Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/V6s5Swph4JQsZXlPvnD1VgkLZHc.roa
File:                     V6s5Swph4JQsZXlPvnD1VgkLZHc.roa (raw, json)
Hash identifier:          E6OS6KWH7gd6yXVgcQ/hH2ZKdO+U4fCjxD9hIBD/D2E=
Subject key identifier:   57:AB:39:4B:0A:61:E0:94:2C:65:79:4F:BE:70:F5:56:09:0B:64:77
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1450
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V6s5Swph4JQsZXlPvnD1VgkLZHc.roa
Signing time:             Tue 31 Mar 2026 07:57:19 +0000
ROA not before:           Tue 31 Mar 2026 07:57:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5200 (0x1450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=57AB394B0A61E0942C65794FBE70F556090B6477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:6f:2e:68:51:c5:08:75:d4:8f:87:9a:b5:
                    ea:16:85:8e:ae:32:4f:49:6d:bf:f1:d2:7e:fd:65:
                    1f:76:63:3e:1a:50:7c:db:d0:5d:9c:16:73:d7:a8:
                    87:40:d0:10:23:cf:e7:3f:67:53:bb:3e:82:4f:f3:
                    f7:29:5e:fa:58:12:ff:75:13:da:ce:16:8d:63:6c:
                    15:a5:34:26:ad:ae:a3:28:a8:d0:87:d4:3d:0c:b7:
                    e7:4b:7e:21:f0:f6:e0:fa:2f:8b:87:0c:17:11:13:
                    62:06:9e:31:bb:c1:34:8d:35:cb:60:82:f6:c8:c6:
                    e9:76:a3:73:19:da:05:87:8e:6b:c6:18:41:5c:a3:
                    9b:42:65:80:d6:c4:82:e0:24:43:0c:68:53:bf:5c:
                    12:cd:6f:0a:00:16:e8:35:53:51:fa:ad:05:a3:53:
                    20:29:6e:c7:d6:93:41:a9:30:f0:09:d8:59:bd:3d:
                    9b:db:90:82:c9:be:11:aa:f4:bb:e8:4a:7f:56:25:
                    4f:8d:c9:61:8b:eb:82:f0:7e:8c:06:9a:0a:47:98:
                    72:19:62:4f:03:cf:67:7e:6b:cf:a2:92:a4:b2:32:
                    a1:99:72:b2:ef:f4:12:5d:0b:71:a4:ef:bc:7c:d1:
                    39:8f:ad:7b:20:ca:3d:0e:a4:a3:6d:86:a9:9a:89:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AB:39:4B:0A:61:E0:94:2C:65:79:4F:BE:70:F5:56:09:0B:64:77
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V6s5Swph4JQsZXlPvnD1VgkLZHc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:29:27:26:cf:ac:cd:0f:1a:19:16:ea:c0:a5:4b:c2:e7:3d:
         c3:1f:3a:44:e3:3d:68:bd:75:cc:9f:a4:6d:44:2f:16:ca:5f:
         cb:1c:f7:86:c4:b9:c9:41:7c:cc:b4:f9:bc:cf:e8:d0:c7:ba:
         2e:48:14:27:98:c5:a3:de:e1:7e:16:ef:4c:f4:a0:93:9d:bf:
         41:fb:23:21:50:ed:8a:32:52:9a:31:19:3f:15:ea:fb:04:e7:
         6e:27:d2:0b:ed:5d:c4:2c:b2:a8:2f:f8:8c:e9:9a:f6:06:2d:
         70:af:92:55:0e:4b:68:eb:e6:da:0c:f5:bb:c7:31:28:32:e0:
         be:c2:a0:10:00:32:61:2e:96:70:ee:9d:45:36:bd:c2:cc:3a:
         8b:4b:64:8b:9d:c5:89:d9:1c:b7:ea:ed:2e:46:ae:a4:78:8d:
         58:38:8b:dd:af:38:2b:17:c2:95:9a:44:fd:f9:34:a8:c1:d8:
         8f:7f:1e:cc:67:88:3c:96:e1:19:8e:9f:b9:15:7d:8a:c5:07:
         43:55:ec:8f:fe:c7:de:48:1f:93:3e:f3:6a:7b:81:e0:85:3e:
         b3:28:a7:7a:64:49:4f:8d:3d:cc:9b:c1:35:72:45:05:e7:7e:
         21:6b:5d:e1:06:6e:75:26:27:72:3a:0c:23:f3:e4:85:48:c3:
         8e:40:9a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:54 2026 by rpki-client