Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_e_J8sdkezaSHiem-3WWjBbM6rU.roa
File:                     _e_J8sdkezaSHiem-3WWjBbM6rU.roa (raw, json)
Hash identifier:          5M969q9mcWk9XqRqhZAaa6YwId4Si9sY0OBlL37Xp2o=
Subject key identifier:   FD:EF:C9:F2:C7:64:7B:36:92:1E:27:A6:FB:75:96:8C:16:CC:EA:B5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11B0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_e_J8sdkezaSHiem-3WWjBbM6rU.roa
Signing time:             Sun 01 Mar 2026 02:36:20 +0000
ROA not before:           Sun 01 Mar 2026 02:36:20 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4528 (0x11b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:36:20 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=FDEFC9F2C7647B36921E27A6FB75968C16CCEAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:4c:c8:e3:2e:5e:3d:c0:67:87:30:cc:1c:
                    39:a9:eb:7b:52:e7:d3:e3:9d:3c:7c:82:e7:6b:f0:
                    48:e5:20:7e:5b:31:bd:58:e0:ce:9f:99:bd:e2:96:
                    84:60:fd:fb:7c:d4:70:70:95:a4:03:3e:04:36:01:
                    de:32:4c:8a:bd:37:d8:17:69:af:0e:80:ee:cc:6c:
                    cd:49:31:99:c7:dc:4e:89:a4:f8:36:7d:0c:21:65:
                    d7:8a:31:b6:bf:6d:18:20:83:fa:d2:27:23:c9:d7:
                    b3:35:e8:70:d3:52:d6:57:84:89:d7:96:77:2e:f3:
                    51:27:27:c4:d9:bf:a1:06:13:b6:17:d6:51:c7:d0:
                    7a:05:89:b0:0a:89:99:ba:6a:0c:4e:b3:f1:5d:88:
                    ce:a2:cb:38:3b:fe:ee:b6:69:32:93:62:f4:59:27:
                    4d:6a:0a:08:84:33:48:cf:35:8c:31:91:e0:ac:50:
                    58:7f:c7:96:d1:73:eb:97:1a:7f:bd:43:b7:f4:e1:
                    7c:24:4b:73:1b:97:53:2d:32:81:57:a7:42:27:71:
                    3a:23:69:86:96:18:8c:39:a6:a1:df:40:58:21:fa:
                    c7:a0:32:67:c7:8a:01:c3:e5:8a:ff:7a:83:7d:87:
                    94:13:60:cc:71:73:9e:8e:af:3e:4d:b2:1f:08:53:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:C9:F2:C7:64:7B:36:92:1E:27:A6:FB:75:96:8C:16:CC:EA:B5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_e_J8sdkezaSHiem-3WWjBbM6rU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:0a:23:bf:fb:cf:58:e5:4a:c6:69:f3:67:f1:53:7d:9f:e8:
         6a:87:c3:f3:cb:bb:7f:9d:bb:98:4b:eb:8e:90:b4:4f:25:d8:
         30:af:56:65:8c:a6:54:a6:08:81:1f:2e:31:79:00:ad:4c:ff:
         c9:8a:81:e0:40:01:44:41:ea:66:79:59:da:9d:45:19:ce:05:
         77:d1:e9:83:e4:42:32:78:f9:5c:4e:2a:10:ee:8c:f8:49:a0:
         98:61:10:92:16:63:ff:af:d5:2d:ff:e8:42:d4:2a:7e:64:72:
         1f:c4:aa:a7:9d:1d:8a:c1:5a:ac:fb:f5:c1:2f:68:a8:81:33:
         19:dc:8f:51:de:a8:fa:ec:dd:5b:28:22:ec:3c:32:67:b2:c9:
         21:83:c8:f9:9b:0c:57:42:b3:ce:f6:7b:9c:08:f2:3e:ac:13:
         8f:a6:e1:18:2b:10:4a:46:0c:1e:e8:98:b5:13:fd:c7:85:6f:
         b9:77:49:a0:91:19:a5:bc:d5:e6:19:b8:58:c4:4d:fd:b3:9e:
         4a:b3:c8:f3:93:4a:f8:04:85:2a:a5:91:52:25:68:54:f1:89:
         d0:1a:da:47:89:7e:e8:9b:be:3e:f6:10:43:2b:0a:cf:f6:e5:
         19:4d:2d:6a:65:73:13:66:7f:2b:5f:4b:cf:bf:22:1b:38:ac:
         2b:11:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:35 2026 by rpki-client