Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mZr2nKyc0zxAhWEeHsA--snp844.roa
File:                     mZr2nKyc0zxAhWEeHsA--snp844.roa (raw, json)
Hash identifier:          B9JsM57txwf+h3mKo79r9XY92+Dfh3eqE3eselQ3/z0=
Subject key identifier:   99:9A:F6:9C:AC:9C:D3:3C:40:85:61:1E:1E:C0:3E:FA:C9:E9:F3:8E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11E3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mZr2nKyc0zxAhWEeHsA--snp844.roa
Signing time:             Sun 01 Mar 2026 02:44:25 +0000
ROA not before:           Sun 01 Mar 2026 02:44:25 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4579 (0x11e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:44:25 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=999AF69CAC9CD33C4085611E1EC03EFAC9E9F38E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:82:93:02:dd:5a:24:b8:a7:a4:e0:f5:cd:3f:
                    2d:6a:74:d1:55:e3:2a:fe:13:7a:85:c3:9a:d5:07:
                    22:72:35:ef:15:29:c1:0d:03:7b:e5:fe:50:83:4d:
                    9a:38:ca:da:d8:79:2f:26:16:7b:a1:1f:dd:14:fe:
                    cd:a9:b8:4b:b2:9d:6c:e5:1c:9a:53:fc:f7:f0:58:
                    cd:2e:66:d0:96:d8:63:02:08:50:b4:f9:46:4d:96:
                    62:14:90:76:8f:3d:e9:bf:2f:3f:10:42:9e:d3:63:
                    af:4c:bb:8a:38:3e:4e:c7:ea:4d:01:c0:5d:ba:03:
                    7c:0d:55:66:56:64:0a:9d:f0:15:8c:b2:7a:ed:a5:
                    5e:92:c1:6f:39:7a:e5:55:fd:8a:fd:53:1f:1d:7f:
                    ea:8c:e3:85:11:50:02:27:2c:ac:22:13:b6:cb:bc:
                    00:6b:6e:d7:f5:30:56:32:a1:25:8d:2f:ad:1b:ba:
                    46:20:90:90:35:ee:f5:c7:b2:c4:8e:6d:e4:b3:f9:
                    a3:7c:35:ad:1e:c5:7e:47:cf:f0:e0:4e:ad:ff:f4:
                    c1:11:bb:f2:63:ae:fe:45:75:5e:c5:22:95:9f:9c:
                    e7:74:92:b2:42:23:d8:a4:e5:8d:4d:97:2c:5b:81:
                    4b:a3:49:dc:49:33:96:9d:a7:e8:58:a8:5c:4a:6e:
                    a5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9A:F6:9C:AC:9C:D3:3C:40:85:61:1E:1E:C0:3E:FA:C9:E9:F3:8E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mZr2nKyc0zxAhWEeHsA--snp844.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:1f:10:67:27:21:8d:76:3d:cc:32:d0:67:b8:a7:53:63:a6:
         38:0b:c3:7e:19:69:f4:73:9a:98:37:18:22:78:1e:97:ed:97:
         1d:66:1d:62:8a:5d:9a:81:6d:b3:e4:49:13:74:86:0c:6f:f1:
         69:2f:80:9c:8e:6f:97:e2:cf:8e:52:45:15:35:fb:8c:24:56:
         f9:af:b5:2e:29:6c:42:30:d7:10:87:f7:7f:a8:14:7d:ed:54:
         3b:e8:af:08:e6:30:fa:98:a2:e9:c8:1d:fb:23:03:c8:53:70:
         75:25:97:d1:d7:68:87:43:c3:84:88:67:03:93:32:ea:75:15:
         68:c9:33:26:1e:00:80:f1:43:d6:e4:f6:40:71:f4:26:9b:49:
         34:0e:16:81:f3:c6:2d:48:dd:91:30:d0:2d:cc:fe:6e:ec:71:
         a7:83:f0:78:e5:b4:c3:39:0d:cb:73:ea:be:56:cf:0c:15:60:
         e0:de:b6:bf:79:f6:26:c6:3a:ea:f5:47:a0:17:3c:75:fc:e1:
         7d:fd:9b:81:eb:5f:59:ae:84:5d:a5:bd:03:f6:0f:1d:71:08:
         11:e5:55:5d:49:9a:5e:ea:ed:aa:d6:af:1a:55:82:64:a9:8b:
         b2:bd:43:86:16:1d:6b:c1:46:96:50:6a:94:26:76:b3:54:ee:
         e3:3b:a5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:14 2026 by rpki-client