Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QldihS3CAQuIR7aXGfdbk9EU80A.roa
File:                     QldihS3CAQuIR7aXGfdbk9EU80A.roa (raw, json)
Hash identifier:          uJgmzEhn+a4GKVFUqzCvcO9Vs+u9jnxnSGEWpeBxepk=
Subject key identifier:   42:57:62:85:2D:C2:01:0B:88:47:B6:97:19:F7:5B:93:D1:14:F3:40
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1347
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QldihS3CAQuIR7aXGfdbk9EU80A.roa
Signing time:             Sun 01 Mar 2026 03:40:41 +0000
ROA not before:           Sun 01 Mar 2026 03:40:41 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4935 (0x1347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:40:41 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=425762852DC2010B8847B69719F75B93D114F340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:ff:33:d2:2b:42:03:ae:7d:20:2a:c4:74:
                    90:f3:26:69:48:75:38:52:c6:95:6f:66:58:07:2b:
                    94:7c:7c:c0:fc:23:f4:46:43:3e:47:ff:64:a5:84:
                    f6:42:63:32:9a:61:dc:f5:1a:ee:b3:05:db:df:64:
                    60:0e:c4:fc:72:66:e1:83:c5:b0:58:96:82:a2:f3:
                    a5:00:ee:29:d9:3f:7a:c3:a7:94:a1:98:c6:97:31:
                    3b:0a:cd:00:92:bb:3a:c1:fa:6d:6b:6b:63:82:28:
                    fa:c8:c2:56:30:b0:3f:02:c2:7f:87:13:ff:35:90:
                    fb:38:6f:9b:e2:93:8f:96:08:dc:71:ca:ea:56:a2:
                    1f:f9:b1:c0:07:49:6c:ca:b5:14:4b:5a:79:9f:20:
                    aa:85:e6:58:79:b5:89:3f:3f:f3:ce:af:0a:38:c0:
                    93:b8:19:43:09:8a:c7:a9:cb:c3:8f:58:51:07:fc:
                    74:24:99:f5:f6:2e:6d:24:49:1b:8f:d7:d1:97:ed:
                    ae:06:52:23:27:24:5e:1c:3e:8f:80:4f:9b:8e:b6:
                    f5:9e:bd:c5:b2:46:f4:c3:ae:bd:cd:b7:63:37:56:
                    38:48:c5:97:68:04:8a:16:19:b2:d6:d0:00:95:d2:
                    fe:89:b2:67:a1:57:bf:e4:ec:fc:43:e6:3f:9e:8e:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:57:62:85:2D:C2:01:0B:88:47:B6:97:19:F7:5B:93:D1:14:F3:40
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QldihS3CAQuIR7aXGfdbk9EU80A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:99:9a:b5:46:75:68:75:5d:36:1f:ad:6e:aa:87:f3:2e:e9:
         50:af:f3:96:af:88:98:7d:a2:66:3d:70:28:8c:fc:ad:2b:c3:
         12:a9:e9:1d:dd:2a:b3:65:56:3a:32:c2:ad:b9:9e:27:aa:0f:
         f6:d4:35:4c:c6:13:9b:a5:4d:79:f9:75:24:14:e5:e5:86:d8:
         da:26:af:da:0b:e0:7c:54:68:4b:aa:b9:df:74:65:a6:83:26:
         d2:c3:7f:62:55:99:66:43:81:58:ad:e0:57:7b:ce:84:55:8b:
         b1:22:fb:4c:0b:5c:76:76:aa:73:f2:cb:14:98:78:8c:d9:ed:
         d1:0d:d9:a7:e8:65:88:a8:5f:a9:c0:1e:9d:e6:a3:fc:a1:af:
         58:c9:00:2e:41:86:eb:65:ff:e9:18:3e:89:ff:8b:91:af:f0:
         70:07:6c:70:15:04:c3:88:5c:e2:a8:25:a0:b2:84:9c:ab:ae:
         03:e3:56:33:e0:35:08:6d:d1:80:11:42:c9:0b:dc:8c:02:8a:
         ff:55:15:70:37:ff:99:a0:45:60:05:c9:c6:30:b8:c5:d9:ab:
         ba:69:6c:59:95:8d:ed:70:e5:0c:51:c0:57:89:36:ff:59:d0:
         2f:ac:2c:c9:09:00:33:ca:91:23:13:9d:d7:fd:b1:89:c7:10:
         3b:28:c6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:32 2026 by rpki-client