Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TFJtIOkUoYAdDUD-ypyrMHLO0Nw.roa
File:                     TFJtIOkUoYAdDUD-ypyrMHLO0Nw.roa (raw, json)
Hash identifier:          TnM2ZNwTzn3dz5isMo6OyMXveEAuVJfaI0afGyN27fQ=
Subject key identifier:   4C:52:6D:20:E9:14:A1:80:1D:0D:40:FE:CA:9C:AB:30:72:CE:D0:DC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10D8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TFJtIOkUoYAdDUD-ypyrMHLO0Nw.roa
Signing time:             Sun 01 Mar 2026 01:54:50 +0000
ROA not before:           Sun 01 Mar 2026 01:54:50 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4312 (0x10d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:54:50 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4C526D20E914A1801D0D40FECA9CAB3072CED0DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:d0:7f:25:93:f5:c8:82:3e:cd:e1:8d:77:
                    8e:81:41:a4:1d:63:67:e3:e6:77:1c:87:98:a6:b1:
                    23:6c:0d:c7:3d:ef:f3:9e:f1:27:7a:23:90:fd:d0:
                    65:ae:67:0a:ba:1f:c7:dd:7f:35:32:fe:2a:f4:82:
                    7c:e2:e9:17:74:99:da:f1:f3:c5:66:1e:17:b3:e2:
                    d3:eb:3f:f2:06:fc:c2:89:dd:ba:63:b6:9a:03:b6:
                    83:ad:5e:9a:c2:f2:03:11:6d:b8:e2:d3:de:fe:72:
                    74:37:1d:9b:3a:0a:14:e6:f4:98:b2:02:26:ee:2f:
                    e1:4d:df:fe:b1:29:7a:ac:3d:7a:b9:26:29:38:48:
                    33:10:50:94:86:e2:93:b7:4d:54:67:b5:fd:16:b3:
                    d3:26:f9:a7:68:c3:ce:bb:c0:31:21:bc:89:7b:91:
                    87:ac:63:0b:43:8c:0b:08:45:5b:f4:bd:ed:35:d9:
                    22:b1:1a:4f:89:5d:7c:ee:37:a2:6b:52:33:37:fa:
                    58:28:56:e7:73:87:47:71:9b:37:03:d8:62:96:95:
                    8b:12:16:7b:10:98:ea:49:d4:c9:82:2f:5f:36:bd:
                    23:15:c5:de:dd:ec:22:55:33:82:60:1f:6b:0a:04:
                    32:63:8a:ab:41:46:4d:b5:93:06:55:e0:5e:bc:7e:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:52:6D:20:E9:14:A1:80:1D:0D:40:FE:CA:9C:AB:30:72:CE:D0:DC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TFJtIOkUoYAdDUD-ypyrMHLO0Nw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:56:6e:57:90:39:3a:bf:96:8b:1f:c4:2b:66:c9:c2:c5:72:
         93:c2:69:1d:31:22:c1:83:14:04:9d:23:c2:ad:20:e4:68:5e:
         46:44:5f:0f:f3:24:d8:17:d0:f8:90:bf:2d:a6:02:be:93:01:
         de:21:fb:4b:4a:d5:e0:b9:82:84:86:8c:93:62:5b:b0:59:cd:
         b0:4a:4c:23:07:96:2e:7c:fe:01:58:d1:6d:4e:62:e9:84:73:
         7d:41:ea:78:8e:33:12:b6:53:ea:9a:1f:b2:9a:2c:35:2a:d6:
         18:61:26:ef:0d:b0:7f:16:ef:b4:b0:5c:78:55:14:8b:1a:29:
         35:d2:cb:23:e3:e3:b3:73:b9:22:a2:60:02:48:3c:13:05:5d:
         58:58:3b:90:d9:8b:e7:cc:8c:27:91:9b:ec:c9:4f:81:63:3f:
         64:4c:c0:6d:e6:4f:79:d4:11:d1:d5:5c:d0:02:2a:d1:01:03:
         1c:82:19:7d:28:3c:b9:ef:23:7a:31:3b:61:12:8b:44:cb:87:
         ef:3f:bd:0b:f8:1f:73:5a:6b:fd:d5:8a:94:18:80:ed:60:27:
         73:40:07:da:3c:03:ff:ea:0d:ee:01:58:81:7d:58:41:f9:94:
         3e:dd:8f:83:57:57:15:a0:f4:4e:2a:bc:98:0c:f1:4c:60:00:
         40:64:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:33 2026 by rpki-client