Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QE_QmMwafL1mMPd1STdcosyBysU.roa
File:                     QE_QmMwafL1mMPd1STdcosyBysU.roa (raw, json)
Hash identifier:          A2HUfN5mwHsxVfdHfOnSU5ErX8dHietMXbq0Li/qpDo=
Subject key identifier:   40:4F:D0:98:CC:1A:7C:BD:66:30:F7:75:49:37:5C:A2:CC:81:CA:C5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14F4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QE_QmMwafL1mMPd1STdcosyBysU.roa
Signing time:             Tue 31 Mar 2026 07:58:38 +0000
ROA not before:           Tue 31 Mar 2026 07:58:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5364 (0x14f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=404FD098CC1A7CBD6630F77549375CA2CC81CAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:71:e9:5d:e3:9d:62:a3:63:fb:d9:76:92:d2:
                    3a:ab:8c:0d:01:2b:83:f0:f1:4f:01:79:56:26:4b:
                    e0:0a:9e:57:9c:91:8b:7f:e6:99:0e:f1:b5:cc:bc:
                    36:84:2a:b5:28:96:8b:aa:98:4c:ba:c2:81:f4:22:
                    c9:7a:4d:0e:0c:29:a0:bc:e8:ed:81:7c:8d:02:cd:
                    b1:34:b8:24:87:74:a7:fb:c6:33:6e:c5:ef:a1:39:
                    9d:06:28:2a:b0:0b:e3:4e:3d:d4:e7:45:26:31:92:
                    81:52:68:58:ab:21:78:3d:cc:a3:6e:d1:35:02:e5:
                    8f:4b:b7:44:88:ff:86:1d:1a:da:89:05:a8:fe:e9:
                    f1:7c:5b:dd:04:3f:3a:0b:7f:f6:c1:fd:33:cf:89:
                    0b:52:7b:62:09:92:1d:34:47:22:d0:b6:a3:8f:a1:
                    f8:91:b6:61:23:6e:cc:0d:82:fe:7e:04:e4:d0:fe:
                    a2:a8:93:ec:3f:52:4c:6d:bc:dc:70:2b:9a:d2:93:
                    12:b8:eb:d6:ec:5f:4c:82:e0:48:e1:14:c7:61:30:
                    7c:ee:f3:11:11:32:1f:f8:10:2a:85:50:28:3c:f0:
                    39:0e:2f:4f:65:f8:b1:a4:48:56:af:b9:2e:9f:35:
                    f7:fd:04:ce:c7:04:f0:fa:5a:c2:4c:17:be:7c:3f:
                    0b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4F:D0:98:CC:1A:7C:BD:66:30:F7:75:49:37:5C:A2:CC:81:CA:C5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QE_QmMwafL1mMPd1STdcosyBysU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:96:ee:bf:6f:23:e4:28:4f:f9:a1:6e:88:8e:1e:5c:44:4e:
         7d:b7:86:e9:ed:c2:30:c3:f3:6f:58:0f:e6:52:cd:0e:00:ae:
         0a:9f:e2:8f:ee:2a:02:0c:a4:dc:e0:35:8f:89:57:ab:70:f5:
         2f:5a:a1:04:39:2b:04:9d:d4:df:36:c1:05:be:66:3f:6a:db:
         dc:16:d0:aa:3b:e0:aa:c2:8f:e8:d0:fa:b3:28:63:b6:5d:e1:
         45:73:ce:28:c7:5f:8f:dc:ce:38:c0:2c:58:af:f8:32:58:0c:
         a2:0e:f4:e3:b3:61:09:19:2c:86:3d:17:78:41:ff:d7:81:63:
         27:8e:5d:9b:4a:d1:9b:cc:22:45:e1:7b:4c:c3:8c:39:c4:eb:
         77:30:ab:52:b3:86:3a:d7:c2:3a:b2:74:42:19:8f:e3:6b:6d:
         9e:2a:23:85:e2:7c:d7:aa:5a:5c:97:ee:a2:96:2b:8a:1a:12:
         ab:d0:e6:68:1b:1e:44:7a:42:9c:ed:aa:33:53:2f:ea:fe:e7:
         35:4b:11:d7:d8:33:92:c3:ec:0f:a1:fb:4e:43:59:94:b7:f9:
         95:ae:fa:d3:9b:74:21:ed:69:df:76:55:62:ef:01:46:0d:56:
         02:b6:19:ac:ad:6e:0c:ab:35:2e:82:6a:ee:ad:f0:7a:09:fb:
         81:7c:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:32 2026 by rpki-client