Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dG7K3Ewgko4H5lIqHw406TdFFyA.roa
File:                     dG7K3Ewgko4H5lIqHw406TdFFyA.roa (raw, json)
Hash identifier:          EUYwH2oSg0PZbLW44/Y7Y3gNdOHmnk6M3KDoV7kEqDw=
Subject key identifier:   74:6E:CA:DC:4C:20:92:8E:07:E6:52:2A:1F:0E:34:E9:37:45:17:20
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       110B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dG7K3Ewgko4H5lIqHw406TdFFyA.roa
Signing time:             Sun 01 Mar 2026 02:03:01 +0000
ROA not before:           Sun 01 Mar 2026 02:03:01 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4363 (0x110b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:03:01 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=746ECADC4C20928E07E6522A1F0E34E937451720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f3:9f:73:67:09:39:79:c7:1c:5c:d1:70:9f:
                    a9:35:c0:15:23:62:37:6d:28:bf:d8:ad:83:fc:29:
                    53:2e:35:ad:4c:7d:47:ba:c2:9c:6c:5a:72:a6:19:
                    37:23:9e:c9:f3:fb:88:59:43:ad:97:35:c0:3f:40:
                    b4:16:33:b7:d3:98:cb:a9:fc:54:98:2e:95:5e:35:
                    e2:fd:37:5d:34:1e:c2:48:56:85:b0:1c:40:ee:a2:
                    29:04:d0:49:ee:cf:e7:7d:2d:41:ef:5c:b8:64:cb:
                    b2:a0:00:a4:eb:42:4c:ce:56:eb:02:8c:73:02:21:
                    fe:ae:67:03:df:bb:7f:38:24:82:2f:82:ec:96:03:
                    8d:2c:d4:fa:83:93:ac:3d:54:9d:55:7b:4b:70:7b:
                    29:df:fa:61:a1:7e:8a:16:14:b2:76:cc:b8:f7:b0:
                    1b:f4:50:6b:00:09:61:70:1b:df:b5:9b:d4:40:8c:
                    28:a8:fb:36:3a:fb:7e:3c:a9:30:75:36:10:d3:af:
                    ba:19:3f:2f:9a:a0:26:b2:35:86:82:a3:32:76:23:
                    bd:bd:6a:cb:65:f3:58:4d:9e:2c:cc:52:49:1f:a3:
                    c5:61:2a:3f:27:b8:e1:e7:35:c5:26:a8:22:fd:31:
                    d7:cc:7d:d2:e2:15:60:f3:e7:47:ba:f9:72:f8:25:
                    6e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6E:CA:DC:4C:20:92:8E:07:E6:52:2A:1F:0E:34:E9:37:45:17:20
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dG7K3Ewgko4H5lIqHw406TdFFyA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:54:08:7d:19:80:7a:25:03:1d:3f:78:bf:88:10:2d:f3:e2:
         d0:f3:fe:9d:8e:8a:4e:2e:4e:69:0d:f3:d0:fa:41:b4:e8:07:
         ac:47:9e:0d:00:81:7c:1b:79:5c:7c:ca:6a:c7:18:3f:9e:98:
         d1:27:53:f3:b2:c7:15:49:08:ce:89:3d:f4:21:92:a0:eb:94:
         6c:a3:b2:ad:da:16:5f:8c:9f:08:24:4f:92:4d:f4:a2:a8:bf:
         d7:1d:d0:c3:54:12:10:cc:de:3c:58:aa:c5:50:f2:f4:70:69:
         79:df:42:30:dc:6e:7c:01:40:e3:98:ab:a6:13:45:96:e1:21:
         99:78:16:ee:42:82:51:df:08:51:c1:2b:8e:bd:66:2d:d6:17:
         99:0c:31:c5:c2:bb:ec:99:24:65:5d:4a:05:32:40:bf:ea:f5:
         69:a2:6c:2a:ad:21:88:75:7a:9f:01:2e:a4:f0:1b:7b:85:c6:
         21:c6:5d:44:71:02:96:03:2d:c9:57:de:3d:5a:57:e4:69:5f:
         64:f3:ec:e7:95:f5:bf:de:9b:35:a9:e7:00:6a:8a:b0:df:69:
         88:61:e4:10:91:f0:74:f8:92:22:60:0c:03:5d:5b:b9:95:65:
         3e:10:eb:4f:dc:2f:01:20:69:33:ea:19:e6:89:bb:ad:09:0f:
         ca:a5:3d:85
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjAzMDFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc0NkVDQURDNEMyMDky
OEUwN0U2NTIyQTFGMEUzNEU5Mzc0NTE3MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDt859zZwk5ecccXNFwn6k1wBUjYjdtKL/YrYP8KVMuNa1MfUe6
wpxsWnKmGTcjnsnz+4hZQ62XNcA/QLQWM7fTmMup/FSYLpVeNeL9N100HsJIVoWw
HEDuoikE0Enuz+d9LUHvXLhky7KgAKTrQkzOVusCjHMCIf6uZwPfu384JIIvguyW
A40s1PqDk6w9VJ1Ve0tweynf+mGhfooWFLJ2zLj3sBv0UGsACWFwG9+1m9RAjCio
+zY6+348qTB1NhDTr7oZPy+aoCayNYaCozJ2I729astl81hNnizMUkkfo8VhKj8n
uOHnNcUmqCL9MdfMfdLiFWDz50e6+XL4JW7LAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUdG7K3Ewgko4H5lIqHw406TdFFyAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2RHN0szRXdna280SDVsSXFIdzQwNlRkRkZ5QS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABT0IwDQYJKoZIhvcNAQELBQADggEBAJpUCH0ZgHolAx0/eL+IEC3z4tDz
/p2Oik4uTmkN89D6QbToB6xHng0AgXwbeVx8ymrHGD+emNEnU/OyxxVJCM6JPfQh
kqDrlGyjsq3aFl+MnwgkT5JN9KKov9cd0MNUEhDM3jxYqsVQ8vRwaXnfQjDcbnwB
QOOYq6YTRZbhIZl4Fu5CglHfCFHBK469Zi3WF5kMMcXCu+yZJGVdSgUyQL/q9Wmi
bCqtIYh1ep8BLqTwG3uFxiHGXURxApYDLclX3j1aV+RpX2Tz7OeV9b/emzWp5wBq
irDfaYhh5BCR8HT4kiJgDANdW7mVZT4Q60/cLwEgaTPqGeaJu60JD8qlPYU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:49 2026 by rpki-client