Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1LJFewchioQ_jZ2fRwWRWjo8xxs.roa
File:                     1LJFewchioQ_jZ2fRwWRWjo8xxs.roa (raw, json)
Hash identifier:          sL66JYxW1tRA+EV3tBmStmv0Yi9hEls3g2FSSUSldMM=
Subject key identifier:   D4:B2:45:7B:07:21:8A:84:3F:8D:9D:9F:47:05:91:5A:3A:3C:C7:1B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       140D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1LJFewchioQ_jZ2fRwWRWjo8xxs.roa
Signing time:             Tue 31 Mar 2026 07:56:46 +0000
ROA not before:           Tue 31 Mar 2026 07:56:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5133 (0x140d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D4B2457B07218A843F8D9D9F4705915A3A3CC71B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:e1:0c:95:dc:9c:83:12:30:f7:8a:6e:47:
                    f3:57:6e:94:ff:a1:d8:d3:0a:4e:87:81:6b:e3:12:
                    9d:45:3f:d8:65:c8:bc:73:79:7d:f2:7b:28:24:3f:
                    0a:b9:1f:57:23:7e:7e:10:d3:a5:5a:eb:2b:07:0b:
                    3b:12:c5:b8:9d:8f:ea:8a:ee:82:c2:36:e2:04:a9:
                    fc:d3:cd:02:f5:81:4e:c3:98:48:8c:89:46:70:57:
                    f0:a1:bd:3d:40:1b:76:55:08:84:f2:e9:c3:4b:7c:
                    e1:75:3d:cc:2c:f0:18:8d:78:31:d8:4c:22:b3:a0:
                    97:98:be:e1:42:64:70:62:2e:0b:68:ab:bd:b7:2b:
                    ce:2c:26:7d:ac:c7:08:c7:a1:37:8b:c0:8b:88:92:
                    65:4c:c3:98:89:e7:15:0a:55:75:d4:8f:1e:a9:da:
                    1a:4f:6f:e0:24:46:f8:8d:52:a6:2e:eb:a1:ab:e2:
                    18:12:6d:ed:d7:e5:c0:da:5d:95:4b:18:5d:cb:86:
                    76:35:57:dc:63:a6:52:de:02:50:a1:40:31:bf:6f:
                    46:68:68:4e:6a:70:06:95:0f:5f:b0:6b:22:2f:f1:
                    a1:c2:9c:7a:c1:d4:4f:b6:67:5f:b1:36:b8:f7:63:
                    5f:e2:36:40:51:90:1a:c1:35:dd:71:2e:ca:68:f3:
                    dc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B2:45:7B:07:21:8A:84:3F:8D:9D:9F:47:05:91:5A:3A:3C:C7:1B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1LJFewchioQ_jZ2fRwWRWjo8xxs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c5:3d:77:88:31:21:b9:37:d0:44:74:5f:06:ae:b7:2c:04:
         b9:32:4f:10:fc:68:a1:c7:15:7b:10:06:0c:7e:c3:c8:8a:f1:
         3b:10:50:56:0c:f2:67:d0:11:3b:b0:89:51:0e:3a:f4:c1:79:
         f8:99:09:95:8f:cb:4e:eb:d3:f0:18:ac:2e:99:8a:73:4e:59:
         15:95:80:10:70:8c:b7:73:2f:4a:47:a6:98:1c:ee:06:45:63:
         b7:c2:35:81:fa:c0:2d:c2:42:5f:8b:df:23:e0:82:2c:17:81:
         2b:e5:e7:8f:6c:21:2a:4c:1b:8c:55:a9:e8:8c:8d:50:a5:cc:
         eb:2f:03:2f:de:32:e8:ea:71:1b:d2:d0:45:2c:17:d4:98:82:
         42:cb:1a:68:44:93:5a:27:a0:ac:a6:95:48:d7:c7:5c:47:f8:
         b3:61:97:c7:fd:9b:0a:af:53:f7:be:06:87:dd:51:b9:9e:9e:
         a7:61:1d:2a:07:e1:62:2b:f4:00:b3:7d:9d:ad:fe:1d:0e:0b:
         81:c6:2d:c6:76:61:e1:09:30:e8:eb:42:df:e2:8b:80:f3:2e:
         b8:b1:41:bc:d4:5c:2d:64:a1:96:c2:af:5f:11:cf:d6:91:85:
         d8:cb:51:ce:4a:9a:f4:b8:21:9b:49:20:88:77:74:d3:8a:2d:
         d7:53:ea:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:33 2026 by rpki-client