Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yNPidhVJfiWwYQfgMl3FbUxlQAE.roa
File:                     yNPidhVJfiWwYQfgMl3FbUxlQAE.roa (raw, json)
Hash identifier:          A+wSS6tK3rHpJvkECcI6tyEciBM2X3Kko02UWqp26Lw=
Subject key identifier:   C8:D3:E2:76:15:49:7E:25:B0:61:07:E0:32:5D:C5:6D:4C:65:40:01
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1209
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yNPidhVJfiWwYQfgMl3FbUxlQAE.roa
Signing time:             Sun 01 Mar 2026 02:48:35 +0000
ROA not before:           Sun 01 Mar 2026 02:48:35 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4617 (0x1209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:48:35 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C8D3E27615497E25B06107E0325DC56D4C654001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:98:02:01:89:4e:77:4a:13:e1:32:9f:3d:
                    e0:4c:1e:49:6c:d2:85:e7:09:12:16:a6:f3:d6:12:
                    65:71:4b:de:04:a2:56:6f:8a:8d:9d:41:97:fc:51:
                    31:49:1a:f8:90:47:ec:13:d5:22:bd:27:3d:11:df:
                    fc:3f:f8:2a:a1:78:27:17:75:05:22:d1:80:73:0c:
                    00:b4:b4:08:46:59:f7:dd:e3:78:93:86:17:8c:a7:
                    f1:8f:3e:33:f4:e9:71:32:67:10:bf:31:df:f2:ad:
                    62:fd:f6:d7:37:af:e8:8f:02:64:d5:ec:30:5b:6c:
                    49:a7:f1:e4:02:ca:db:12:c3:f6:21:2a:05:ed:b0:
                    16:6c:31:6f:e9:bb:5d:19:8b:b6:34:ae:b6:95:27:
                    e5:22:81:67:61:ce:b4:b7:cd:ef:35:53:f0:ff:7f:
                    29:07:88:33:09:8e:ad:41:ca:38:07:c0:56:d0:96:
                    6a:a8:58:81:5a:e7:a3:fd:0d:20:8f:9d:2f:b5:68:
                    5b:f9:ef:63:70:fa:8a:7c:23:23:19:c3:73:2d:27:
                    23:96:07:e5:92:a8:f3:c3:20:d6:95:c7:0e:33:52:
                    92:aa:51:02:c0:bd:38:25:35:84:f7:51:8d:28:5f:
                    6f:a0:30:e6:ac:05:20:b8:2b:7f:fa:f0:45:4d:10:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D3:E2:76:15:49:7E:25:B0:61:07:E0:32:5D:C5:6D:4C:65:40:01
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yNPidhVJfiWwYQfgMl3FbUxlQAE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:50:28:b8:5f:76:85:22:79:5c:5a:a2:20:6e:f8:a1:67:fc:
         55:d3:fe:f2:fb:e1:13:76:d1:8b:0e:d4:d9:f3:8f:0c:88:b5:
         8d:ca:34:75:9a:4d:bd:7c:4f:3d:d6:ae:f0:58:bb:54:20:c5:
         04:52:4b:33:4a:8a:6a:cb:a7:53:b6:6b:32:3b:8a:be:99:46:
         b5:11:58:68:80:dd:94:3c:25:ed:13:63:85:32:11:58:7e:b9:
         35:28:ee:25:2f:50:54:77:8d:de:95:bd:b9:23:a9:fc:e3:46:
         36:a9:96:59:70:74:bc:ba:5e:2a:4a:70:dc:aa:8a:46:cb:bd:
         26:cf:e8:96:ea:b3:70:c9:ff:8c:7f:14:f8:6f:d2:78:11:c7:
         57:8d:39:2d:14:de:d0:d7:38:a2:98:d7:d8:ba:b0:0c:31:56:
         e5:4a:ad:c4:24:f4:df:63:fb:f8:87:99:42:b4:ae:10:de:ba:
         35:36:00:bd:1b:09:74:55:cc:04:af:3b:fd:4a:f7:62:9c:81:
         68:57:51:cc:d0:2b:9c:2d:54:c9:38:06:8c:ca:8c:66:bd:ab:
         32:17:21:65:0e:57:cf:8d:ea:34:d7:07:76:27:77:06:07:ae:
         14:11:35:e6:02:25:84:1f:21:22:89:ad:f9:88:20:1a:2b:68:
         d8:7f:5a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:59 2026 by rpki-client