Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TnclhBYnGNHJxIzU_9afERiXxQY.roa
File:                     TnclhBYnGNHJxIzU_9afERiXxQY.roa (raw, json)
Hash identifier:          zuuuFm6iGF6c3NJUX7akjTa5L11FGl4SCB2vE8MdnAo=
Subject key identifier:   4E:77:25:84:16:27:18:D1:C9:C4:8C:D4:FF:D6:9F:11:18:97:C5:06
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12E0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TnclhBYnGNHJxIzU_9afERiXxQY.roa
Signing time:             Sun 01 Mar 2026 03:20:38 +0000
ROA not before:           Sun 01 Mar 2026 03:20:38 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4832 (0x12e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:20:38 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4E772584162718D1C9C48CD4FFD69F111897C506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:42:e2:2e:ef:ae:28:72:ed:a9:96:11:45:
                    f7:55:37:1a:8a:6a:1f:a5:01:f2:62:39:1e:18:69:
                    b7:98:ef:7a:10:70:32:c5:7d:2d:f2:17:cc:11:be:
                    2c:64:2b:76:f9:98:1f:5f:f1:d4:fa:e4:f0:cf:94:
                    a2:89:92:1d:17:22:e0:cf:86:f7:91:26:8f:a5:f6:
                    84:38:6a:6f:6d:b8:d1:39:ab:c8:b1:b9:e3:62:e2:
                    a4:61:e4:cf:98:e6:9e:a2:28:04:0a:3b:69:b0:7a:
                    ae:c4:aa:59:02:34:f3:bf:ca:b6:83:ea:3a:bf:dc:
                    01:9b:b6:09:64:bf:e8:ec:32:3b:97:c1:a3:0b:82:
                    f7:d7:28:9a:ed:9c:53:5a:21:0c:f7:47:38:d3:e7:
                    73:21:14:93:b7:07:d1:bf:13:05:a1:26:0e:f8:7c:
                    0f:7c:1d:2f:0c:b9:85:97:42:fc:c6:16:8e:dc:24:
                    c2:a7:08:45:a7:cf:cc:58:5b:47:4a:4f:e2:b1:9b:
                    b4:a5:45:ed:f4:eb:f4:cd:f6:4f:da:83:af:e8:75:
                    75:f9:ac:3c:06:8a:2e:30:e9:36:9d:f3:7c:1c:ba:
                    2c:36:5b:82:1a:f4:53:3d:8c:f9:86:37:42:4f:0f:
                    f2:df:d8:92:c5:08:ee:72:e3:90:8a:f8:6c:74:87:
                    17:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:77:25:84:16:27:18:D1:C9:C4:8C:D4:FF:D6:9F:11:18:97:C5:06
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TnclhBYnGNHJxIzU_9afERiXxQY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:fd:43:8a:ed:8a:df:cd:65:9b:f2:3e:2a:62:a2:26:47:bb:
         cd:53:30:a7:c7:a8:5f:5e:51:c2:f2:cc:02:aa:ef:ad:0e:89:
         79:4f:b9:04:fb:a8:48:83:a3:5e:6a:b0:f5:92:00:a2:45:e4:
         de:ae:4a:c9:49:3e:15:19:fe:87:6f:69:5a:44:33:20:68:d2:
         09:35:9f:7c:a3:e2:5a:fa:41:62:e6:d4:29:01:be:c8:f0:ac:
         4b:de:3d:38:93:2e:f3:2c:39:d6:57:5c:6f:13:d5:dc:a2:7e:
         4e:1d:be:70:a9:18:ac:b7:08:7a:d4:f5:38:3f:36:9b:a6:ef:
         1d:ce:f5:8f:ca:f9:7e:2f:79:c3:3b:dd:d3:96:f4:6d:e6:cc:
         42:f4:75:99:ba:79:03:8d:b1:ca:c9:bc:25:73:2b:b9:99:5f:
         dd:92:50:e7:92:d8:3f:25:ae:ad:b7:ae:67:8b:20:6a:1c:cb:
         80:12:36:af:ee:bc:72:c4:91:20:7d:fb:98:15:45:07:a9:d1:
         88:77:0f:2d:5d:84:bd:b7:09:d4:17:ba:cc:16:b9:16:bb:a3:
         e0:bc:53:ba:9b:cd:e5:7b:49:50:2d:d2:53:5f:59:ca:c8:be:
         cd:85:80:d3:d6:0e:39:bf:5b:8a:48:71:94:f7:6a:54:40:73:
         63:54:8c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:53 2026 by rpki-client