Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/D1y8I6Wbfzt94okO8S3anWEgHm4.roa
File:                     D1y8I6Wbfzt94okO8S3anWEgHm4.roa (raw, json)
Hash identifier:          ZDBluemQcCmz8MCJVksKg2MMuCugkS2ErayuNSdteto=
Subject key identifier:   0F:5C:BC:23:A5:9B:7F:3B:7D:E2:89:0E:F1:2D:DA:9D:61:20:1E:6E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12DC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D1y8I6Wbfzt94okO8S3anWEgHm4.roa
Signing time:             Sun 01 Mar 2026 03:20:36 +0000
ROA not before:           Sun 01 Mar 2026 03:20:36 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4828 (0x12dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:20:36 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=0F5CBC23A59B7F3B7DE2890EF12DDA9D61201E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f2:31:d3:36:46:74:33:d0:81:03:27:d9:41:
                    5c:c6:a5:86:2d:b2:35:eb:c4:a4:63:8c:2d:49:4d:
                    52:b9:97:7f:78:4b:70:0d:11:81:65:a3:1b:ee:2b:
                    db:9b:e3:8f:d2:4d:12:4b:02:c5:f6:32:b8:e7:a5:
                    21:07:8a:fd:41:c5:07:7e:2b:e6:f4:c0:e2:96:6f:
                    a4:80:54:51:5a:ab:fb:c5:0b:3f:c5:ef:ed:67:b8:
                    eb:ba:a9:01:22:15:6e:de:77:9a:7d:27:18:1f:2c:
                    fd:21:a4:db:34:21:4c:e0:95:d4:ce:3b:b7:76:cc:
                    03:5d:52:2f:ba:bf:cc:90:58:0e:20:ae:f7:17:f1:
                    a6:f6:8f:44:f1:b1:98:8a:e0:c5:c2:da:a2:c7:76:
                    0d:f5:26:9a:eb:ad:ee:4b:64:44:fe:26:b8:35:8f:
                    1a:4a:03:f1:cc:d0:41:31:a2:dd:08:97:60:42:c8:
                    36:f3:bf:ef:82:20:b4:52:93:02:af:db:7b:47:e8:
                    c7:37:60:72:5c:31:af:3b:2c:ea:d5:af:03:05:d1:
                    ef:19:5a:8a:d3:e4:26:7d:9c:49:77:08:b7:ab:73:
                    e2:ef:c6:59:6c:b8:99:b3:79:fd:28:6c:ea:04:5f:
                    c6:a2:d3:b5:fa:c8:52:11:28:a5:98:89:c7:7f:2a:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:BC:23:A5:9B:7F:3B:7D:E2:89:0E:F1:2D:DA:9D:61:20:1E:6E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D1y8I6Wbfzt94okO8S3anWEgHm4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:72:af:ac:a0:8f:28:f5:01:3c:de:e8:8a:28:43:b5:6d:0f:
         b7:dd:3b:7e:ae:a6:1d:7f:0e:85:08:1e:c7:1d:93:fe:80:ec:
         23:65:f7:2c:4e:8b:ef:1e:82:91:a8:0a:8d:37:69:25:30:ed:
         6c:08:0e:6e:97:57:50:62:7b:cb:92:56:8f:d0:b9:c8:0c:49:
         d8:f6:93:e8:b6:30:a6:db:ee:85:08:1a:3b:d5:08:6d:a5:a2:
         85:b7:a4:fe:50:d2:a5:45:cb:ea:dc:3d:00:17:7d:70:84:fd:
         73:51:68:96:79:ea:06:b2:f7:47:d2:ee:9c:57:b9:ef:7d:d2:
         90:59:46:ef:1d:77:9d:be:83:9b:b3:ac:d9:15:40:5f:2f:08:
         79:9a:22:c5:2f:57:5f:1c:d0:5b:33:f6:2e:43:63:f3:45:70:
         33:b0:7b:3f:dc:e8:bc:88:e5:5a:bd:2b:64:03:5d:f6:ef:ac:
         ce:3c:46:50:5e:4a:ff:98:d5:0c:9a:0d:18:9a:e1:d1:34:20:
         56:4d:5b:c3:b8:4a:f8:02:8c:30:2d:c1:10:14:45:1b:e2:57:
         15:9b:20:b1:c0:75:1e:46:60:07:a1:78:50:77:51:b9:ce:33:
         0c:2c:0b:ba:1e:9e:73:46:9d:1e:32:c9:db:0b:74:5d:8c:bd:
         dd:95:01:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:19 2026 by rpki-client