Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cHniyW1R6RrCDUuQelrNMIruvhU.roa
File:                     cHniyW1R6RrCDUuQelrNMIruvhU.roa (raw, json)
Hash identifier:          jvAIOxFZ6U0L7fOGF6USrQ7LZiLqtH+IkxAkgnOm3mE=
Subject key identifier:   70:79:E2:C9:6D:51:E9:1A:C2:0D:4B:90:7A:5A:CD:30:8A:EE:BE:15
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12C6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cHniyW1R6RrCDUuQelrNMIruvhU.roa
Signing time:             Sun 01 Mar 2026 03:16:22 +0000
ROA not before:           Sun 01 Mar 2026 03:16:22 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4806 (0x12c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:16:22 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=7079E2C96D51E91AC20D4B907A5ACD308AEEBE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:33:6a:63:cc:9d:c8:66:d6:b5:dc:73:bc:
                    ec:64:b3:62:49:fe:02:d4:c7:e6:20:3e:4b:6d:25:
                    d2:a3:a8:bf:0b:27:e4:fa:3b:e8:2b:6c:0a:7b:30:
                    9f:ee:b8:e7:63:96:19:d3:cf:c9:b9:54:ed:18:35:
                    1d:e2:ae:4e:c7:40:14:14:28:ef:0e:ce:d1:48:a1:
                    a8:29:f3:6e:79:f1:6e:95:74:51:15:f2:d3:df:04:
                    13:ac:3d:58:56:3f:5c:3d:9e:ad:d3:72:08:a8:47:
                    a7:90:f0:bc:81:ce:36:b8:38:d2:b0:bf:34:9a:cf:
                    5e:a1:7d:b1:2b:21:55:8d:a1:85:59:0a:14:69:94:
                    1a:58:73:1f:10:50:f0:80:36:f4:43:de:c8:c1:4c:
                    f9:96:76:f1:88:b0:90:4c:27:01:91:04:96:c6:71:
                    6d:bf:de:71:06:34:4f:8e:f9:1d:9f:e1:11:21:69:
                    7e:ef:27:9c:07:dd:6a:e2:18:75:1c:ed:41:1e:ef:
                    05:f0:46:3e:ef:7c:ee:b2:fb:8f:f2:39:50:b3:9a:
                    11:e5:55:44:e7:c6:a8:14:ba:19:26:4a:ed:20:dc:
                    35:69:96:8e:a8:0e:07:b7:3e:e5:6f:35:52:5a:3b:
                    c9:67:d7:9d:0b:f9:9c:6c:17:27:72:74:ce:a0:3d:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:79:E2:C9:6D:51:E9:1A:C2:0D:4B:90:7A:5A:CD:30:8A:EE:BE:15
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cHniyW1R6RrCDUuQelrNMIruvhU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:29:5d:12:cc:14:e2:ba:8e:da:3c:f1:66:6d:74:b4:7c:a8:
         e7:e7:b0:00:58:d3:08:3a:cc:a6:8a:76:f6:e7:60:76:70:0f:
         f0:6b:8d:e4:64:a7:35:7c:4d:0b:4d:09:43:aa:e7:b7:15:11:
         0a:62:f2:f8:86:9d:05:da:38:2f:97:58:a2:c9:63:66:4b:a9:
         ed:d4:58:7f:7b:ff:62:1e:4f:c7:b9:dc:bb:f5:0b:44:e3:70:
         ba:bf:6a:1d:6e:3a:d3:73:8a:91:13:8f:2c:dc:42:9c:f1:54:
         cc:47:f0:e0:99:42:93:c9:ce:f6:67:98:5c:7a:d0:da:11:61:
         2f:d6:29:ee:d8:49:2a:3e:c9:d8:fa:b5:64:2f:80:10:7d:b4:
         66:31:b6:2a:09:5b:21:bc:d9:bc:bb:3e:ab:19:d9:14:2a:80:
         46:f0:fa:ee:81:52:f8:fc:15:70:60:ea:87:6e:ae:21:64:58:
         57:08:fe:80:2d:c2:0e:9c:1f:24:c0:e3:4f:16:85:4d:2b:2e:
         86:00:b1:e8:5e:04:5c:0c:5b:a8:db:0f:93:03:92:ea:46:7c:
         a7:d7:8d:ab:d3:28:4c:46:37:5d:1f:20:75:c0:e7:a5:0d:04:
         c3:f9:c3:94:c8:dc:8d:99:1f:de:94:72:ab:9c:40:65:92:2c:
         a5:41:30:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:56:00 2026 by rpki-client