Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b3puQNZkQ9GHqmp69-bVYWIG4Tw.roa
File:                     b3puQNZkQ9GHqmp69-bVYWIG4Tw.roa (raw, json)
Hash identifier:          bJAwx9217CnDMjtcViXDU6McBBvX/Ivrh7WTH1stx/A=
Subject key identifier:   6F:7A:6E:40:D6:64:43:D1:87:AA:6A:7A:F7:E6:D5:61:62:06:E1:3C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       120D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b3puQNZkQ9GHqmp69-bVYWIG4Tw.roa
Signing time:             Sun 01 Mar 2026 02:48:37 +0000
ROA not before:           Sun 01 Mar 2026 02:48:37 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4621 (0x120d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:48:37 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6F7A6E40D66443D187AA6A7AF7E6D5616206E13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:bc:9e:a0:ea:5c:ec:7f:f4:7a:4c:a3:13:
                    45:73:76:54:b8:ce:68:50:8e:d3:88:26:bd:56:cf:
                    92:4e:05:b5:d0:b1:61:91:44:2a:cd:51:75:da:05:
                    ad:9a:f6:a8:07:1f:28:44:45:95:99:68:86:97:1f:
                    5b:f0:e4:03:57:aa:a6:57:6d:d9:54:45:45:93:10:
                    1e:cc:93:87:e2:83:6a:a1:fa:73:62:f1:34:10:52:
                    d1:b0:f1:8b:72:59:be:8a:cc:92:b4:4e:d6:90:60:
                    a9:50:30:b1:bf:5b:f0:06:fd:ff:7c:95:2c:37:7d:
                    09:7c:93:ed:f7:a1:44:66:d1:82:a9:58:d0:ad:3e:
                    92:75:88:08:ea:2e:fd:0d:9c:54:cb:a7:71:5e:c5:
                    0a:18:70:14:4f:1f:fa:f9:97:da:db:5e:47:7c:22:
                    cc:df:be:51:75:b3:e0:52:6d:28:84:ff:3a:9e:1d:
                    d8:a4:f5:90:f6:f1:3f:f7:d9:02:95:88:24:4f:1c:
                    04:04:bf:23:40:e9:7d:d2:86:b2:f8:b8:e8:ac:6a:
                    59:31:91:f0:ba:3e:ea:d1:82:68:bc:a0:dd:41:ba:
                    00:db:69:4c:ec:b3:38:a9:45:9c:8d:a9:08:09:10:
                    0a:d0:fd:13:df:9f:f4:13:eb:e2:c7:5e:11:50:e2:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:6E:40:D6:64:43:D1:87:AA:6A:7A:F7:E6:D5:61:62:06:E1:3C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b3puQNZkQ9GHqmp69-bVYWIG4Tw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:c3:0f:c2:f8:5d:14:a1:9c:7b:58:a7:86:f9:85:ea:36:05:
         c4:48:16:b3:78:78:fe:87:b9:42:5e:08:c4:33:35:71:e8:68:
         98:22:c5:72:d9:53:db:b6:0f:a4:90:8a:5c:93:41:cc:2d:41:
         37:48:04:64:76:c8:f6:88:7d:e0:cb:31:65:0f:5a:10:cc:ac:
         7b:14:52:ed:44:d2:09:e8:1c:e1:76:e1:ee:c8:41:d7:e4:9f:
         ce:dd:39:1a:db:9a:11:9c:dc:61:e7:69:8a:8a:0d:6c:08:c6:
         eb:35:0a:a4:44:c9:6d:ba:ac:b9:b9:6d:f6:43:bc:81:14:49:
         ee:05:16:de:dd:71:23:fc:e6:01:a5:36:56:30:f7:c2:e4:7d:
         aa:a5:b1:c7:d2:ba:4c:15:d5:15:b5:6f:56:56:8c:82:ff:ee:
         04:82:65:38:b9:05:2a:2a:db:21:55:8c:d9:76:a6:28:02:ce:
         8d:49:07:21:2f:ea:9d:de:f4:fe:b2:90:87:c5:4a:f3:a6:93:
         86:fe:8b:a2:94:be:04:39:d5:bc:10:bb:4b:b9:24:ff:98:4d:
         98:45:82:4a:ae:2b:04:2a:94:64:4d:2d:bd:ad:16:60:ac:ac:
         68:f4:c9:35:33:26:fe:0a:e3:24:2b:d7:20:51:d7:1a:38:2b:
         36:8c:57:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:07 2026 by rpki-client