Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/l5ua5ySk3rzkHS3erbd7FKqzhG0.roa
File:                     l5ua5ySk3rzkHS3erbd7FKqzhG0.roa (raw, json)
Hash identifier:          egYq4kaYqo4tJrXEUmjHnhtgNKyKDNbTEvedHE6vBo4=
Subject key identifier:   97:9B:9A:E7:24:A4:DE:BC:E4:1D:2D:DE:AD:B7:7B:14:AA:B3:84:6D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       123E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l5ua5ySk3rzkHS3erbd7FKqzhG0.roa
Signing time:             Sun 01 Mar 2026 02:56:30 +0000
ROA not before:           Sun 01 Mar 2026 02:56:30 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4670 (0x123e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:56:30 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=979B9AE724A4DEBCE41D2DDEADB77B14AAB3846D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:22:1e:ba:da:4f:49:c2:23:f9:15:a4:c2:7a:
                    21:a5:d5:61:f6:d2:8b:77:a3:ab:1a:da:e1:31:bf:
                    da:81:f5:11:69:77:33:84:e3:0a:68:3d:6b:16:75:
                    52:4f:e4:86:d4:33:92:cc:a1:0c:a1:3b:56:f0:48:
                    d8:33:85:fd:2b:91:1a:ee:fc:92:af:1a:55:b1:6a:
                    5f:9d:54:21:c1:34:6d:1b:8e:1c:e4:51:29:1b:c0:
                    01:22:74:8b:7b:b5:54:e5:60:af:a9:12:14:50:d2:
                    be:51:11:b2:e5:3c:3c:e3:5e:93:f3:4d:21:c2:bb:
                    b5:f1:33:6a:c1:ed:f4:17:06:a8:eb:00:19:eb:b4:
                    be:b7:d7:13:5b:c1:a1:d2:2d:da:3a:b2:2f:83:93:
                    ad:30:a9:ee:08:65:7f:dd:56:db:00:45:9c:09:d6:
                    e4:cd:57:97:23:a9:50:0b:1f:b1:5e:49:71:39:0d:
                    ee:53:50:60:ba:e5:e4:2d:15:3d:1f:90:a9:61:1a:
                    2b:f4:33:8d:ee:0b:8e:24:d7:e2:c5:b3:90:98:6e:
                    bc:49:12:7d:92:c8:50:6f:c0:11:a9:2c:e3:94:22:
                    c1:4d:a3:be:b5:4a:8a:88:86:d5:7e:1f:b6:a6:a5:
                    bc:9f:3e:de:ed:51:8d:2d:cb:26:6e:44:d0:25:12:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9B:9A:E7:24:A4:DE:BC:E4:1D:2D:DE:AD:B7:7B:14:AA:B3:84:6D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l5ua5ySk3rzkHS3erbd7FKqzhG0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:f8:7b:cd:32:a3:84:bb:08:be:49:6b:1f:c6:d1:78:e6:4d:
         74:1f:f7:51:e6:62:2a:4d:cd:98:5d:96:e8:99:7b:ec:06:ca:
         ca:67:c9:f7:52:8a:c2:a7:a2:9a:95:42:d1:de:80:80:f6:ee:
         c8:d1:06:18:96:a7:97:88:6b:a1:d7:3f:f6:8c:3a:2a:bc:15:
         de:d6:6d:d8:9e:8b:04:70:10:d1:13:f9:3f:e9:ba:e7:28:6a:
         c4:4a:26:4c:06:88:08:87:e2:be:55:93:1d:ee:8c:0b:4a:83:
         32:cb:56:47:bd:c5:92:ef:7f:55:ac:8d:96:76:59:6b:f7:b6:
         10:df:90:87:0e:86:3c:2d:62:86:9b:2b:ad:e4:81:94:4e:5d:
         27:42:0c:bb:f6:df:3c:db:f4:c8:3d:ca:fb:77:f4:16:69:0b:
         e1:29:16:56:ce:6d:12:ad:a3:2e:db:f0:ed:42:b5:17:80:87:
         70:15:6c:0b:a9:7a:9a:9c:2d:86:9d:22:42:23:ff:45:75:d3:
         41:93:e9:09:e4:96:f4:4b:38:5e:cb:70:a7:6c:b0:5c:b4:10:
         a4:90:1b:5f:88:62:28:0e:b2:d6:d8:6f:7f:f2:96:06:fd:a4:
         77:fe:6e:ca:cb:e0:0b:16:92:92:e6:8b:dc:6b:f7:0b:f5:34:
         04:ac:48:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:02 2026 by rpki-client