Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N2aO5C9s1UpK5iAtKgnhPcJbpe8.roa
File:                     N2aO5C9s1UpK5iAtKgnhPcJbpe8.roa (raw, json)
Hash identifier:          MP/BGfL0gSNNf63zuZ/QMUWHCW5VJcgI4zeALvk8yW8=
Subject key identifier:   37:66:8E:E4:2F:6C:D5:4A:4A:E6:20:2D:2A:09:E1:3D:C2:5B:A5:EF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10B7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N2aO5C9s1UpK5iAtKgnhPcJbpe8.roa
Signing time:             Sun 01 Mar 2026 01:49:19 +0000
ROA not before:           Sun 01 Mar 2026 01:49:18 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4279 (0x10b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:49:18 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=37668EE42F6CD54A4AE6202D2A09E13DC25BA5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:19:dd:d2:1a:63:d5:4f:3e:78:f3:f8:83:
                    49:3b:ac:85:19:5a:8f:42:9b:ff:c9:e1:33:37:d5:
                    9a:2c:3a:3a:0c:62:23:fa:2a:8b:d3:7b:b1:c3:a4:
                    32:01:2c:aa:fa:be:78:c6:31:b5:ea:07:7d:ed:3b:
                    1b:6a:2c:db:68:2b:06:06:a0:55:23:25:0a:af:92:
                    c1:b0:8c:e4:55:25:2f:69:ff:4a:eb:38:65:7e:71:
                    42:79:43:88:81:d4:a4:9a:c6:1d:c2:57:36:3f:39:
                    e9:65:7e:d6:7d:00:a8:83:03:5e:46:36:50:4d:87:
                    da:13:7a:26:01:ef:08:4a:fa:11:e6:3c:72:88:a3:
                    5d:4a:ee:75:81:ba:e5:e2:31:31:f3:b5:24:eb:02:
                    48:0f:1d:63:1f:3d:6c:71:35:f9:40:52:bf:11:cb:
                    16:a6:7f:1f:a5:c0:dc:4d:54:25:27:a8:3d:82:c0:
                    e6:f3:fd:3f:3c:18:24:c6:0a:ff:83:08:a6:a5:5b:
                    70:06:88:97:41:be:da:d2:54:e3:60:92:99:aa:1c:
                    17:26:1a:80:cc:9e:d3:db:00:99:6d:46:6b:0c:8b:
                    06:78:91:2a:59:94:23:a3:9e:ba:e9:78:58:91:78:
                    73:5d:6f:63:4d:2b:a0:8e:fb:27:0f:4b:9a:36:96:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:66:8E:E4:2F:6C:D5:4A:4A:E6:20:2D:2A:09:E1:3D:C2:5B:A5:EF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N2aO5C9s1UpK5iAtKgnhPcJbpe8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         96:b4:03:ff:27:f5:ca:e1:19:46:12:5f:73:36:34:21:d7:81:
         06:27:9e:6a:69:62:86:06:4e:ad:49:36:ac:ee:c2:55:39:c9:
         29:2d:c1:4a:79:4b:4e:fd:a6:c1:5c:7a:6f:41:2f:a3:56:45:
         91:43:24:12:7f:31:a9:2f:29:4b:30:fa:23:b7:28:ff:1e:f9:
         be:9f:7e:e0:76:f9:66:7d:76:a3:48:d3:48:4d:ac:2b:f4:30:
         44:bc:7b:06:62:11:ab:1d:a5:50:63:c8:df:fb:50:25:81:4f:
         cb:df:d4:b5:6d:bc:d6:0b:03:b8:69:e2:94:3b:9b:b1:a3:20:
         da:0e:9f:ab:ec:4d:8e:f1:03:d5:1f:6f:f5:6f:f6:88:4a:76:
         bd:c5:81:f6:00:a4:36:fb:f0:71:b7:e5:5b:f4:f6:f7:63:bb:
         b0:11:1d:9a:7b:22:3a:fd:33:43:05:49:d3:0e:02:63:b2:15:
         97:9e:9f:1a:d4:0e:12:4f:2c:b4:62:4d:ea:77:4d:b6:ae:76:
         83:6d:51:cb:32:f8:d1:84:26:71:35:84:5f:23:75:01:32:ef:
         97:90:30:41:19:2e:f4:ae:cf:d8:6b:29:53:5d:38:0d:2d:16:
         e3:fd:34:ba:53:7b:be:60:d3:51:19:22:f3:e6:4a:7e:c0:21:
         e1:d1:45:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:44 2026 by rpki-client