Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DkF4lYdEFJ6two2QtEvd-oCDeCc.roa
File:                     DkF4lYdEFJ6two2QtEvd-oCDeCc.roa (raw, json)
Hash identifier:          3+QkRVirbV70b73Hre8wb1mdEVXxwu3w4ll7eGBq3yE=
Subject key identifier:   0E:41:78:95:87:44:14:9E:AD:C2:8D:90:B4:4B:DD:FA:80:83:78:27
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       110D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DkF4lYdEFJ6two2QtEvd-oCDeCc.roa
Signing time:             Sun 01 Mar 2026 02:03:02 +0000
ROA not before:           Sun 01 Mar 2026 02:03:02 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4365 (0x110d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:03:02 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=0E4178958744149EADC28D90B44BDDFA80837827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6a:bc:0d:87:1a:ad:bb:3c:39:6e:db:5a:2a:
                    84:3b:95:bd:23:9b:1d:5c:98:f2:35:49:e4:7f:24:
                    a5:21:b9:2e:f9:a4:04:5b:2f:75:8d:6b:0d:a8:c3:
                    94:49:ac:a4:f8:c6:c8:f1:ea:f2:ca:24:35:48:8c:
                    05:33:d7:ea:33:90:b1:41:ec:2d:98:72:52:29:86:
                    13:01:03:42:ac:85:04:4f:66:13:c6:85:b1:6a:00:
                    16:d4:31:27:c2:9d:b8:7e:1d:59:2e:42:fa:9f:92:
                    4f:3f:56:be:0d:2c:eb:b7:05:ae:eb:42:7c:48:da:
                    36:21:2a:9a:e4:c2:2b:94:70:12:fe:c1:86:33:8a:
                    99:40:d5:b6:6d:9d:d0:19:fa:58:56:a6:f0:a2:3b:
                    97:92:90:4e:e3:5a:6d:f8:74:73:4a:42:20:2f:3f:
                    04:c8:e0:77:d1:7b:7c:57:ac:bb:0c:6c:b9:83:a9:
                    30:d6:f3:c7:1f:70:8b:78:e5:c0:d0:d6:6d:06:fe:
                    0a:55:ea:c8:b5:ac:8b:46:9f:01:13:51:cb:f9:0b:
                    2a:93:dd:34:98:0e:55:06:af:e8:fa:b4:e6:94:30:
                    74:9e:8d:f9:b3:2e:be:f7:35:8b:e7:89:d8:57:b8:
                    5f:ce:cc:9c:71:13:ac:4a:32:e6:88:3e:ec:05:51:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:41:78:95:87:44:14:9E:AD:C2:8D:90:B4:4B:DD:FA:80:83:78:27
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DkF4lYdEFJ6two2QtEvd-oCDeCc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:a3:ef:fc:1c:81:13:ae:e3:44:78:38:db:21:b2:e9:9c:
         6d:7f:fb:31:9a:39:4b:3c:dc:16:90:a7:7d:e1:6a:28:03:94:
         76:7e:d6:da:6f:d6:97:63:27:12:8b:35:86:bf:b3:a6:c2:cc:
         1d:66:91:4e:8f:ef:da:3a:b4:78:68:0f:28:3d:96:ea:02:9d:
         07:a4:e6:2c:9d:22:a0:71:f2:03:fc:e9:14:ef:4a:da:a9:a2:
         cf:1c:a9:a6:d2:94:8a:ee:df:c0:46:84:ac:7a:35:bc:79:74:
         ac:ab:2a:e3:0f:c2:62:0a:8b:d2:79:d3:94:c4:db:2d:cc:54:
         c7:30:71:eb:01:a2:58:d2:ac:4c:85:e6:b9:6e:80:fa:86:ec:
         e8:ff:77:7d:b3:02:4c:15:7d:9c:88:c0:ac:41:06:db:6c:b6:
         46:48:b4:ae:89:42:22:48:4c:74:af:81:6c:5a:9b:54:5a:87:
         f6:e5:ce:3f:b3:53:a8:cd:00:e3:0d:70:f3:2a:63:64:f3:6b:
         da:e1:a4:9a:d1:23:e5:ad:ec:22:02:fc:53:bb:77:b6:65:6d:
         22:83:0b:3c:d3:01:89:d8:a3:24:93:92:43:74:b4:7b:1a:b4:
         7c:9f:01:f9:dc:cc:a6:69:f3:1c:2c:c5:4c:b4:c8:21:8c:ec:
         ec:6f:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:50 2026 by rpki-client