Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RRwQmfSr7Ls1ibPcTgrdq5O2ABU.roa
File:                     RRwQmfSr7Ls1ibPcTgrdq5O2ABU.roa (raw, json)
Hash identifier:          R6dP2fNRFRKph7ls9G6QvmDAKQ6FNc8bZogUHd1DF/0=
Subject key identifier:   45:1C:10:99:F4:AB:EC:BB:35:89:B3:DC:4E:0A:DD:AB:93:B6:00:15
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11F8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RRwQmfSr7Ls1ibPcTgrdq5O2ABU.roa
Signing time:             Sun 01 Mar 2026 02:44:37 +0000
ROA not before:           Sun 01 Mar 2026 02:44:37 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4600 (0x11f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:44:37 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=451C1099F4ABECBB3589B3DC4E0ADDAB93B60015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ce:c6:dd:29:9e:b8:c1:5a:ec:b2:bb:41:69:
                    90:72:f5:a8:28:a1:9f:1c:33:6f:8f:fd:aa:f1:85:
                    02:cf:89:b7:f3:06:7f:84:a2:61:e4:28:c6:8a:a4:
                    64:17:56:14:71:05:8a:3d:09:46:d7:b2:30:50:a2:
                    3b:d9:fb:b0:37:99:fc:c7:24:20:98:bd:0e:d2:ae:
                    a5:68:02:7f:c1:1a:3d:99:6a:ba:66:2f:48:9f:e4:
                    df:ff:fc:c6:ae:e4:8e:7d:8a:86:b8:61:bf:ee:50:
                    c4:ed:5e:00:9a:93:b8:e4:cd:3c:63:5c:00:74:94:
                    f4:b2:f1:6b:24:27:bf:fa:6f:8e:b3:d5:80:9b:43:
                    57:c6:ba:1a:2e:74:2e:8e:39:4e:53:33:3d:40:85:
                    89:0f:e8:69:7f:66:08:fe:ff:22:1a:4c:44:4f:e5:
                    eb:2e:66:b1:ad:fe:bd:2d:64:a1:cf:dc:40:7b:1a:
                    64:56:79:90:71:f1:31:1b:7a:43:53:34:21:19:85:
                    a9:30:3f:f7:96:62:06:d6:12:34:b9:c1:7f:d9:b0:
                    ef:99:16:a0:22:55:73:15:3c:33:5e:22:1d:60:be:
                    eb:ca:7d:ed:f2:15:74:84:25:f2:c4:60:11:4a:a7:
                    7f:6c:98:aa:54:0b:e8:23:a4:5d:43:1c:a3:cf:04:
                    20:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1C:10:99:F4:AB:EC:BB:35:89:B3:DC:4E:0A:DD:AB:93:B6:00:15
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RRwQmfSr7Ls1ibPcTgrdq5O2ABU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:99:b0:e3:c7:1f:88:9b:df:76:34:03:48:44:40:d7:65:47:
         54:ff:f2:21:18:b4:6c:cb:26:61:8b:3c:ba:d9:d1:d4:9d:a3:
         54:ff:6e:20:7a:2e:69:ce:16:d5:20:e4:11:2a:5b:02:76:85:
         ee:c7:09:40:ab:4f:85:e2:ad:ba:3a:7c:54:a6:d8:30:cb:10:
         2b:07:d6:32:11:74:c9:26:12:42:18:2c:8d:db:e8:13:06:58:
         81:9a:73:7f:fc:ea:a3:21:66:3f:c8:90:bb:a7:87:d1:b1:36:
         d9:63:c1:6e:81:06:ab:d0:83:3e:aa:87:32:c4:36:33:d4:bd:
         73:78:5f:27:a7:18:13:1d:f7:c7:2d:be:db:00:cb:0f:ed:62:
         4f:e6:b9:af:90:eb:df:17:2d:f2:d2:0d:04:7f:bb:6e:fb:c4:
         df:32:19:e8:a3:ce:f0:d1:f7:97:ce:c9:b4:32:0b:91:92:b3:
         b7:cd:74:ca:07:d4:98:44:5f:53:62:11:99:ee:dd:6d:13:5d:
         a7:a6:fb:42:72:d9:0c:62:60:1f:d9:8d:4a:f2:56:89:a0:7a:
         69:17:d6:62:37:f8:1b:2f:20:70:99:58:39:80:44:02:51:6a:
         4b:7d:3b:58:02:97:b3:a9:26:b9:24:91:44:4a:ce:cf:97:95:
         ad:f7:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:28 2026 by rpki-client