Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/z5NsTp5hHeZ92BvQTVJjC9ZpivU.roa
File:                     z5NsTp5hHeZ92BvQTVJjC9ZpivU.roa (raw, json)
Hash identifier:          uSijYBeioGd7fp7QpKVGCaZGmGbSxM26JrbTeapeOIg=
Subject key identifier:   CF:93:6C:4E:9E:61:1D:E6:7D:D8:1B:D0:4D:52:63:0B:D6:69:8A:F5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       132F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z5NsTp5hHeZ92BvQTVJjC9ZpivU.roa
Signing time:             Sun 01 Mar 2026 03:36:23 +0000
ROA not before:           Sun 01 Mar 2026 03:36:23 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4911 (0x132f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:36:23 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=CF936C4E9E611DE67DD81BD04D52630BD6698AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5c:0e:75:2a:9f:b5:9a:02:9e:d0:44:7f:21:
                    57:4a:90:0d:92:d7:e8:b7:62:e6:b3:50:56:03:5b:
                    40:c3:7e:0d:12:34:80:e3:30:3a:92:77:60:83:a5:
                    b4:28:2f:86:a8:b1:50:c3:27:04:d3:73:af:b4:87:
                    4e:37:ad:f9:65:24:05:0f:c9:f5:dd:91:d8:0e:a4:
                    31:74:f6:6e:9e:00:30:81:40:fe:aa:15:2c:e6:e3:
                    f1:bc:11:19:9f:d7:f5:96:cd:67:44:f7:59:9b:12:
                    9b:07:25:42:b0:10:21:e9:ec:29:52:95:b1:1d:db:
                    4d:62:63:a7:2d:03:7d:23:3c:45:eb:e4:d1:2b:ee:
                    59:da:dd:59:4a:3a:bb:06:f1:05:6f:c4:ed:ff:89:
                    78:78:e4:95:b0:49:04:2b:f1:a8:dd:00:94:aa:2c:
                    ac:69:c2:1a:b1:f1:b7:1c:e5:cf:b6:d6:e7:5a:0d:
                    f1:64:eb:87:95:75:34:0d:03:0d:15:d6:47:db:32:
                    40:50:57:7e:75:8b:67:78:9c:97:c0:20:0d:fd:7e:
                    85:38:86:c8:cf:4d:c3:31:01:b0:35:cb:68:0b:be:
                    09:90:20:d5:c7:05:9e:25:7c:69:07:d5:21:01:21:
                    d0:08:62:b9:f0:a1:54:20:c6:9a:a2:a9:cc:44:aa:
                    7c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:93:6C:4E:9E:61:1D:E6:7D:D8:1B:D0:4D:52:63:0B:D6:69:8A:F5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z5NsTp5hHeZ92BvQTVJjC9ZpivU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:6c:0f:3b:a5:4d:5a:04:37:bb:79:39:62:46:44:6b:bd:3a:
         6a:cf:16:1f:39:22:c2:c7:b1:78:c1:55:10:9f:9d:fd:b0:dc:
         42:58:cd:90:1f:77:d8:b3:be:bc:65:a2:01:39:5d:ad:ee:f1:
         71:76:3f:c9:8a:25:b3:23:9d:6f:44:10:c1:00:aa:9e:e3:39:
         25:84:0c:69:a4:ab:41:08:35:0e:e2:c4:09:ad:33:3e:b0:71:
         cd:5e:60:e7:1b:f5:38:42:71:10:23:5d:b3:8e:c5:51:92:db:
         16:d3:d0:49:1d:c8:7d:04:b7:81:91:41:38:ba:4c:51:11:37:
         fc:3a:34:26:55:e3:2f:79:68:2e:4f:bf:6b:d3:c1:9b:4f:3b:
         e0:36:a4:76:8a:48:e8:d5:35:b1:e5:94:a3:f6:d0:ad:b3:0c:
         d3:6f:6e:00:f1:21:32:58:01:12:16:ea:2a:5e:cc:2c:cf:af:
         fe:89:25:18:80:64:cb:23:76:61:5b:90:7d:53:1b:3a:86:d0:
         4a:72:4f:18:24:9f:66:55:c3:aa:ab:26:82:3f:32:eb:f3:b8:
         62:b3:0e:1c:d9:46:76:32:66:ca:e2:5a:f4:f8:e9:ac:f4:95:
         a5:d0:3e:db:32:0e:22:47:3c:31:15:75:8d:0d:a8:ac:6a:b4:
         09:ff:24:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:30 2026 by rpki-client