Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k69bSY-pm4VuqZvV5Iomt6-krS8.roa
File:                     k69bSY-pm4VuqZvV5Iomt6-krS8.roa (raw, json)
Hash identifier:          ett+Qsng2aEOHKIxSyBK9fzyymDfLRlK1uQcP20Vahs=
Subject key identifier:   93:AF:5B:49:8F:A9:9B:85:6E:A9:9B:D5:E4:8A:26:B7:AF:A4:AD:2F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1106
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k69bSY-pm4VuqZvV5Iomt6-krS8.roa
Signing time:             Sun 01 Mar 2026 02:02:58 +0000
ROA not before:           Sun 01 Mar 2026 02:02:58 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4358 (0x1106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:02:58 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=93AF5B498FA99B856EA99BD5E48A26B7AFA4AD2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:6e:65:3f:d7:b4:d9:85:68:b0:28:b1:4b:
                    cf:59:eb:18:06:65:2d:66:d7:2a:2e:64:e5:f7:d9:
                    7b:be:2a:27:ec:01:ad:10:03:55:fb:88:9a:e1:35:
                    a5:33:08:fa:cf:b9:5f:ae:22:84:93:f3:67:1b:6d:
                    77:a5:a0:e6:4d:f6:ad:a3:80:2e:e3:c9:25:18:fe:
                    8a:47:41:ad:ee:d3:44:01:f4:1d:c2:1a:ff:e5:c4:
                    45:a3:b1:35:7e:d4:45:2f:71:3d:9d:b8:e1:fa:20:
                    da:94:6d:48:19:0e:3b:9b:45:51:9a:6f:d2:d3:70:
                    df:63:23:51:23:2f:8b:31:e9:26:81:a5:35:a4:c2:
                    a8:e6:31:07:f8:1c:38:6a:86:d1:7e:e8:1d:7a:9f:
                    a5:c6:e3:5c:87:b8:53:5e:d3:e9:3a:5d:99:8e:cc:
                    0d:f1:09:3e:51:35:65:ee:1a:8c:15:80:68:bc:26:
                    c3:af:e6:bd:f0:e5:a9:23:1a:c3:a1:85:49:bd:27:
                    93:9c:59:3a:d5:ee:75:d4:00:9c:26:1f:28:a5:9f:
                    b2:92:92:a9:f1:3c:6a:58:d9:bf:06:df:bb:24:1b:
                    21:d4:ca:0f:97:dd:31:47:4e:e7:ef:89:1b:1b:6b:
                    e3:69:b9:5c:93:b0:b1:88:53:ab:62:cd:44:d7:b9:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AF:5B:49:8F:A9:9B:85:6E:A9:9B:D5:E4:8A:26:B7:AF:A4:AD:2F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k69bSY-pm4VuqZvV5Iomt6-krS8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:9a:8d:60:d6:3f:33:40:66:d1:25:e5:17:24:b6:3e:76:27:
         cd:be:b7:fa:43:1d:dc:3d:a6:06:3e:19:51:02:db:d8:4f:61:
         af:b4:46:23:21:c4:2c:29:88:71:c5:c6:ce:f7:f0:e2:d7:4b:
         51:f1:c5:1c:9b:1c:34:a6:e7:bb:be:de:96:de:d9:7c:da:a0:
         1a:c9:72:d4:47:7d:c1:14:7a:46:e9:4e:50:22:04:14:22:8e:
         a9:0a:e9:c0:8e:e6:76:b1:ca:03:24:d5:ca:9a:7f:3f:00:1a:
         15:87:95:19:4f:4c:3a:77:20:6f:21:4e:cb:5c:64:d6:b7:89:
         d6:7d:45:43:3f:6b:29:1b:af:dc:08:b0:d7:0c:b6:a6:bc:dc:
         e3:03:a5:34:fe:ad:45:dd:38:84:38:75:d0:f6:c7:30:81:42:
         36:74:e1:c1:6e:7e:c6:9e:a9:d0:d5:c2:30:95:6f:af:aa:10:
         5b:ca:04:16:e0:b9:b0:50:48:be:c8:d1:1f:ac:72:bc:d5:9d:
         54:ae:a6:ba:99:8d:57:64:42:a4:34:13:75:05:01:c1:3f:d4:
         a1:5d:77:09:a6:c1:18:91:6b:6f:19:ef:7a:a7:09:41:32:d9:
         e1:69:30:81:37:6c:d0:f1:d2:14:28:5c:b9:b7:68:5d:7e:0a:
         cb:8d:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:59 2026 by rpki-client