Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mkdZ1xd9R9vxQRtlJNuRNAC7Htg.roa
File:                     mkdZ1xd9R9vxQRtlJNuRNAC7Htg.roa (raw, json)
Hash identifier:          4dPUg8Kf+s7NwJlgxeJu1B757Q48XcJfouchSSCmM9A=
Subject key identifier:   9A:47:59:D7:17:7D:47:DB:F1:41:1B:65:24:DB:91:34:00:BB:1E:D8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1206
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mkdZ1xd9R9vxQRtlJNuRNAC7Htg.roa
Signing time:             Sun 01 Mar 2026 02:48:34 +0000
ROA not before:           Sun 01 Mar 2026 02:48:34 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4614 (0x1206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:48:34 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=9A4759D7177D47DBF1411B6524DB913400BB1ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:8d:e0:0a:17:84:89:06:ef:5f:15:7c:98:
                    6c:b3:0a:42:52:1c:88:06:44:8e:ca:80:a0:8e:89:
                    32:51:0e:12:b9:63:34:d5:ab:d1:45:b7:3e:7a:71:
                    cc:aa:12:57:69:33:fb:39:3d:64:a6:d6:3e:93:68:
                    2e:71:d0:c2:19:95:26:da:a1:ef:81:a8:39:3b:13:
                    da:4b:a4:c8:b8:3e:a6:39:58:47:e8:63:e9:92:1a:
                    ee:a1:98:ec:3c:5f:dd:72:b2:80:3b:d7:8c:93:69:
                    2b:a4:9d:10:e6:98:e6:a5:ad:7f:cf:43:87:e5:2c:
                    56:72:7f:6f:7c:8c:44:40:1a:4a:d0:d9:85:a7:d2:
                    fa:25:49:e2:45:96:3a:28:48:28:d6:ff:ae:20:50:
                    8f:26:42:a9:0e:eb:3c:d5:5c:52:10:e9:56:58:c6:
                    f7:1a:b6:7f:dc:39:eb:ee:a5:d7:74:69:82:95:f1:
                    e4:36:5c:29:b2:92:ad:35:18:e3:ca:3a:b6:0b:82:
                    1c:1d:87:a1:c2:a2:42:2f:82:cf:e3:29:37:96:36:
                    5d:6b:85:45:27:a0:5a:b0:c0:79:5d:b5:af:21:fe:
                    d2:0a:7e:c8:25:50:93:ff:02:cd:53:8c:80:d0:43:
                    27:4b:d3:ba:39:1c:94:b8:ec:f6:1f:2e:d7:9d:2f:
                    18:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:47:59:D7:17:7D:47:DB:F1:41:1B:65:24:DB:91:34:00:BB:1E:D8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mkdZ1xd9R9vxQRtlJNuRNAC7Htg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:41:ac:3b:9f:f0:75:bb:9c:33:5f:3b:ed:9e:2f:e9:2f:26:
         83:74:be:3d:f4:bf:0b:c9:65:2b:3a:87:3e:81:4a:61:81:bf:
         8d:8f:49:c9:a8:61:0a:9c:0e:a2:54:5e:21:f8:33:0c:28:b7:
         a4:8f:c8:db:1a:aa:be:1d:e8:ce:71:fd:64:f1:e0:ab:12:a5:
         a3:e9:33:05:27:71:12:80:e4:87:59:b9:af:cc:91:90:aa:03:
         ee:44:13:25:a0:ea:e7:d1:76:94:5d:b5:7b:eb:43:22:79:cc:
         c9:90:e2:f9:bf:ff:27:89:3e:46:be:55:0a:7a:09:2b:c2:67:
         64:29:2c:9e:87:26:3b:d7:a7:55:2c:05:f6:b5:88:4b:3b:b1:
         78:bb:96:a8:75:f9:25:fd:e4:4f:7b:3c:1d:18:e9:65:32:51:
         29:e3:70:d3:4f:91:1c:7f:42:4a:a6:e8:bd:47:c7:19:2b:4c:
         d7:6d:0f:b3:44:59:bf:16:65:d9:ac:d8:41:7a:f9:c9:2f:99:
         c0:d7:11:61:8f:ed:9c:a6:a7:d7:db:44:27:4e:87:49:9f:44:
         92:fd:bc:b9:08:ee:fd:32:2b:c9:65:12:77:a2:d5:71:6a:74:
         3b:dc:35:ad:bb:35:6b:16:b8:a7:5d:e8:68:7a:c7:9a:e1:71:
         43:55:9a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:13 2026 by rpki-client