Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/r8acm4crwSdr3Ff9tXeMRd9Fw1U.roa
File:                     r8acm4crwSdr3Ff9tXeMRd9Fw1U.roa (raw, json)
Hash identifier:          H7B51m6KICn1mXRgn+7y4XfBt3/ugVXlBg0g0B67UN0=
Subject key identifier:   AF:C6:9C:9B:87:2B:C1:27:6B:DC:57:FD:B5:77:8C:45:DF:45:C3:55
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       119D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r8acm4crwSdr3Ff9tXeMRd9Fw1U.roa
Signing time:             Sun 01 Mar 2026 02:31:15 +0000
ROA not before:           Sun 01 Mar 2026 02:31:15 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4509 (0x119d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:31:15 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=AFC69C9B872BC1276BDC57FDB5778C45DF45C355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:31:81:14:6c:c7:45:95:b0:b2:08:31:8a:
                    df:bf:8c:d2:f7:d4:90:5f:02:e2:9a:45:c0:99:08:
                    b1:fd:90:bb:7d:cf:97:a3:18:93:11:01:e5:1d:cd:
                    fc:45:82:f6:ae:dd:e4:8e:43:76:78:4c:b2:91:1d:
                    15:fe:09:2d:04:26:f6:54:96:e6:e9:07:6f:df:19:
                    ae:5c:97:40:61:72:a0:84:0c:32:5e:05:08:e5:68:
                    56:cb:e6:a4:ad:00:1c:58:c3:1d:9a:60:fc:e1:e7:
                    9f:ca:c2:b9:0c:95:27:20:30:6e:ec:9f:c2:3e:d3:
                    9c:29:39:1a:1a:69:e1:83:1d:9b:d0:cc:df:6f:89:
                    af:0c:31:d0:3c:fb:e1:cb:d9:2c:41:69:79:db:bd:
                    6e:15:e4:51:c9:98:c5:f8:6e:98:a9:36:5a:82:d6:
                    a2:36:b6:1a:2a:34:4e:df:20:60:d3:3a:a5:2b:7b:
                    1f:2e:24:21:c5:cd:86:c5:24:a2:c8:6d:62:26:a4:
                    ff:de:87:58:1e:bd:c3:b3:85:21:73:e7:d5:c8:4e:
                    37:4a:a6:c1:8f:26:74:6a:f6:49:a6:29:c4:9e:16:
                    6f:fa:22:6b:21:54:4a:6b:15:33:c5:ba:fd:f0:8e:
                    36:6f:64:4a:20:5a:0c:27:8b:66:81:98:fd:24:93:
                    16:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C6:9C:9B:87:2B:C1:27:6B:DC:57:FD:B5:77:8C:45:DF:45:C3:55
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r8acm4crwSdr3Ff9tXeMRd9Fw1U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d2:85:09:9f:e3:da:40:f1:a6:94:1b:d8:29:63:d2:89:50:61:
         58:65:6b:69:91:14:b1:6a:e7:db:7d:aa:32:51:83:fb:12:45:
         cf:21:28:0a:95:21:4c:6f:ff:58:22:90:20:ae:27:af:cb:86:
         04:74:f2:36:9e:a2:30:19:c9:fb:cf:f8:a0:7a:cf:de:ed:e0:
         56:76:65:b2:df:e5:0a:df:4f:d3:76:20:45:1c:ba:2b:42:7a:
         b2:33:da:f8:42:18:4d:2f:6b:b7:83:6f:d1:bc:88:25:c3:83:
         e9:4b:9f:5a:e1:3f:7c:ab:c7:ea:64:db:1c:6d:53:69:64:9e:
         50:54:e9:2a:58:c5:f6:73:f8:98:85:6d:15:2d:20:d4:df:e7:
         4e:a7:2e:72:06:b0:34:22:c6:e0:12:5a:0a:c3:2d:5b:3e:a5:
         32:06:71:63:a1:1b:f2:33:09:c0:f5:f0:24:fd:d4:95:33:0c:
         26:51:db:0d:11:78:4c:a2:b1:18:6d:32:f7:b9:fe:47:76:3f:
         e5:a1:68:20:e2:ac:6e:1d:41:38:2d:9f:40:57:05:95:00:02:
         fb:6c:96:1d:20:53:80:c8:b3:0b:2d:92:21:77:f7:7a:c2:e5:
         a6:10:53:d7:aa:74:96:72:e1:3d:0d:10:59:97:36:89:a9:9d:
         99:28:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:27 2026 by rpki-client