Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ko-6ry-YXQEk5cn20-dYP0SVrxc.roa
File:                     ko-6ry-YXQEk5cn20-dYP0SVrxc.roa (raw, json)
Hash identifier:          t6gLoAmsgDScEEwmY8JrpyAtSZefXWfD9N12hyf242Q=
Subject key identifier:   92:8F:BA:AF:2F:98:5D:01:24:E5:C9:F6:D3:E7:58:3F:44:95:AF:17
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1109
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ko-6ry-YXQEk5cn20-dYP0SVrxc.roa
Signing time:             Sun 01 Mar 2026 02:02:59 +0000
ROA not before:           Sun 01 Mar 2026 02:02:59 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4361 (0x1109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:02:59 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=928FBAAF2F985D0124E5C9F6D3E7583F4495AF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:5d:73:b2:c5:22:c9:6a:45:8b:7a:cf:b0:
                    df:f8:cb:1c:53:c7:5a:45:18:fe:99:4b:ad:f3:97:
                    f2:1b:b8:4b:66:1a:21:8b:38:b8:3d:43:40:aa:43:
                    ef:d6:7f:33:e0:1a:21:09:74:0f:5e:3e:83:39:bf:
                    ca:d4:49:72:61:05:f6:cb:69:a2:3d:79:b6:8d:f2:
                    6e:da:a7:a4:00:f2:73:b0:c8:6a:ae:22:55:e0:a4:
                    39:4b:2a:82:ef:3c:78:fb:7b:ce:58:cd:f1:45:d8:
                    f1:1c:b1:e7:7c:68:bd:50:7c:62:7a:58:56:b9:c5:
                    e7:06:c1:ac:3d:8b:ab:32:c5:7f:07:ca:93:3a:ff:
                    44:38:64:2b:8b:69:c7:4a:d6:cd:46:5b:d7:6b:63:
                    91:2b:8d:23:e8:82:dd:47:2f:73:00:b4:9e:5e:2b:
                    87:5c:c4:0b:f7:f3:a0:3f:6a:33:a3:57:0a:87:8f:
                    4a:0e:5c:f7:fc:7d:cb:2f:73:88:06:0e:27:15:9e:
                    43:06:22:d5:eb:fa:42:91:59:c4:9e:f5:be:27:df:
                    c4:3b:73:be:dd:b5:7d:93:2d:bb:16:95:f5:a1:37:
                    cd:94:81:c0:11:26:ba:4e:de:9b:2a:1e:a0:33:f8:
                    0c:0e:d4:9f:05:c1:04:e6:f3:da:b8:da:ca:07:65:
                    ff:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8F:BA:AF:2F:98:5D:01:24:E5:C9:F6:D3:E7:58:3F:44:95:AF:17
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ko-6ry-YXQEk5cn20-dYP0SVrxc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:31:7f:2d:23:03:9b:2e:ae:78:37:b1:87:f9:9c:94:2d:d5:
         64:47:7b:cf:49:61:ea:17:15:28:21:8d:ad:26:3f:40:76:3c:
         db:20:c5:56:82:10:3c:d0:f1:e5:c4:ab:9f:cf:26:13:fd:22:
         8a:94:6d:95:d5:11:b8:9c:98:f9:a9:14:7d:18:ac:b2:99:5d:
         15:b8:70:db:ba:1e:8b:45:cd:a2:b0:c7:12:de:9e:90:6f:b0:
         06:b7:b2:39:ee:69:8e:e0:b6:da:bb:0c:85:78:bd:29:6f:3a:
         8f:e7:db:5b:1d:65:94:89:88:3c:9a:ef:30:71:61:25:18:96:
         26:db:1a:03:13:20:5f:14:c3:c3:79:8a:64:6d:54:65:fc:b0:
         f9:16:17:2f:26:89:2c:9f:e4:ff:32:7f:58:e7:5c:10:ef:91:
         e4:4c:66:58:c3:b8:4f:ca:0b:83:2d:c7:3e:be:eb:11:3c:f3:
         73:40:09:0b:87:b3:1b:f6:ef:59:6a:41:66:a5:81:6a:70:a9:
         67:be:b9:f2:aa:4f:c3:83:f9:1c:d9:84:4a:c3:96:5a:73:28:
         ba:8d:c5:9d:cd:66:7f:c0:d2:f1:60:b5:b1:94:91:f5:97:ca:
         38:2a:d1:e9:76:8a:04:ac:df:3b:41:53:a1:9b:79:1d:7b:36:
         20:15:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:59 2026 by rpki-client