Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yer0pBRbVW1GRLBppFsudoo3OSA.roa
File:                     Yer0pBRbVW1GRLBppFsudoo3OSA.roa (raw, json)
Hash identifier:          WO1zPvBai4zye9PY7FwICidTifrK3ycBbjUsLkYMxDs=
Subject key identifier:   61:EA:F4:A4:14:5B:55:6D:46:44:B0:69:A4:5B:2E:76:8A:37:39:20
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       129D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yer0pBRbVW1GRLBppFsudoo3OSA.roa
Signing time:             Sun 01 Mar 2026 03:08:47 +0000
ROA not before:           Sun 01 Mar 2026 03:08:47 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4765 (0x129d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:08:47 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=61EAF4A4145B556D4644B069A45B2E768A373920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:2e:89:f0:5f:b9:aa:48:a2:c6:c0:0c:d8:
                    63:29:85:13:42:c0:52:6b:55:fd:85:4a:e2:21:47:
                    5c:f5:e5:4f:a6:d3:7a:2b:40:2a:7a:54:c0:91:aa:
                    78:3c:1a:64:f4:a6:48:fa:6b:52:35:45:a7:fa:23:
                    a6:f8:4e:04:85:c6:d4:92:a8:dc:81:6e:3b:62:de:
                    df:86:33:95:37:5d:fe:69:65:9f:a9:09:fb:c0:a1:
                    3f:c4:d3:6e:df:ae:7b:92:35:9a:9f:5e:a8:af:34:
                    3d:ec:4b:37:de:23:25:c5:72:9a:71:47:4c:89:19:
                    76:53:00:dd:ff:1d:24:38:56:f7:7b:d8:85:27:c8:
                    bc:28:33:55:e4:33:71:f0:3b:5e:f1:f0:c3:f3:31:
                    b7:c8:81:8b:12:27:c4:6c:84:d2:3b:f2:22:c0:b4:
                    0f:cc:65:3b:82:28:5c:f4:b7:5a:81:f2:b7:ba:f2:
                    97:95:31:1a:8c:62:6a:dd:5c:a0:1c:30:96:5b:15:
                    8f:2d:9b:43:e3:13:ce:8e:9e:ea:9a:9d:d7:5f:ca:
                    22:8e:44:4e:f0:be:bf:a7:f9:89:51:37:bd:2b:09:
                    2c:c2:fc:f3:d8:df:f9:62:a4:d9:c0:a7:47:ef:e7:
                    03:d8:75:0e:86:92:7a:c9:a9:13:df:dc:14:53:93:
                    52:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EA:F4:A4:14:5B:55:6D:46:44:B0:69:A4:5B:2E:76:8A:37:39:20
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yer0pBRbVW1GRLBppFsudoo3OSA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:bc:bb:84:74:b5:4f:1c:8d:50:19:06:c4:35:a3:79:0a:
         a1:8b:9f:a9:40:0c:c8:8b:14:bb:25:8e:a8:9f:9f:87:7b:20:
         59:d1:a2:5e:f6:f1:d9:59:0e:c4:20:d4:53:a9:47:c5:8e:93:
         2d:ba:fa:6a:68:c0:07:37:65:0c:2d:7a:fa:77:98:cf:f0:39:
         a4:c1:aa:82:1d:c7:6c:5c:31:16:8f:d4:18:b3:06:97:18:10:
         2f:3b:84:8d:d7:42:a6:77:f3:3e:6f:c6:7e:5c:88:ca:7a:53:
         d9:de:01:16:b5:47:75:ee:db:6e:7e:61:06:f3:91:0c:9f:01:
         d2:4b:cb:5d:ab:93:86:61:b7:27:55:7b:d0:8f:e8:b0:24:ca:
         ea:56:61:44:04:fb:e9:61:61:71:da:c7:4b:2d:f0:b4:57:26:
         e9:b8:31:64:0d:91:cc:83:b3:9e:5f:95:01:0e:aa:6a:42:e2:
         40:bd:24:54:cf:4f:39:a7:f4:32:f4:e9:98:14:5c:9b:70:33:
         ea:e7:39:37:09:41:30:63:ad:a2:df:00:a5:f7:d2:a1:7a:98:
         3c:d5:ab:95:b0:a8:c2:ce:d1:4f:9b:af:3d:2c:04:75:97:dc:
         20:fd:a6:19:57:63:05:aa:ad:b8:b7:36:45:1b:61:48:ce:90:
         d1:06:c5:00
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEp0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzA4NDdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYxRUFGNEE0MTQ1QjU1
NkQ0NjQ0QjA2OUE0NUIyRTc2OEEzNzM5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC71S6J8F+5qkiixsAM2GMphRNCwFJrVf2FSuIhR1z15U+m03or
QCp6VMCRqng8GmT0pkj6a1I1Raf6I6b4TgSFxtSSqNyBbjti3t+GM5U3Xf5pZZ+p
CfvAoT/E027frnuSNZqfXqivND3sSzfeIyXFcppxR0yJGXZTAN3/HSQ4Vvd72IUn
yLwoM1XkM3HwO17x8MPzMbfIgYsSJ8RshNI78iLAtA/MZTuCKFz0t1qB8re68peV
MRqMYmrdXKAcMJZbFY8tm0PjE86OnuqanddfyiKORE7wvr+n+YlRN70rCSzC/PPY
3/lipNnAp0fv5wPYdQ6GknrJqRPf3BRTk1IxAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUYer0pBRbVW1GRLBppFsudoo3OSAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1llcjBwQlJiVlcxR1JMQnBwRnN1ZG9vM09TQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBTiwwDQYJKoZIhvcNAQELBQADggEBAF4DvLuEdLVPHI1QGQbENaN5CqGL
n6lADMiLFLsljqifn4d7IFnRol728dlZDsQg1FOpR8WOky26+mpowAc3ZQwtevp3
mM/wOaTBqoIdx2xcMRaP1BizBpcYEC87hI3XQqZ38z5vxn5ciMp6U9neARa1R3Xu
225+YQbzkQyfAdJLy12rk4ZhtydVe9CP6LAkyupWYUQE++lhYXHax0st8LRXJum4
MWQNkcyDs55flQEOqmpC4kC9JFTPTzmn9DL06ZgUXJtwM+rnOTcJQTBjraLfAKX3
0qF6mDzVq5WwqMLO0U+brz0sBHWX3CD9phlXYwWqrbi3NkUbYUjOkNEGxQA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:32 2026 by rpki-client