Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t-JYRyv6z_zXxURN55mM1z14fgs.roa
File:                     t-JYRyv6z_zXxURN55mM1z14fgs.roa (raw, json)
Hash identifier:          SDMb3rS6vGpz98MPVrSNEz/yXg8H1n2+Xq4QjCsr76Y=
Subject key identifier:   B7:E2:58:47:2B:FA:CF:FC:D7:C5:44:4D:E7:99:8C:D7:3D:78:7E:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10AE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t-JYRyv6z_zXxURN55mM1z14fgs.roa
Signing time:             Sun 01 Mar 2026 01:49:12 +0000
ROA not before:           Sun 01 Mar 2026 01:49:12 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4270 (0x10ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:49:12 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B7E258472BFACFFCD7C5444DE7998CD73D787E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:37:d6:c5:fa:bb:a1:5f:a3:b1:82:53:15:fa:
                    24:05:a2:c3:00:88:c2:d2:98:46:9d:d5:7d:eb:e4:
                    10:56:40:8e:d7:5a:e4:7a:c2:43:1f:10:5c:94:29:
                    78:4a:11:12:c4:df:e8:91:16:e2:39:60:c4:1e:a0:
                    33:d1:07:ad:7e:95:0d:dc:b1:f4:e4:4f:60:a3:af:
                    c9:48:61:f6:c6:c7:ed:ac:61:ea:3c:89:15:7b:76:
                    34:08:74:44:bd:a8:e2:2a:b8:7d:9a:94:e1:b8:2e:
                    1c:80:de:97:a0:63:f1:a5:90:e3:ce:a0:a7:17:bc:
                    2d:42:f6:11:d6:b2:a4:f4:86:c2:c8:0d:9a:d2:bb:
                    7e:d8:a8:11:27:4e:22:d4:e8:d9:8b:c9:03:38:5c:
                    40:22:94:c8:5f:1e:fb:97:65:8c:2b:e1:08:44:10:
                    db:83:82:51:c7:4e:58:2a:a1:a9:0d:78:d8:8a:b4:
                    72:c1:9e:41:9c:66:76:43:e1:8b:bb:46:1b:eb:75:
                    86:6e:3c:d6:22:99:85:6a:7a:44:3a:23:f6:62:4b:
                    9d:c7:0d:59:3a:9f:3f:81:b9:8e:7b:79:84:7a:af:
                    57:58:ff:df:da:d7:96:48:8f:10:c9:f6:0f:7c:37:
                    cb:8d:86:be:42:6f:14:e1:51:86:ba:5b:80:2d:b7:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E2:58:47:2B:FA:CF:FC:D7:C5:44:4D:E7:99:8C:D7:3D:78:7E:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t-JYRyv6z_zXxURN55mM1z14fgs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:d2:e9:a7:68:04:ef:88:42:1e:b8:36:34:75:cc:bd:7b:dc:
         95:fd:de:b4:00:7f:34:14:99:56:4f:28:12:e0:fe:df:ca:d5:
         c5:b0:62:7d:2d:cd:11:92:9d:6d:35:ed:e1:92:c8:56:77:e0:
         9a:da:a6:c2:83:4d:a2:59:c8:70:e9:2c:e1:c0:43:29:f9:c8:
         db:0c:00:f7:3b:bf:ef:fe:e6:8e:90:44:ae:c7:83:d6:6e:30:
         04:9c:92:b3:15:c9:c0:c9:33:81:a3:ce:1d:c1:08:ff:32:c7:
         3a:10:dd:e1:95:82:18:12:2e:af:ac:7c:79:2f:51:51:7f:93:
         59:79:96:fd:92:3f:74:44:14:67:f8:b6:aa:d8:c9:b6:68:29:
         3f:ce:a7:89:04:14:40:51:1d:6e:8e:6d:77:06:4b:b9:cd:f4:
         ef:d6:a3:c3:cb:b9:c1:c8:83:d1:9c:1c:c8:dd:47:68:39:cd:
         33:b0:0e:93:5c:23:09:fb:b8:37:1b:fe:9e:39:2d:86:e0:b2:
         b6:fb:bd:89:4d:33:52:cc:ab:90:fa:8c:eb:2b:f2:6f:51:e7:
         7a:a5:91:76:2d:48:82:1e:b9:cd:31:29:41:2d:e8:86:96:6f:
         18:dc:5b:fa:44:c8:ed:56:e1:cf:dd:62:5d:e9:be:97:9b:3e:
         a4:3f:83:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:47 2026 by rpki-client