Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZCehxGIwYB9viqg778bBYy7TnY.roa
File:                     dZCehxGIwYB9viqg778bBYy7TnY.roa (raw, json)
Hash identifier:          LOUJz0KNeI1cT2n+gEhscFGxMvGV8C0YHfX/qkpjN1Q=
Subject key identifier:   75:90:9E:87:11:88:C1:80:7D:BE:2A:A0:EF:BF:1B:05:8C:BB:4E:76
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       178C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZCehxGIwYB9viqg778bBYy7TnY.roa
Signing time:             Tue 31 Mar 2026 08:04:06 +0000
ROA not before:           Tue 31 Mar 2026 08:04:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6028 (0x178c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=75909E871188C1807DBE2AA0EFBF1B058CBB4E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:c1:de:ca:41:07:95:be:50:d2:04:77:27:
                    ae:23:96:dd:51:f3:6f:48:74:c6:4b:59:fa:a2:b5:
                    f2:e9:db:e4:01:48:72:a3:b8:b3:0b:f3:8f:0a:d1:
                    f4:9b:42:e0:fd:03:78:0b:44:d6:0b:eb:3e:20:6b:
                    81:89:eb:51:c3:dc:23:f5:97:7c:75:9f:34:cb:4e:
                    3a:b5:af:d2:bd:0a:a3:5e:41:4b:fc:ad:e4:81:a4:
                    73:2d:88:f3:4a:14:11:6e:f2:20:ad:9b:e5:84:60:
                    fc:41:4e:0b:c9:e7:38:ee:63:f3:90:f6:cd:6a:78:
                    39:a8:1d:22:ed:74:aa:07:09:5b:03:1b:91:fd:fa:
                    2f:63:9c:64:45:86:ee:11:90:79:53:78:3c:2e:65:
                    34:21:db:e6:45:a4:e6:d1:ca:60:e2:22:4c:ef:26:
                    e1:e9:dc:71:61:9e:a1:de:a1:e5:2a:b1:4d:67:a9:
                    c0:56:c0:74:03:64:fe:91:b3:3c:9a:0b:d3:22:4c:
                    ba:57:b1:9e:03:cd:46:26:76:97:a2:df:2a:03:64:
                    de:ee:31:3e:ff:94:ba:ae:88:4a:f8:75:2e:1d:ca:
                    2f:35:70:ba:cd:eb:97:1e:ad:02:5c:6b:7a:c4:3f:
                    43:d4:b5:a7:2f:45:43:81:08:cd:88:2d:6d:53:d4:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:90:9E:87:11:88:C1:80:7D:BE:2A:A0:EF:BF:1B:05:8C:BB:4E:76
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZCehxGIwYB9viqg778bBYy7TnY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:3a:70:66:77:91:7c:73:d9:8e:ad:25:d9:e7:0f:e4:61:4a:
         61:5e:74:8b:38:06:c1:12:71:08:ab:4a:f3:79:a6:8d:50:51:
         b8:0b:b7:6b:0a:a3:30:65:14:ad:de:e3:f9:43:bb:73:14:58:
         8e:30:7c:6b:b4:1d:b6:3d:a2:95:1a:22:17:ab:b2:1f:93:cc:
         6a:fb:c7:50:b2:ab:25:eb:f1:1e:9d:e3:c2:2c:ca:16:52:3e:
         c0:9f:80:bd:0e:e1:e1:aa:92:8c:27:5e:b9:49:92:12:01:9b:
         6e:17:74:61:4b:b7:31:3e:74:bb:f4:35:99:47:34:3d:21:4a:
         26:e4:c1:a4:e5:e0:89:1e:50:81:49:aa:01:85:be:d9:17:04:
         8e:c8:3d:8c:0a:ab:be:2e:ca:3c:4a:89:5f:a2:78:9d:06:7e:
         91:51:5e:f7:11:af:6a:cd:34:db:2f:e8:e0:75:8e:78:03:7f:
         e4:98:dd:14:00:aa:fd:9b:bb:49:bb:be:7f:58:25:a9:66:47:
         0f:e2:d3:c8:02:e8:b5:2f:4e:a9:90:cc:0c:0b:2e:5a:ee:b6:
         ed:0b:da:d9:60:ac:f5:73:df:66:84:ae:97:9c:1c:97:d6:94:
         82:67:20:72:51:ae:95:4f:e1:f4:25:7b:0e:dc:79:60:68:a1:
         f3:ca:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:18 2026 by rpki-client