Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_eMh4uzCPfF9BUunAu-F2zSPxzs.roa
File:                     _eMh4uzCPfF9BUunAu-F2zSPxzs.roa (raw, json)
Hash identifier:          ryOACENITtL5fDrZZ01XfgGwC3hndO0IIOEsNRMvwiY=
Subject key identifier:   FD:E3:21:E2:EC:C2:3D:F1:7D:05:4B:A7:02:EF:85:DB:34:8F:C7:3B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11B4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_eMh4uzCPfF9BUunAu-F2zSPxzs.roa
Signing time:             Sun 01 Mar 2026 02:36:22 +0000
ROA not before:           Sun 01 Mar 2026 02:36:22 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4532 (0x11b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:36:22 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=FDE321E2ECC23DF17D054BA702EF85DB348FC73B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b9:11:05:04:62:ee:b9:90:e0:0c:c6:7c:67:
                    fa:1d:af:31:f7:1e:2a:eb:ca:f8:6b:cf:93:bf:bd:
                    be:bd:0d:65:3f:5e:86:d3:27:ee:ab:c2:2a:a7:0e:
                    f4:a7:57:bb:b8:e5:96:23:b9:b5:52:f8:1a:54:f2:
                    2f:05:a5:7a:5b:02:d8:d5:cd:a8:62:84:66:01:13:
                    c3:52:99:36:c2:8d:da:af:88:95:5f:17:3c:2a:85:
                    b4:f5:9e:b0:e6:6d:6b:cd:15:33:70:24:c2:64:66:
                    27:84:79:66:e3:ef:b6:2d:6f:9c:05:e2:4f:5b:0c:
                    94:b0:62:40:23:1d:49:8d:3f:75:b1:3b:79:e4:eb:
                    0d:18:71:19:b5:bc:1f:2c:72:62:a3:c2:4d:95:08:
                    7e:e0:4b:3c:8a:cd:e0:ea:1b:ee:41:53:2a:2c:d5:
                    39:4b:7d:13:54:d1:76:44:04:5d:03:e4:ed:af:61:
                    cf:a4:91:44:4b:a7:ce:88:a7:83:9e:54:44:7a:48:
                    e7:b1:7a:b1:6e:9f:b5:b9:b8:14:9a:cf:db:e6:0a:
                    0c:c1:bf:d8:fd:a1:c3:31:ca:60:3a:6c:03:6b:c1:
                    41:b3:0d:81:f7:e8:d5:cb:a6:24:83:90:0c:1c:c0:
                    64:29:7c:88:e7:39:6c:c3:bf:24:b3:15:16:7c:99:
                    52:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E3:21:E2:EC:C2:3D:F1:7D:05:4B:A7:02:EF:85:DB:34:8F:C7:3B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_eMh4uzCPfF9BUunAu-F2zSPxzs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:d6:3d:3f:c1:fc:bb:9b:34:0f:e4:8b:63:d3:4b:3f:31:3a:
         79:eb:6c:31:2e:ce:1a:ae:7f:96:a2:63:0e:80:3d:e6:cc:39:
         65:42:f6:db:a1:47:f8:fc:61:d2:3d:a8:ad:1b:4e:54:0e:47:
         a2:a0:0e:67:1d:3d:80:05:ce:f4:bd:67:42:0c:58:2b:14:24:
         98:c9:e2:c6:78:73:ab:89:ed:e7:71:0e:34:2a:e3:fd:42:6e:
         d6:40:35:f9:6c:c2:4b:42:84:6e:0d:7f:df:9f:f8:f7:91:30:
         53:59:fb:fe:82:6b:a0:35:29:0f:95:6a:ce:0a:6e:e9:79:62:
         5f:ed:c9:ea:50:8f:b0:8f:c9:7f:6d:82:f5:1d:56:23:0b:90:
         19:1a:24:c1:6b:cf:00:ad:72:16:42:01:81:52:c1:e7:c1:7b:
         c9:1c:eb:81:3a:d5:47:e5:d0:b9:bd:f6:0f:e7:7b:c7:bb:bf:
         6e:6c:fb:ab:ad:e3:1d:97:81:de:ea:bf:bc:40:bf:11:12:c9:
         28:b5:b4:5a:36:fc:40:04:3c:74:79:ea:48:fa:78:1e:45:53:
         82:34:d5:f2:5e:57:7e:2a:fd:0c:76:cf:24:2e:5c:dd:90:8e:
         fa:71:cf:3d:c6:cf:1b:9d:6a:0e:e2:8c:1d:d4:9a:39:f4:3b:
         c0:cb:5b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:09:27 2026 by rpki-client