Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z2I-H_YK7md55ex7T4slwDRxCP0.roa
File:                     Z2I-H_YK7md55ex7T4slwDRxCP0.roa (raw, json)
Hash identifier:          eLX8AqfRp5NlFRtEYD5qvk1P90kq+MNSK+Hpb/2O7+Q=
Subject key identifier:   67:62:3E:1F:F6:0A:EE:67:79:E5:EC:7B:4F:8B:25:C0:34:71:08:FD
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1830
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z2I-H_YK7md55ex7T4slwDRxCP0.roa
Signing time:             Tue 31 Mar 2026 08:05:27 +0000
ROA not before:           Tue 31 Mar 2026 08:05:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6192 (0x1830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=67623E1FF60AEE6779E5EC7B4F8B25C0347108FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:19:60:de:50:80:59:9e:78:26:3c:a9:77:
                    c6:5d:47:3a:48:60:15:33:18:20:5b:8f:ac:6e:8b:
                    c1:e6:26:e1:ab:59:a7:25:ad:d4:5e:aa:54:95:b3:
                    36:64:e0:89:04:a5:81:ae:77:05:4a:e8:6d:5f:36:
                    ec:94:09:25:2e:b3:53:77:37:94:c1:31:c8:60:96:
                    7d:d2:3b:dd:75:41:5e:64:1f:f4:88:82:dc:a2:aa:
                    00:13:b0:00:66:5d:cf:cf:80:f7:10:f8:75:32:f0:
                    42:37:59:fb:d1:ad:49:59:1f:e4:f5:25:08:e9:3f:
                    a3:1f:65:c5:c7:25:5b:b9:93:ca:95:4c:ae:e9:ec:
                    6f:55:08:00:9b:88:64:77:34:fa:a2:b9:9f:ea:2b:
                    17:37:6e:4f:77:ae:3b:1f:a8:f1:14:b4:da:57:0d:
                    3b:c7:4d:5d:9b:ca:d7:90:e7:93:72:53:76:77:ef:
                    01:d1:f9:05:e7:34:42:7d:52:02:ef:2b:e1:cf:4f:
                    fc:92:57:c9:72:cc:9f:c7:84:1e:f6:8a:35:aa:d0:
                    68:77:db:25:dd:a9:49:25:15:7e:41:e4:c3:ab:a0:
                    ba:4b:84:9b:a3:e5:d7:5b:30:e5:e2:c3:6a:ce:01:
                    81:4c:0c:0b:a1:66:58:3d:74:87:eb:42:68:79:db:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:62:3E:1F:F6:0A:EE:67:79:E5:EC:7B:4F:8B:25:C0:34:71:08:FD
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z2I-H_YK7md55ex7T4slwDRxCP0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:cc:35:9d:e3:a9:00:60:c9:35:a0:24:75:56:9b:7b:0e:dc:
         a4:e9:1b:a1:9d:21:e7:01:10:0b:34:15:e5:5b:15:41:07:5f:
         8f:5f:bc:62:9b:ca:d8:68:4f:0e:21:d7:31:48:3d:16:7c:2d:
         b1:1e:e9:75:b5:64:b2:58:65:1e:9b:f5:47:2d:82:15:ec:b3:
         7e:86:02:1e:0a:15:0c:64:97:b0:b1:78:b1:cc:b7:d7:8d:ab:
         a9:e9:c0:df:d1:8f:fd:59:c7:b0:9a:bf:68:73:9a:7d:40:37:
         7e:68:cd:2f:7a:5c:40:ca:30:57:13:92:fa:c6:f3:1b:85:fe:
         33:dc:9b:85:62:56:76:e8:e1:38:84:fe:e8:da:50:c5:37:3d:
         6c:12:eb:9f:0b:50:f1:89:0d:e8:eb:51:80:db:21:0e:37:6a:
         64:cd:da:ef:c2:70:3e:35:31:63:7e:73:68:5d:e9:d2:69:02:
         98:bb:bd:f9:d5:1a:4c:9b:9b:36:97:69:dc:78:a8:a9:7e:3c:
         42:dd:a8:ae:7a:06:75:ac:28:f7:02:34:35:16:28:fc:4b:05:
         4f:b1:d2:b8:8e:e1:f9:6c:c1:3c:72:85:cf:5f:8c:d7:03:f0:
         d1:be:54:24:f6:f4:4c:25:5f:da:f1:c8:d9:ef:f7:c6:ba:e6:
         71:48:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:44 2026 by rpki-client