Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kNuRgB7JFNNaoqFvzo95xxpgzos.roa
File:                     kNuRgB7JFNNaoqFvzo95xxpgzos.roa (raw, json)
Hash identifier:          p9ccO+kXOlNoDTm6eRjw03kRGPxcwFgPLoY2zyi3E2g=
Subject key identifier:   90:DB:91:80:1E:C9:14:D3:5A:A2:A1:6F:CE:8F:79:C7:1A:60:CE:8B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       117D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kNuRgB7JFNNaoqFvzo95xxpgzos.roa
Signing time:             Sun 01 Mar 2026 02:26:58 +0000
ROA not before:           Sun 01 Mar 2026 02:26:58 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4477 (0x117d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:26:58 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=90DB91801EC914D35AA2A16FCE8F79C71A60CE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:63:de:ea:b9:ac:66:af:31:21:11:7d:83:11:
                    b7:b3:54:3c:aa:14:92:c3:60:78:f7:d7:c8:74:83:
                    c3:06:7d:cf:75:46:ff:70:07:ec:02:3a:16:e1:34:
                    1e:3b:1c:29:23:b0:25:45:81:7f:53:48:b7:bb:e1:
                    f9:65:2e:29:7a:af:31:10:d1:f6:66:a9:36:3f:88:
                    fa:87:14:f3:a2:5e:2f:6e:cc:43:7d:ab:bc:d2:c7:
                    9b:11:ae:8c:a9:2c:ca:b2:98:2d:92:e9:88:28:94:
                    1a:19:7e:a6:c2:30:f8:e9:b8:59:6d:ac:e9:9e:2c:
                    7d:17:d7:bb:c2:62:e3:91:11:d4:b5:dd:11:09:05:
                    b3:3d:a9:04:34:64:06:cf:4c:0a:0c:ee:2d:d5:be:
                    77:ca:9d:1a:fb:06:c5:40:a3:6f:ff:ae:d5:2f:e1:
                    f4:9e:ab:ff:dc:e3:b4:fc:05:72:97:29:5e:1d:11:
                    e9:5d:89:df:81:62:63:62:15:21:06:f8:60:71:7e:
                    b1:71:c3:2f:33:e3:41:0d:97:66:e2:52:6b:99:30:
                    47:96:25:66:a5:26:c0:b8:59:3c:fe:c7:94:c5:77:
                    41:ce:23:54:82:d0:da:1e:10:18:50:2c:4e:d1:8a:
                    23:c5:cd:88:e9:c1:6b:ea:4e:99:dc:c3:de:df:35:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DB:91:80:1E:C9:14:D3:5A:A2:A1:6F:CE:8F:79:C7:1A:60:CE:8B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kNuRgB7JFNNaoqFvzo95xxpgzos.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:6c:04:90:0f:65:55:bf:bd:c7:9b:09:e1:38:6a:61:22:99:
         6b:a8:4c:e2:f8:9c:f5:17:36:ec:18:1e:4d:01:35:ea:e7:2c:
         25:70:85:e4:2e:33:a7:65:20:27:4d:16:43:32:9b:69:5d:f8:
         36:a3:e5:fd:89:c3:0f:d5:ee:49:d1:02:a2:f6:cd:eb:8c:ec:
         3a:64:12:f2:48:52:28:c8:6f:9c:18:62:65:62:74:c0:7a:95:
         04:56:03:66:b0:4d:2e:cb:aa:b2:75:51:e4:00:c8:05:c5:76:
         c2:9e:61:41:5c:62:f9:62:91:16:16:da:55:6c:5a:c9:16:dc:
         87:23:94:87:cb:29:f7:2f:8a:0a:a2:2b:ce:31:41:ef:c9:74:
         fc:6e:5f:74:08:59:7e:94:97:c4:99:10:6f:20:77:bd:e3:ed:
         4b:91:8f:54:91:31:d7:82:89:17:26:78:02:d4:b1:a6:26:30:
         f4:04:02:ac:d9:9f:c5:5f:46:83:2f:a3:2e:68:c2:3a:a3:11:
         ef:4d:af:a2:cc:bc:4a:62:ea:82:88:64:ab:12:71:a1:be:57:
         fa:c1:4e:a9:bb:a7:66:d8:ef:ed:5c:51:48:76:97:31:94:71:
         28:46:19:68:30:da:12:da:24:e4:81:a1:f0:34:d7:66:02:a5:
         89:d9:9e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:03 2026 by rpki-client