Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n_A6oZZWicaKLmnKqiG19ba4OnA.roa
File:                     n_A6oZZWicaKLmnKqiG19ba4OnA.roa (raw, json)
Hash identifier:          DuNEAB3pjbe0+anOLMx2itz1uxcDn2zdsWvgBmLNIg4=
Subject key identifier:   9F:F0:3A:A1:96:56:89:C6:8A:2E:69:CA:AA:21:B5:F5:B6:B8:3A:70
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10DB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n_A6oZZWicaKLmnKqiG19ba4OnA.roa
Signing time:             Sun 01 Mar 2026 01:58:35 +0000
ROA not before:           Sun 01 Mar 2026 01:58:35 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.76.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4315 (0x10db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:58:35 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=9FF03AA1965689C68A2E69CAAA21B5F5B6B83A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:2e:c4:c5:d0:f4:2a:a0:5f:23:36:8c:0f:
                    30:ce:a2:47:70:8e:45:68:8f:d9:c3:34:f4:d7:0b:
                    a2:95:1b:17:c2:c5:2e:43:40:05:23:b7:4d:9a:15:
                    fc:02:89:a7:78:ad:d8:69:8b:65:fc:cb:a1:d2:8e:
                    30:e7:47:a2:6d:af:68:43:eb:75:6b:4a:5f:e4:bc:
                    1b:e9:bf:81:99:b3:79:ce:a5:2d:eb:96:ba:d5:57:
                    3e:5b:8e:eb:79:be:af:9c:15:ce:ee:a2:7f:a1:c8:
                    9c:ed:99:14:ba:6f:ec:9f:36:ce:73:8e:7b:40:19:
                    13:d9:fd:78:eb:45:e5:24:c5:62:17:4d:71:0d:7a:
                    c9:d9:b5:3b:08:d0:48:c1:4a:e4:93:34:e3:d4:a4:
                    80:a4:6c:19:72:4d:ec:f7:67:d9:50:86:4f:63:a9:
                    a3:23:9d:14:85:96:52:3c:1d:c4:f1:19:90:03:0c:
                    71:38:ba:05:08:6b:37:e4:b2:4c:82:58:e4:83:26:
                    29:86:66:37:9d:52:91:e8:8f:5c:1c:43:b0:bd:6b:
                    08:01:7a:c1:06:90:27:13:d7:85:7f:f7:f5:fd:d2:
                    83:06:05:6f:b9:9e:4b:a1:87:b1:e8:c3:88:34:2e:
                    d5:15:87:7f:51:58:a4:84:fe:8f:24:42:52:05:4d:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F0:3A:A1:96:56:89:C6:8A:2E:69:CA:AA:21:B5:F5:B6:B8:3A:70
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n_A6oZZWicaKLmnKqiG19ba4OnA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:ee:94:e1:74:8e:84:08:35:6d:a9:af:66:8a:47:5d:92:d7:
         b2:d6:3a:13:b7:7d:9f:5c:a7:23:37:25:5c:4c:17:21:29:f8:
         b5:d7:8e:e4:aa:9d:ed:2d:e4:e4:a8:35:8e:ee:0f:e3:9a:be:
         ad:62:d6:12:48:79:f8:35:af:a9:a1:51:7c:73:92:0e:4d:66:
         6a:53:5c:0e:46:6c:a2:7c:d9:97:4b:15:d5:50:4a:65:7d:29:
         ec:30:76:05:97:ec:5c:7e:41:34:a2:a8:5d:4e:93:8c:8c:46:
         6f:cd:6e:a2:3f:5d:06:e0:b3:92:b2:75:73:7c:0f:fd:25:6f:
         eb:7f:f1:23:87:05:ad:96:20:be:f7:d5:82:d0:6a:40:6a:bf:
         b5:e6:b3:78:c8:38:bd:f2:62:24:02:89:33:c4:ec:cd:d8:37:
         97:07:c0:b2:16:ef:13:4b:e2:c7:c1:a2:1b:52:86:76:54:8e:
         14:92:b5:9f:ba:3a:b2:8c:28:93:26:ca:d2:78:a7:62:cf:9b:
         74:b4:c1:c6:12:58:91:e3:d5:32:66:0f:5d:47:2d:77:89:04:
         e3:d4:a6:5b:75:36:39:6f:8f:8d:04:5e:03:04:e8:91:ca:64:
         ca:fa:33:22:fe:af:85:d5:fa:da:44:ab:3f:c5:6a:f4:f3:c0:
         0b:4d:7c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:59 2026 by rpki-client