Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/V_FILy80BwztIyTJUi-YceoSKQo.roa
File:                     V_FILy80BwztIyTJUi-YceoSKQo.roa (raw, json)
Hash identifier:          gU/ofzuUc7U2twQti4sqg2jDZrgzfRYqP7MqYMxmiF0=
Subject key identifier:   57:F1:48:2F:2F:34:07:0C:ED:23:24:C9:52:2F:98:71:EA:12:29:0A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       128E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V_FILy80BwztIyTJUi-YceoSKQo.roa
Signing time:             Sun 01 Mar 2026 03:08:39 +0000
ROA not before:           Sun 01 Mar 2026 03:08:39 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4750 (0x128e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:08:39 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=57F1482F2F34070CED2324C9522F9871EA12290A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:42:a0:a7:f6:bf:f5:be:15:34:d5:c6:66:33:
                    cb:40:fb:23:e5:d9:a0:ae:a8:f4:b3:bc:87:c6:0f:
                    f4:0b:53:68:75:26:3d:be:51:fc:0d:d4:79:6d:f2:
                    b9:cd:50:99:b4:74:bb:02:13:86:6f:71:6a:3a:2f:
                    1a:bb:e7:1d:33:89:e5:7e:80:5f:ca:cf:14:92:e7:
                    af:b5:e8:91:df:e5:11:0c:9b:e8:a4:03:10:6b:ca:
                    51:75:a8:c7:7b:7c:a0:67:80:ff:f1:59:5f:b6:33:
                    34:1e:38:4f:1f:b0:bb:e1:d0:bd:12:25:f4:f6:d8:
                    6c:fd:02:06:81:58:3e:af:e1:d2:da:d7:28:05:41:
                    ac:28:bb:14:2e:9f:87:fe:e5:85:8a:aa:02:47:8a:
                    4e:17:55:bc:b4:6b:d8:f1:47:c8:d0:32:f8:e5:64:
                    4f:a9:5a:fb:86:20:93:bb:ff:76:6e:cb:b5:a1:71:
                    8a:46:2d:f1:f6:7d:a5:87:17:c6:54:24:84:8b:46:
                    ba:01:1b:26:7c:98:9c:1c:12:db:f7:13:fc:53:ee:
                    1a:00:2b:3f:7b:74:23:01:f7:90:9e:37:0e:b2:9f:
                    8a:47:6d:2a:06:af:37:23:ac:dd:2c:20:90:79:fc:
                    ac:23:13:d2:be:f0:fa:c7:39:35:0e:3b:d3:3f:a6:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F1:48:2F:2F:34:07:0C:ED:23:24:C9:52:2F:98:71:EA:12:29:0A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V_FILy80BwztIyTJUi-YceoSKQo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:32:d3:a8:79:61:0a:c7:0d:ee:42:d9:36:66:4a:37:0c:e7:
         75:12:d5:86:c1:7b:40:3d:cf:fc:26:d2:6c:17:15:23:e5:e0:
         ef:d5:98:41:37:ae:20:cf:af:6e:6c:43:ed:90:0e:ee:73:d2:
         6e:6e:cb:03:88:b7:69:18:af:fd:3e:e9:9d:ad:e8:72:b1:60:
         99:49:0f:79:9b:34:48:c3:33:37:29:29:d9:fa:5c:a7:d1:91:
         ce:e2:a7:31:53:99:52:09:bf:4a:7a:af:ec:b0:c0:6f:b4:76:
         04:d4:69:dc:71:a7:18:4c:1b:a9:0c:3d:f9:eb:b4:ca:80:c4:
         fa:b8:ab:ac:09:d3:53:b1:5c:69:b7:2a:51:54:94:7b:2c:96:
         9d:6b:89:d9:82:2f:f2:1c:25:79:95:d0:71:69:46:d2:3e:c9:
         1b:f7:1b:b6:3f:64:dd:2e:1a:a6:64:06:d7:41:f1:0a:0b:27:
         10:10:f7:74:ea:0e:4c:67:b9:60:05:e2:4b:c7:17:5f:fa:29:
         22:de:9d:37:24:90:8f:1d:c0:d3:82:ca:5d:2f:cc:3f:63:31:
         7d:dd:80:b3:cd:ed:26:1f:d3:6a:55:8e:83:d1:8b:cd:38:39:
         89:41:20:74:54:2d:67:7b:2b:2a:11:1a:e7:5b:61:f3:80:b9:
         a9:05:ec:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:50 2026 by rpki-client