4f:bf:63:44:d2:14:11:cd:c0:7a:c3:09:28:6a:
                    55:37:9d:e2:d6:ea:b5:e3:1c:e0:68:9d:6d:c2:70:
                    5a:c8:ed:05:77:e0:9a:09:3b:02:77:c8:3f:ec:e4:
                    41:14:42:6f:b9:6f:48:6b:d7:61:55:1e:92:8a:0b:
                    1c:d1:24:60:4c:d5:79:8b:46:08:05:56:5a:3e:32:
                    f5:6b:ec:a2:df:9d:7b:79:79:94:71:59:be:92:41:
                    f8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:61:6D:12:B7:9B:23:61:2F:E8:BE:03:31:A0:A0:16:F5:90:23:35
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8mFtErebI2Ev6L4DMaCgFvWQIzU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:b3:ee:9f:9e:31:2f:c1:ea:c4:95:c5:8a:aa:7f:b5:dd:7c:
         6c:c4:bb:45:c2:11:0c:2d:d6:a0:e9:28:50:a2:fb:62:43:50:
         9b:31:4f:2a:7c:9b:96:20:35:81:f7:e2:59:01:98:b0:81:4a:
         64:ca:0f:3e:e7:ab:df:4f:b1:49:60:17:6f:de:bd:68:64:54:
         b4:27:63:8e:7b:18:2d:78:81:7b:55:b4:d4:0d:de:19:2f:a9:
         34:92:26:2a:80:08:6f:3b:b0:5d:72:33:86:1b:7b:27:47:dd:
         46:3c:0c:74:a0:6c:cb:0e:eb:59:7a:c0:02:8c:f2:c1:57:d1:
         ee:8a:36:b2:2b:05:e0:11:9e:ae:7b:98:97:5f:76:0f:0f:41:
         61:09:7d:4c:85:22:f3:84:d1:8e:3b:51:c7:8a:e3:a0:ee:ab:
         ee:d2:29:b1:2a:f8:aa:d7:f7:0d:65:10:69:de:da:52:9e:79:
         5d:c2:e7:1d:26:e4:f1:da:69:1c:32:30:82:14:a4:1e:55:c2:
         5b:a1:70:72:fb:f3:3f:58:28:17:20:34:a1:42:4f:e8:63:e0:
         95:99:c1:5b:5c:a4:37:87:3a:8c:94:26:5c:33:c4:40:25:65:
         34:75:4c:c2:f5:b3:69:c9:9e:b8:db:73:a2:26:c0:0c:ae:74:
         4b:1e:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:05:57 2026 by rpki-client