Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JMXfD4sXjqmeIvZe7vjAjNfLZrA.roa
File:                     JMXfD4sXjqmeIvZe7vjAjNfLZrA.roa (raw, json)
Hash identifier:          3i/iaIViFV284PKYxO+5JKL78WZ/PRXeFKLEeS/Oytg=
Subject key identifier:   24:C5:DF:0F:8B:17:8E:A9:9E:22:F6:5E:EE:F8:C0:8C:D7:CB:66:B0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1214
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JMXfD4sXjqmeIvZe7vjAjNfLZrA.roa
Signing time:             Sun 01 Mar 2026 02:48:41 +0000
ROA not before:           Sun 01 Mar 2026 02:48:41 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4628 (0x1214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:48:41 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=24C5DF0F8B178EA99E22F65EEEF8C08CD7CB66B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:3e:68:74:3f:d7:f4:7b:e9:8e:33:07:62:
                    44:e3:0d:90:b8:5e:d8:6c:95:d5:72:ed:5c:83:99:
                    01:fc:7e:b4:07:1b:32:12:fb:bf:2b:82:99:45:77:
                    4b:08:a8:67:a2:0c:91:c8:45:ce:46:e2:b2:46:cc:
                    4e:f9:a0:7d:ad:45:3f:21:cf:db:3a:58:5f:0d:bd:
                    82:42:8a:3e:93:45:82:88:c5:99:07:e9:03:37:f0:
                    53:4f:d4:38:20:27:40:d6:62:f9:5d:5e:e6:87:6f:
                    d8:3f:74:f3:e4:55:35:e3:5a:3c:c0:a5:6d:ae:79:
                    72:fc:8e:4e:f7:4d:7a:67:9f:53:ab:11:51:66:b5:
                    06:da:36:33:58:7a:02:5c:53:a1:a1:09:53:f9:df:
                    07:1e:0b:54:59:c5:ed:30:e7:95:44:f9:9a:cd:e1:
                    ba:d5:f3:de:84:ed:8a:54:43:c4:dd:9d:e9:53:74:
                    73:0f:14:05:bd:d8:e8:f4:08:08:9f:02:dc:ad:18:
                    b7:5d:0e:10:e8:f6:ae:a6:71:71:d3:11:20:fa:18:
                    48:b3:fd:d0:db:1f:02:b2:20:11:a5:1e:60:51:d1:
                    99:b7:26:3c:18:e8:a6:c9:93:9d:b7:0e:1f:f6:28:
                    46:a2:fc:2e:79:2c:c9:5f:9d:6f:f2:ee:57:d4:bf:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C5:DF:0F:8B:17:8E:A9:9E:22:F6:5E:EE:F8:C0:8C:D7:CB:66:B0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JMXfD4sXjqmeIvZe7vjAjNfLZrA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:31:f0:ab:18:77:38:87:c9:98:6a:c4:47:2b:bd:d0:c1:07:
         70:d6:38:30:19:00:78:59:24:00:ac:fe:8c:c4:5f:ec:42:32:
         41:76:33:34:98:4c:76:50:77:d1:50:09:7b:26:f8:06:90:d8:
         37:ff:82:47:d7:84:e8:7a:5b:d5:a9:fc:66:4b:4e:15:8d:cb:
         09:21:c2:43:0a:5d:b6:a3:c4:d1:54:c4:c1:a5:cd:81:c6:2c:
         6e:a4:63:3f:65:8e:e8:cb:ba:27:9a:72:4d:52:b3:c1:cb:b9:
         b7:7a:d1:b9:e6:ed:7f:b0:d2:a0:b1:7b:b9:ed:0c:7a:ff:cf:
         33:11:f6:5d:1d:31:d3:5c:05:23:df:f6:2a:5f:1d:68:ba:e7:
         94:85:4e:5d:d8:18:62:c7:41:d6:a0:72:72:2c:fa:41:e8:d2:
         be:a2:f5:4f:82:1b:9d:4c:a7:50:ff:0a:99:b9:59:64:ee:bd:
         84:f0:3e:fa:d8:ef:44:fb:0a:98:a4:d4:4a:74:10:5d:49:f6:
         f2:50:4c:4d:84:bc:16:e2:d5:90:2a:93:59:ec:f4:73:c6:80:
         54:70:9b:02:6c:ba:6c:07:b8:aa:16:d6:2f:ff:60:25:62:72:
         db:0c:d6:58:74:95:86:fe:80:36:af:ac:67:d3:2b:56:66:d5:
         51:8b:30:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:47 2026 by rpki-client