Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JR8B3k5EnrqIUSAwPDGldhvbdTo.roa
File:                     JR8B3k5EnrqIUSAwPDGldhvbdTo.roa (raw, json)
Hash identifier:          ui3NLBguuH2SpxqZ+uKFgZ/M1VuVYcT6zg7obqny584=
Subject key identifier:   25:1F:01:DE:4E:44:9E:BA:88:51:20:30:3C:31:A5:76:1B:DB:75:3A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1137
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JR8B3k5EnrqIUSAwPDGldhvbdTo.roa
Signing time:             Sun 01 Mar 2026 02:12:43 +0000
ROA not before:           Sun 01 Mar 2026 02:12:43 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4407 (0x1137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:12:43 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=251F01DE4E449EBA885120303C31A5761BDB753A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:66:8c:86:62:25:52:69:33:96:bf:ff:51:
                    1f:2a:60:0f:43:bc:05:fa:cf:05:57:ab:60:a1:f8:
                    72:84:47:00:65:ab:82:f0:83:79:5e:dd:4a:11:58:
                    50:06:59:56:38:ed:5a:11:ed:2f:f1:bc:ea:12:12:
                    31:73:98:be:eb:e7:7c:62:38:59:e0:5a:68:94:ba:
                    c6:5f:b0:89:74:39:e9:71:1a:16:33:7e:7b:b1:8a:
                    84:83:f8:75:77:8a:9e:b4:39:58:3f:a2:0f:0e:e9:
                    36:3f:cb:a6:e3:69:15:92:1c:52:e5:53:23:da:39:
                    d7:43:fe:76:3f:ec:8c:24:76:82:1c:a5:96:fc:46:
                    fb:eb:65:59:43:bf:55:6e:3f:56:35:9d:a0:78:76:
                    b6:26:51:58:97:7b:b1:80:82:89:b3:cc:98:bf:43:
                    ee:9d:4a:60:cc:4b:cc:a5:a9:c4:90:bf:97:de:53:
                    17:44:f8:6f:da:d2:fb:32:dc:ad:90:d9:29:c3:75:
                    ec:21:b1:9f:66:c9:61:9c:51:ed:b7:db:3c:e4:8e:
                    4e:90:e3:26:5f:e6:90:87:ef:23:73:f8:6d:01:76:
                    2f:6a:19:fd:48:a0:05:95:cc:8b:79:97:97:d0:45:
                    02:8f:0f:c3:42:af:64:93:84:35:8b:83:f7:b7:b3:
                    4b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1F:01:DE:4E:44:9E:BA:88:51:20:30:3C:31:A5:76:1B:DB:75:3A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JR8B3k5EnrqIUSAwPDGldhvbdTo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         de:e8:4d:24:fd:e7:18:27:73:12:0f:a1:68:27:1c:c9:42:0b:
         16:aa:61:38:c8:ff:ce:1c:c7:fa:38:72:e4:76:c3:d4:5c:19:
         44:71:00:a7:78:8c:c1:ca:7d:cb:94:ab:b1:d3:15:f1:53:f3:
         a0:0b:24:2c:75:bf:e2:be:41:af:3d:fb:9f:6f:22:a0:32:30:
         09:80:6c:3c:13:82:74:9d:b9:2f:66:61:72:1a:1a:40:41:45:
         7f:1d:52:bd:38:fe:f1:7c:a5:88:2e:68:67:02:83:9f:be:a9:
         84:04:17:64:d4:9b:2d:09:fd:a5:23:ac:3f:69:d6:57:f2:ab:
         74:2d:58:e4:36:49:59:71:be:a9:8a:08:c7:47:9b:85:27:2a:
         20:14:b9:53:f4:d7:0f:1d:b9:01:5a:5f:69:e5:b2:79:15:fd:
         ab:15:0e:39:da:3b:44:26:08:56:bf:de:fd:0a:02:4f:ed:a5:
         be:ef:da:92:56:ff:b9:11:a8:8c:66:94:8c:4b:f3:34:fa:88:
         37:4c:35:15:c7:f4:6a:b9:50:0a:15:c9:78:3f:9f:cb:e8:15:
         74:93:56:1d:c6:5a:cd:8c:22:c6:0a:e0:35:24:d4:fb:88:db:
         04:c4:fb:7f:20:eb:00:1f:02:e2:b6:90:2b:9d:8d:9b:c0:1a:
         0f:95:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:17 2026 by rpki-client