Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vqrYiiKNrUGh7D2khn-DUTd_llk.roa
File:                     vqrYiiKNrUGh7D2khn-DUTd_llk.roa (raw, json)
Hash identifier:          OSsuozq/ylr4qqR42am/o0Jip9S42nKPgOf784fsxls=
Subject key identifier:   BE:AA:D8:8A:22:8D:AD:41:A1:EC:3D:A4:86:7F:83:51:37:7F:96:59
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12E5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vqrYiiKNrUGh7D2khn-DUTd_llk.roa
Signing time:             Sun 01 Mar 2026 03:20:41 +0000
ROA not before:           Sun 01 Mar 2026 03:20:41 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.76.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4837 (0x12e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:20:41 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=BEAAD88A228DAD41A1EC3DA4867F8351377F9659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:5c:8e:23:6e:91:2f:29:b8:85:8f:2e:6d:
                    59:8b:2c:11:f3:72:b0:44:e9:22:00:0b:75:55:28:
                    63:2e:31:a9:18:6a:e4:01:4a:68:44:b0:59:9b:29:
                    6f:dc:44:22:51:77:e7:22:f4:4a:a2:ed:40:23:64:
                    80:60:57:bd:10:32:10:51:87:fd:c1:94:b1:ad:59:
                    0a:3c:a8:3d:40:d5:46:f1:54:76:1b:2e:85:27:57:
                    4d:41:c3:f1:58:9f:ae:d0:0d:27:30:14:14:29:56:
                    c3:5e:56:ca:83:54:29:a5:31:c4:02:d4:53:d7:66:
                    c5:7b:89:be:58:5f:ce:77:bd:1a:08:60:70:dc:b6:
                    26:f2:ff:1e:b6:9f:09:cf:ec:1c:91:01:1a:03:14:
                    2e:ba:6e:27:44:6e:27:af:5e:6e:aa:75:7e:3b:9c:
                    85:43:47:ac:dd:f7:c6:3f:a8:0e:bc:91:05:85:2d:
                    87:94:60:95:5d:78:ae:13:8c:3b:36:25:56:1e:21:
                    d7:3b:66:a3:89:22:1c:da:16:b3:80:1b:0a:91:8e:
                    39:7f:b1:98:1f:b6:7f:b8:73:ac:7d:f7:61:dd:2a:
                    bd:ab:bb:66:07:da:b7:50:18:1d:58:67:44:10:7d:
                    f2:cc:0f:2d:54:6e:c2:e5:cb:52:76:fa:ab:5e:ec:
                    15:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AA:D8:8A:22:8D:AD:41:A1:EC:3D:A4:86:7F:83:51:37:7F:96:59
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vqrYiiKNrUGh7D2khn-DUTd_llk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:b4:c7:33:ea:ee:d0:b9:51:61:e1:38:b7:d3:33:d7:3b:3a:
         59:f7:cf:af:85:1b:cd:ca:96:25:18:77:1e:d2:57:00:66:bb:
         e5:36:b3:5a:31:ea:aa:11:82:26:d8:45:32:ea:e4:f3:7d:1f:
         42:82:37:9e:2f:17:49:d6:91:25:23:db:f0:f0:80:6d:5f:ee:
         1c:48:b0:cb:fb:3d:2c:bb:89:e2:53:37:1f:f0:03:bc:08:3d:
         69:d5:13:ab:b1:a1:72:25:01:4a:80:d9:47:c6:3c:79:e8:dd:
         a3:85:12:34:26:13:ad:8c:f3:7d:73:b9:9b:c7:05:3c:5d:3e:
         4f:09:f8:11:fc:b0:3a:fd:5f:cb:9b:d4:ef:fa:13:e4:37:81:
         47:aa:fc:9e:ab:26:22:27:2b:b8:7b:af:0b:69:95:fa:5a:d1:
         7c:44:43:44:fd:bc:57:19:87:4b:97:13:47:8a:3a:bf:c8:3b:
         c6:23:1b:2a:11:5c:98:f4:21:cd:e6:f0:92:42:b4:94:14:b4:
         2d:e2:e8:8a:93:6d:9b:62:15:90:33:28:ae:97:d4:3b:99:14:
         21:1d:ad:0d:8c:d3:a7:a6:af:6b:05:84:b0:bf:8b:db:3f:e6:
         0f:52:54:be:9e:2f:43:dd:45:13:a8:e1:5f:29:d6:6b:34:63:
         e4:ed:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:27 2026 by rpki-client