Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wDOK_COuVPdx_3qcYdaPJqoLK0Y.roa
File:                     wDOK_COuVPdx_3qcYdaPJqoLK0Y.roa (raw, json)
Hash identifier:          Vx2/DXEtGIBgDrp1VQ2D919s5qEoJmU9kvt8RVHV5pI=
Subject key identifier:   C0:33:8A:FC:23:AE:54:F7:71:FF:7A:9C:61:D6:8F:26:AA:0B:2B:46
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11B5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wDOK_COuVPdx_3qcYdaPJqoLK0Y.roa
Signing time:             Sun 01 Mar 2026 02:36:22 +0000
ROA not before:           Sun 01 Mar 2026 02:36:22 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4533 (0x11b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:36:22 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C0338AFC23AE54F771FF7A9C61D68F26AA0B2B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:05:19:97:10:64:51:2e:c6:d8:76:3e:88:
                    cc:a2:b2:ef:1f:44:3a:87:29:a5:46:00:e6:cc:93:
                    e0:7a:cb:39:cb:25:14:3a:b6:85:0d:4d:af:b1:1f:
                    98:4d:0b:b1:fd:0d:2d:11:de:ad:de:3f:d9:d1:e6:
                    cd:8c:55:e5:5a:dd:3a:54:59:6d:6e:ab:2f:ee:4a:
                    b3:5a:dd:ba:0e:a1:4b:55:15:9e:ad:03:2a:4f:fa:
                    30:03:c9:95:69:7d:a6:3e:6e:47:f1:5e:4c:ed:b8:
                    1a:13:42:c9:be:1a:c5:98:0a:31:ef:1a:c3:db:b5:
                    0a:d3:e2:d4:c9:1e:bc:54:16:f2:26:6e:f2:76:c2:
                    21:7c:cd:af:4c:2e:35:47:85:5b:c1:70:01:63:5b:
                    12:de:99:5e:e8:d8:64:8c:67:c8:62:ee:c1:2e:a6:
                    df:ba:58:41:5b:24:c8:ac:1f:31:27:e5:09:d7:26:
                    96:bc:2d:51:f2:82:72:c0:9c:ee:b4:30:a6:c8:87:
                    03:6e:17:91:4a:45:50:58:db:fc:ed:d5:8a:41:e1:
                    b3:82:b4:20:83:65:91:e3:73:f3:e1:f9:a3:7c:fe:
                    86:d5:e2:5b:db:7e:8a:ac:a6:a9:12:30:02:0e:3d:
                    cf:66:94:1e:14:47:28:38:81:e7:13:9c:18:da:66:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:33:8A:FC:23:AE:54:F7:71:FF:7A:9C:61:D6:8F:26:AA:0B:2B:46
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wDOK_COuVPdx_3qcYdaPJqoLK0Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:5e:d4:d6:8f:be:fd:87:4b:25:97:e5:3a:ad:16:cb:8d:c8:
         4e:1d:ab:cd:2b:26:db:de:c2:ff:83:70:19:94:b6:11:5b:d7:
         53:b1:6a:58:23:9b:04:61:20:37:8d:01:0d:57:86:23:7b:a0:
         69:ab:1d:83:b9:83:a3:7b:ee:22:e6:94:b3:79:b1:ba:f6:f6:
         7b:b1:26:1f:d9:77:0e:c6:f7:02:2b:3c:c5:b0:c3:8a:6d:75:
         53:c7:93:8e:11:29:f4:19:13:c6:20:b7:ff:51:bc:f6:2a:6f:
         9e:72:12:1e:58:f5:a1:6d:99:0b:a2:9e:b3:9e:99:3f:8a:3b:
         01:0b:64:1b:c5:74:b0:eb:d2:81:11:52:1d:73:96:25:fc:0b:
         6a:64:8b:69:37:cd:9e:26:3d:b0:dc:4d:41:41:14:03:81:e6:
         4a:ed:05:da:2f:aa:05:e9:0f:42:fe:09:b4:5d:70:08:e5:e7:
         b9:3a:49:33:36:08:60:7e:b6:c8:cd:d0:48:b6:e0:e2:20:1a:
         ab:42:c6:be:39:d0:88:09:96:34:a3:9e:be:57:11:24:45:33:
         1b:dd:e1:04:98:52:90:c9:ed:99:8c:9d:58:3c:67:46:cf:bc:
         a9:46:af:f5:39:af:54:bf:f5:75:1b:1e:78:c1:bf:52:6b:be:
         d3:9c:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:04:31 2026 by rpki-client