Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/c0h7TPuQwrVBo2Y3YsyQIud3Kmg.roa
File:                     c0h7TPuQwrVBo2Y3YsyQIud3Kmg.roa (raw, json)
Hash identifier:          qAhky2jyn9R9U9hF75otw/yxT6AG657wXPnQNr2G9pE=
Subject key identifier:   73:48:7B:4C:FB:90:C2:B5:41:A3:66:37:62:CC:90:22:E7:77:2A:68
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1557
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c0h7TPuQwrVBo2Y3YsyQIud3Kmg.roa
Signing time:             Tue 31 Mar 2026 07:59:28 +0000
ROA not before:           Tue 31 Mar 2026 07:59:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5463 (0x1557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=73487B4CFB90C2B541A3663762CC9022E7772A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:ce:f7:8e:9e:d2:31:7b:02:a3:dd:53:7b:
                    a8:4d:ac:3c:d8:9f:a1:b9:c1:eb:e5:d5:dd:8d:06:
                    6c:6b:6f:c9:4d:71:72:2a:7d:c2:d5:62:61:07:be:
                    0d:03:50:17:d6:07:22:c9:95:b7:a4:82:a4:f0:33:
                    7f:ca:ca:3a:ce:09:51:a4:f2:49:a7:5a:e8:28:92:
                    4b:b0:7a:28:74:dc:32:5a:54:82:65:79:d8:12:61:
                    e8:66:96:1b:dc:60:90:72:5f:c7:e5:f4:6a:a5:ad:
                    1e:4d:36:b9:95:33:55:75:df:4d:0a:f3:3d:ba:07:
                    b1:a9:b2:58:fc:c9:6d:82:d7:69:8a:59:f8:08:45:
                    59:61:4c:01:33:b2:65:ed:69:a5:73:a9:92:7f:74:
                    6b:9a:5e:63:e3:d8:57:0b:62:ba:71:19:5e:d2:a2:
                    91:12:80:81:4e:a1:3e:28:0a:4c:8f:87:51:10:82:
                    87:99:f9:6a:cc:51:98:d9:f3:ec:36:b5:7f:f9:f4:
                    fd:71:32:40:3b:2e:e0:17:1c:bc:ad:1f:bb:95:0e:
                    89:69:fc:79:2f:f7:4c:22:3c:51:2d:5c:ef:93:6f:
                    c2:de:11:34:82:a4:2b:fe:b2:33:99:94:4b:b6:2c:
                    22:f8:86:87:0b:ee:d9:86:c0:79:46:d5:53:3a:3d:
                    cf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:48:7B:4C:FB:90:C2:B5:41:A3:66:37:62:CC:90:22:E7:77:2A:68
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c0h7TPuQwrVBo2Y3YsyQIud3Kmg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:30:48:34:87:05:b7:99:00:43:36:e2:64:11:fc:a0:79:c0:
         4f:21:6d:7d:12:eb:e3:2d:41:86:4f:ca:e0:be:a9:96:2f:58:
         9f:1c:72:de:62:a2:43:d9:7f:e3:36:ee:1c:bb:8d:34:e5:09:
         a3:6e:0f:8f:97:d5:72:73:1a:8b:7a:79:cb:18:72:49:75:d9:
         bc:6e:d0:29:1c:8a:1d:4e:c1:6d:f0:c9:36:b5:f1:8f:3a:04:
         e1:9a:ba:7b:6b:b3:d7:ce:3b:1f:65:46:a4:df:b9:a3:c8:63:
         81:6a:a4:b5:2a:39:f9:7f:11:fa:50:14:b7:00:f4:92:99:9f:
         bf:9e:33:ad:1d:eb:27:6c:97:9d:84:2e:a8:e7:5a:5c:87:48:
         f4:1a:7d:f2:ed:d3:d0:00:55:3e:20:ba:b2:f1:04:04:89:5b:
         90:f9:b8:14:bb:54:24:75:d2:97:d7:18:dd:ba:73:c2:30:0e:
         00:d0:c1:1b:bb:de:88:6c:e2:65:06:89:d0:5b:6e:fd:72:12:
         ce:bc:dc:32:f2:cb:eb:7b:f0:b1:9a:ce:d5:cb:30:a5:6a:53:
         74:48:ce:75:87:8f:a1:c6:6c:9a:9c:72:b7:22:56:d7:36:8e:
         1f:08:cb:32:de:dc:2b:9a:96:e8:df:e1:1e:39:23:06:01:8e:
         8c:c3:29:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:30 2026 by rpki-client