Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YEfmKUxiHlxgihJmiHivV-RTBws.roa
File:                     YEfmKUxiHlxgihJmiHivV-RTBws.roa (raw, json)
Hash identifier:          +C2KEcqANNbCcGpx+v+ee8eB3ma2qdGjKLQMEtHccwA=
Subject key identifier:   60:47:E6:29:4C:62:1E:5C:60:8A:12:66:88:78:AF:57:E4:53:07:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       107E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YEfmKUxiHlxgihJmiHivV-RTBws.roa
Signing time:             Sun 01 Mar 2026 01:39:55 +0000
ROA not before:           Sun 01 Mar 2026 01:39:55 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4222 (0x107e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:39:55 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6047E6294C621E5C608A12668878AF57E453070B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:5a:b9:55:4c:d9:7a:19:8e:86:94:d4:18:
                    4b:28:2d:82:49:fd:a6:a5:1a:63:23:a9:f2:22:af:
                    95:5d:1c:26:c4:35:b4:23:34:bb:e6:c5:7d:22:bf:
                    dd:54:e2:cb:11:68:99:cd:da:db:63:7a:c9:86:9b:
                    e7:4f:91:80:05:bd:97:ed:09:74:5b:d3:cf:d6:8b:
                    18:fa:75:fc:4c:d4:c7:fb:8b:42:eb:78:43:38:6a:
                    92:d9:73:69:d1:b2:13:ed:79:74:43:45:a8:c8:06:
                    17:31:f8:42:5c:67:15:b8:81:3b:f4:86:2f:ea:80:
                    4c:2a:18:b4:35:fd:40:15:d5:97:6b:3f:b5:75:37:
                    b5:a9:b7:5a:25:26:3d:45:e9:8e:55:3a:fe:a1:5b:
                    12:e2:75:b9:ee:44:22:b6:4e:57:bc:3e:52:65:69:
                    d1:85:ab:fb:eb:ec:29:39:c8:4f:eb:1c:cc:aa:dd:
                    17:4b:5f:a3:f5:79:ba:3f:ca:6b:5a:45:9c:7a:b5:
                    ed:e5:13:ca:44:c8:63:d7:7d:4a:48:c2:3c:62:07:
                    16:d8:7f:28:73:ea:1e:90:6d:5e:6c:d9:75:33:a9:
                    06:92:ac:69:f5:cd:98:46:a1:c1:ed:f1:d5:21:45:
                    c7:8a:53:58:e4:6f:09:43:33:15:50:91:7f:29:d4:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:47:E6:29:4C:62:1E:5C:60:8A:12:66:88:78:AF:57:E4:53:07:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YEfmKUxiHlxgihJmiHivV-RTBws.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:7e:30:08:96:13:39:2c:8c:4f:71:c4:5e:5b:8e:42:80:04:
         67:c1:4a:03:0c:5c:c6:3a:96:6a:a1:dc:48:6a:83:a6:46:3e:
         39:88:0d:ca:69:2d:f0:fb:f4:e7:c6:d9:40:31:2d:e6:0d:14:
         5a:a5:d3:71:3c:e3:1e:94:7d:a7:4e:81:ce:2e:65:72:9f:4a:
         32:7f:6d:95:33:dd:8f:e8:a8:5e:31:c4:1a:65:f4:29:1c:4f:
         0b:d9:45:d5:f8:0c:97:7c:48:4c:64:7c:3b:a4:1c:34:9c:4d:
         e6:3f:59:2a:ad:57:f0:3e:9b:a4:d3:49:73:23:b6:13:70:0d:
         60:2b:70:86:5d:34:a0:87:10:5d:31:7e:c1:52:87:a0:d9:d0:
         a3:54:bd:74:ae:9e:a3:99:f7:81:cf:d1:12:d0:02:5e:03:1e:
         b2:c0:e0:c4:c3:96:67:21:f8:9b:64:9a:a7:91:a9:0d:d2:4d:
         6d:d6:6b:e8:b7:70:a3:60:80:0b:f2:23:72:44:b6:3b:21:b5:
         d3:cf:6d:12:7c:e8:4a:7c:eb:e9:cd:f7:bc:7a:29:f1:fa:37:
         46:99:6e:a6:c5:2b:04:67:b0:88:ef:47:6c:9f:e7:1b:d5:4f:
         1a:ab:f1:e8:b5:15:62:16:5d:08:79:19:56:6e:73:ec:85:1c:
         2b:57:22:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:33 2026 by rpki-client