Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SQnhAgvG1qiV5V4R59VoAYKtZ-c.roa
File:                     SQnhAgvG1qiV5V4R59VoAYKtZ-c.roa (raw, json)
Hash identifier:          Jq4xbWeIqtlHbhLDCsLy2FOioOaBvONRZyVqfV1X8CI=
Subject key identifier:   49:09:E1:02:0B:C6:D6:A8:95:E5:5E:11:E7:D5:68:01:82:AD:67:E7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17F8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SQnhAgvG1qiV5V4R59VoAYKtZ-c.roa
Signing time:             Tue 31 Mar 2026 08:04:54 +0000
ROA not before:           Tue 31 Mar 2026 08:04:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6136 (0x17f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4909E1020BC6D6A895E55E11E7D5680182AD67E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:80:cc:d3:ba:3a:65:2f:56:ec:07:5f:d8:
                    2a:34:37:03:d6:cc:31:5c:9a:45:84:ca:40:bd:ba:
                    ea:8a:78:68:ee:e9:18:68:b9:c9:2b:7e:00:6f:03:
                    33:b1:34:63:19:d4:32:16:96:ab:4c:d9:01:06:75:
                    66:6e:c7:e4:9a:e4:88:05:66:04:dd:1b:13:ed:f8:
                    1e:90:ec:e4:e8:5b:c6:97:fb:34:0d:4f:09:28:89:
                    79:39:6f:af:15:e1:d3:d2:38:76:43:74:16:46:ef:
                    e9:b7:84:0f:b1:78:20:e8:80:32:fa:bc:85:e7:b9:
                    f8:0d:1a:c7:84:a2:43:94:7a:a0:40:8c:84:bf:51:
                    c2:19:02:34:99:c1:53:22:41:34:45:92:29:e6:fb:
                    fe:8b:6d:b9:68:a5:9f:41:ea:f4:bd:86:e6:67:d8:
                    06:ce:30:a2:e0:d9:37:fe:98:d4:52:07:7d:9a:b0:
                    a2:2e:18:89:65:2e:5b:26:65:2a:a0:a4:40:34:e6:
                    db:d5:8f:9d:4f:a0:af:da:94:aa:09:79:ef:b8:9b:
                    0c:fe:62:02:79:77:b7:00:ae:9e:9b:d2:9a:61:70:
                    65:5e:33:41:43:a5:42:e3:3b:01:08:3a:da:23:e1:
                    f7:a0:64:bf:9f:c7:b7:e0:5f:e0:24:46:82:75:75:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:09:E1:02:0B:C6:D6:A8:95:E5:5E:11:E7:D5:68:01:82:AD:67:E7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SQnhAgvG1qiV5V4R59VoAYKtZ-c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:d5:c8:8e:4e:47:f2:ba:39:cd:b2:eb:06:74:4f:0d:d1:07:
         11:ea:4e:43:aa:c7:60:ce:81:d7:8c:c5:ed:b9:62:9e:6a:00:
         18:d6:0c:ca:e8:81:2a:cf:43:b3:0c:e8:7c:d3:ff:ea:95:44:
         d4:71:16:35:ac:95:e0:3d:a8:08:b3:f5:ec:99:09:d3:72:08:
         16:fe:58:d0:4d:04:e0:c3:1f:30:2f:07:3b:af:38:a0:f0:62:
         3a:ee:d1:c6:b7:ce:57:4e:ff:55:ce:83:9e:df:c9:66:d3:0d:
         fa:31:88:9b:51:c7:b5:84:4a:db:b4:27:5b:74:5c:30:1e:fa:
         08:5e:26:1b:dc:bd:fe:24:f4:fa:bc:40:5f:89:f5:98:14:da:
         d4:54:d8:f7:3b:ec:ff:28:60:ad:81:42:dd:10:f7:c5:ec:55:
         3b:69:a1:b0:cd:16:18:bf:bf:72:ae:85:7f:64:eb:8f:eb:75:
         8c:57:6d:19:cc:1c:9b:f9:a0:25:c4:e5:3e:e3:d9:c5:75:a6:
         b4:9f:b1:a4:bb:4d:62:b3:7d:4f:05:49:67:fe:21:2f:3f:c4:
         1e:db:a1:24:de:86:7a:df:08:77:f6:63:20:44:b6:20:2a:4c:
         24:a2:77:5e:ce:e3:ac:df:38:a3:3b:19:b3:cf:5a:f9:69:79:
         ea:45:9b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:31 2026 by rpki-client