Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jl4FpIrj0U8X-3qE80PFIiSZaXQ.roa
File:                     jl4FpIrj0U8X-3qE80PFIiSZaXQ.roa (raw, json)
Hash identifier:          gkokNOOzZ2cjiBB/lTr29lWLcf+n64dK/oOP+0bWI90=
Subject key identifier:   8E:5E:05:A4:8A:E3:D1:4F:17:FB:7A:84:F3:43:C5:22:24:99:69:74
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1199
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jl4FpIrj0U8X-3qE80PFIiSZaXQ.roa
Signing time:             Sun 01 Mar 2026 02:31:14 +0000
ROA not before:           Sun 01 Mar 2026 02:31:14 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4505 (0x1199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:31:14 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=8E5E05A48AE3D14F17FB7A84F343C52224996974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:c6:0a:28:79:2e:7a:9d:c4:61:e2:dd:6d:
                    cf:c2:3d:e9:e0:2f:c0:94:cb:0d:3c:68:47:49:a5:
                    62:4d:be:eb:ad:64:29:6b:86:69:9f:f2:da:cc:42:
                    71:54:01:9c:6e:0a:5d:22:9a:e8:78:1e:d4:19:de:
                    ad:03:16:f7:c0:5a:bd:05:51:32:11:3c:03:81:3a:
                    76:98:49:cb:70:9f:65:78:ce:3b:cd:de:83:3c:dc:
                    d3:78:74:ab:04:71:d4:ca:fe:66:ec:4e:36:67:fe:
                    56:fc:70:c0:ee:1a:db:86:68:1d:bb:b2:40:87:37:
                    03:9a:0f:ad:d9:5c:c8:05:bf:c2:d3:9e:28:ea:06:
                    e8:e1:f7:28:66:5e:a8:f8:20:90:ae:c9:1b:bc:7a:
                    20:0a:48:ac:26:51:c4:2a:5a:90:a7:7e:d5:64:36:
                    06:d7:45:7f:9b:fb:8e:11:52:fc:c4:cf:fa:6b:ec:
                    b0:73:a9:e5:6a:37:e2:d6:70:f2:58:e2:88:88:3b:
                    4c:a2:c2:1e:d8:31:e4:e1:3a:b9:45:09:46:f2:71:
                    fd:ef:56:12:95:0d:8b:ca:5d:cd:a4:80:68:60:49:
                    65:86:b4:90:93:0f:2d:c7:df:12:24:05:64:a3:c5:
                    87:06:4e:1b:1f:f1:d7:20:31:80:b7:f1:0d:70:34:
                    c8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5E:05:A4:8A:E3:D1:4F:17:FB:7A:84:F3:43:C5:22:24:99:69:74
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jl4FpIrj0U8X-3qE80PFIiSZaXQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:4c:5f:3a:c6:25:62:f9:df:da:c5:66:49:2d:68:ae:11:e4:
         96:c7:ed:39:38:45:86:b8:b0:f7:c7:8e:aa:10:95:4b:29:26:
         b7:c2:42:9b:d9:74:17:66:e5:21:49:50:63:a4:b1:2b:55:7e:
         b5:3f:0a:18:14:0d:2d:1a:37:c5:55:1f:cf:6f:61:ac:1a:86:
         c9:13:81:f4:6f:af:e4:3f:89:ae:31:1e:4e:81:ec:ab:54:63:
         11:a4:50:bb:3b:a9:cf:a4:27:c7:b7:b1:9d:61:a7:77:3c:92:
         ab:de:86:de:29:26:d6:94:9a:5b:31:ed:98:2d:63:d8:7b:a9:
         7d:bd:66:3e:b2:0b:f2:9a:fc:11:0f:74:dd:b9:6e:f9:7c:37:
         48:06:f9:67:d4:ff:6c:b1:a0:cd:37:79:d7:d1:d3:58:b0:9d:
         80:b0:98:0f:f3:b0:05:4a:47:2b:ab:6c:cd:8a:3f:a8:d2:72:
         87:f7:55:8e:1e:35:73:f4:4c:c0:64:d1:2b:70:69:73:56:85:
         03:bc:2d:a2:f0:57:91:9e:89:1a:0b:5c:9d:d8:f6:d8:e0:e5:
         c2:71:ad:4a:ef:7d:49:ed:cf:b0:28:12:c2:2e:a2:75:ec:5d:
         4d:02:a6:06:04:d8:3d:ef:be:a9:7d:e6:76:5b:cd:72:b5:6e:
         73:30:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:39 2026 by rpki-client