Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/q7XlYf7MWTe4catWhrP_KDZjzA8.roa
File:                     q7XlYf7MWTe4catWhrP_KDZjzA8.roa (raw, json)
Hash identifier:          96E3KaBcYt+DZ9N+KbEKt4kOdac/yxGupr2ZiV/gvkU=
Subject key identifier:   AB:B5:E5:61:FE:CC:59:37:B8:71:AB:56:86:B3:FF:28:36:63:CC:0F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1190
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q7XlYf7MWTe4catWhrP_KDZjzA8.roa
Signing time:             Sun 01 Mar 2026 02:31:10 +0000
ROA not before:           Sun 01 Mar 2026 02:31:10 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4496 (0x1190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:31:10 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=ABB5E561FECC5937B871AB5686B3FF283663CC0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:33:96:dd:2f:bb:33:0f:a1:13:a6:7d:8b:
                    34:d5:ac:cf:a9:10:8a:5c:97:40:27:d6:34:44:99:
                    4f:15:c6:2a:df:c7:a5:90:35:1f:40:11:00:ec:8d:
                    b4:a4:3e:ab:57:eb:6c:c4:af:6d:1a:12:23:81:5d:
                    98:8b:44:d3:aa:ed:bb:98:ec:72:14:0e:ca:c2:18:
                    63:18:ec:09:0f:21:b8:f9:a6:21:f4:bb:3b:49:52:
                    a9:76:b5:dc:5b:71:4c:2e:e6:c3:89:dc:9e:ce:0a:
                    df:06:32:6f:5e:43:00:5c:6c:c2:1c:b6:dc:fe:48:
                    d1:1e:3f:44:f5:72:84:19:f9:53:61:1d:8c:29:9f:
                    cf:e2:a6:66:94:f2:3f:ac:e8:96:2c:c5:c4:c5:84:
                    40:5e:8b:92:93:02:ef:14:84:3c:53:b4:c3:4e:07:
                    4e:b4:81:ff:32:16:d4:11:08:f0:ac:8c:00:1f:61:
                    e7:be:01:6b:17:50:47:e9:e1:f1:d5:a8:e5:c7:ef:
                    e6:5b:a3:c3:a6:31:04:5c:b5:fe:83:4c:0f:96:c3:
                    33:a8:ae:4d:37:82:3f:54:38:4d:d5:f5:41:9f:6e:
                    df:b1:f7:4b:b5:4c:18:f0:d1:cd:e7:e2:31:8f:05:
                    f4:41:1b:5f:67:59:b4:b6:5d:0c:f1:78:da:ce:dc:
                    73:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B5:E5:61:FE:CC:59:37:B8:71:AB:56:86:B3:FF:28:36:63:CC:0F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q7XlYf7MWTe4catWhrP_KDZjzA8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:2d:ef:5a:04:a1:b3:2d:32:8c:9c:51:0e:c7:e1:26:e5:08:
         c3:c5:ce:f1:6e:80:4b:bb:93:57:23:45:ba:4f:61:54:c6:fa:
         6a:f5:9d:32:da:eb:1f:0e:e7:64:ed:c8:5a:91:b4:54:a7:03:
         58:23:f7:76:4e:76:dc:2a:4d:9c:06:d8:99:e6:06:25:75:ac:
         03:9a:0d:24:9c:0f:ed:82:c1:72:03:89:0e:c5:31:ec:cb:a8:
         10:6a:00:a2:3c:6e:88:39:3f:27:9d:c3:19:f9:ff:80:16:5b:
         fe:a4:d1:a7:7d:62:f2:9a:c2:d4:f2:c5:dd:d8:98:91:32:85:
         82:33:6a:99:58:3a:a6:99:9b:05:6f:61:90:fc:b1:2d:f4:3e:
         cf:2c:05:09:53:c3:22:4c:03:8f:be:ef:3f:7a:11:62:90:e2:
         b6:3e:34:4b:83:57:6c:00:0c:21:ae:ad:ed:23:95:49:50:f4:
         05:90:d5:f1:32:11:84:b3:4c:d0:bb:91:7a:af:3e:9e:e6:d4:
         cf:bb:5f:b9:9c:35:fa:8a:fe:31:35:e1:65:5e:c1:bf:20:39:
         45:46:e2:95:e1:17:06:b3:a0:6b:79:46:a9:02:66:80:de:b9:
         29:7b:8f:fb:89:4f:ae:7e:83:f2:7a:9c:1e:f2:43:4c:31:64:
         44:f5:ec:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:05 2026 by rpki-client