Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9Nd4a_05pHoUWqPA25FVSSYi1cU.roa
File:                     9Nd4a_05pHoUWqPA25FVSSYi1cU.roa (raw, json)
Hash identifier:          6+pkCTtc7N5DHlijdcVO4/yJmjPYYJ809hvSNnrkioU=
Subject key identifier:   F4:D7:78:6B:FD:39:A4:7A:14:5A:A3:C0:DB:91:55:49:26:22:D5:C5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1090
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9Nd4a_05pHoUWqPA25FVSSYi1cU.roa
Signing time:             Sun 01 Mar 2026 01:44:40 +0000
ROA not before:           Sun 01 Mar 2026 01:44:40 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4240 (0x1090)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:44:40 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F4D7786BFD39A47A145AA3C0DB9155492622D5C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:5e:80:0f:02:d5:86:e9:b9:03:aa:0a:7a:
                    76:aa:80:fd:35:13:b0:50:4e:d6:b9:d5:c2:8d:75:
                    6a:cd:d2:38:31:85:92:6d:b2:56:3a:9a:b7:f7:3d:
                    56:e4:7c:da:b2:9c:65:97:5e:2d:ab:a3:83:b1:0c:
                    1a:37:3c:b6:e4:3e:95:56:8f:57:dd:1c:cc:40:0b:
                    ba:b5:31:aa:72:27:5e:e4:f4:c2:a3:91:00:4d:3b:
                    2d:ca:49:57:d8:02:ad:a1:f9:02:5f:78:4a:08:63:
                    1b:d2:8c:ad:d9:5f:62:a5:04:40:ac:7b:69:53:02:
                    f6:86:4f:be:34:63:24:ec:e8:d3:fc:b9:df:50:39:
                    de:49:7b:9f:ef:de:97:03:a8:49:a7:2d:94:c7:5f:
                    34:ed:4f:fa:ff:4c:ee:05:da:d2:65:aa:b1:0e:1f:
                    21:c6:7d:23:0c:fd:b6:a4:ed:96:49:71:09:41:31:
                    c4:15:c6:67:b4:b8:27:c1:eb:7b:ed:59:d1:e0:82:
                    6c:67:64:65:c6:7c:5d:68:b8:8e:52:94:7a:b6:4f:
                    fe:a0:cd:c5:03:18:6b:e6:65:48:14:75:5a:8f:49:
                    6e:80:63:b6:2f:ff:28:3f:b4:91:a2:da:dc:c3:1c:
                    05:a6:09:9c:15:55:d0:c4:0b:8c:99:a7:d6:13:63:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D7:78:6B:FD:39:A4:7A:14:5A:A3:C0:DB:91:55:49:26:22:D5:C5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9Nd4a_05pHoUWqPA25FVSSYi1cU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:21:be:a8:58:0d:28:43:18:d5:7b:6f:6f:93:40:2c:0b:b2:
         4c:e3:67:8c:1c:73:5b:bd:ed:ba:07:a1:3b:67:a4:1b:73:50:
         84:b2:3a:ac:ed:ad:c2:54:a2:21:d4:25:af:06:e7:fe:11:ff:
         cf:05:f0:aa:98:94:87:1d:73:5c:6b:ae:bc:60:e3:2e:b8:84:
         30:1c:2e:94:56:d5:b8:08:5e:d6:47:d2:53:dd:6f:dd:dc:39:
         6a:5e:5d:40:6e:c0:c4:d6:5e:bf:03:54:56:b0:ae:25:83:51:
         58:9d:da:fb:2a:f9:f2:7c:20:5e:d7:fe:ca:f7:45:f7:1e:35:
         26:bb:d1:77:1b:7e:7a:7c:30:5c:b9:af:ba:b8:1b:36:bf:7c:
         e9:1a:32:db:da:6b:74:b3:58:12:43:b9:18:05:f4:ee:4f:36:
         14:85:03:44:92:30:24:1e:fe:f1:bd:eb:2a:6c:db:b2:26:0c:
         77:7a:85:72:7b:fa:7b:c0:97:a3:e7:61:e0:41:42:6a:3d:29:
         5b:29:ef:11:4e:c3:a2:98:23:c5:aa:33:25:fb:03:b2:11:a2:
         a1:df:6c:36:5c:90:1d:0e:e3:30:b7:e7:2e:fa:aa:a5:e1:e6:
         ae:8e:ff:85:3e:9a:4d:fc:39:14:56:1a:2e:74:9d:0a:65:40:
         8b:a4:49:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:15 2026 by rpki-client