Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fWdAbFvzAWdMk5RoDXNIruLAku4.roa
File:                     fWdAbFvzAWdMk5RoDXNIruLAku4.roa (raw, json)
Hash identifier:          9OdqKXIRngHliw5ThiBGAP4beSw9CYnvkREop4WajuA=
Subject key identifier:   7D:67:40:6C:5B:F3:01:67:4C:93:94:68:0D:73:48:AE:E2:C0:92:EE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17F6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fWdAbFvzAWdMk5RoDXNIruLAku4.roa
Signing time:             Tue 31 Mar 2026 08:04:53 +0000
ROA not before:           Tue 31 Mar 2026 08:04:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6134 (0x17f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7D67406C5BF301674C9394680D7348AEE2C092EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:65:55:c9:b9:30:67:10:a9:be:3f:2e:e7:
                    81:c1:c6:d3:67:08:3d:f1:a3:9f:3b:91:b1:64:78:
                    db:ea:e9:aa:af:00:99:40:64:18:c7:74:62:2e:2e:
                    b2:f5:79:f0:39:59:3d:92:30:13:3d:ce:95:91:aa:
                    29:f2:ff:eb:4c:ca:e9:44:20:1f:69:89:34:1d:fc:
                    23:d5:d9:bd:01:e4:75:b3:8c:ba:01:27:59:10:72:
                    74:6e:8c:05:02:7d:bb:7b:d6:c0:67:88:7c:ad:58:
                    e8:6a:d2:55:04:7e:db:ff:35:cc:4a:82:2b:21:90:
                    fc:c1:66:51:d8:9c:8d:18:42:bf:cd:8b:29:ab:f5:
                    e1:9b:00:5e:5a:1c:a3:be:72:9e:fd:76:46:6e:96:
                    f8:50:77:3a:69:b0:5b:e6:56:b0:af:24:08:d3:9d:
                    ce:f1:2f:42:91:27:f0:57:3c:f6:76:97:3b:9c:6c:
                    cf:15:a0:fa:f8:c5:c3:dd:6c:4f:90:bf:76:86:ff:
                    e9:db:97:de:cd:48:75:14:26:c4:42:71:1c:09:f2:
                    c7:e2:95:4a:ca:1d:9f:3c:e5:3b:16:e4:19:14:7a:
                    54:7a:21:46:8c:93:9f:57:fa:63:7f:98:10:73:19:
                    1b:5b:73:21:04:d9:c0:91:d3:95:3d:36:36:50:1f:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:67:40:6C:5B:F3:01:67:4C:93:94:68:0D:73:48:AE:E2:C0:92:EE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fWdAbFvzAWdMk5RoDXNIruLAku4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:e9:aa:cb:42:1f:31:d2:7f:da:21:65:20:75:dc:82:b7:dc:
         d3:7e:6a:56:13:61:82:b7:c1:ea:89:6f:1e:97:57:8a:2f:cf:
         c6:1a:e7:2f:55:89:f8:81:4e:a6:6e:39:e4:d0:bb:72:a2:a9:
         0d:9c:59:43:f7:0d:69:29:58:43:58:62:bb:c1:cf:8d:e4:43:
         06:47:27:83:13:bc:1d:72:40:30:d4:52:0f:3b:51:b3:ad:05:
         ef:bd:bf:03:40:8a:52:e0:05:9c:14:29:3b:25:cd:bf:ae:e7:
         09:4e:75:e9:c7:9d:88:16:a6:e5:bb:6b:d6:92:ec:56:b0:6c:
         ed:fc:da:23:cb:f9:92:c8:f9:d0:f5:3c:6c:21:9a:cf:ad:8d:
         89:18:b6:e3:0f:3d:31:5c:d8:bb:98:a5:5f:cd:12:1d:6f:1a:
         bd:8a:e3:03:da:e8:15:d8:38:fb:fa:4a:cc:ce:c0:e0:dc:e0:
         4b:53:02:4a:b4:d6:9d:ae:f1:11:98:e5:a9:46:ca:53:3b:e0:
         e0:7f:5b:08:5e:34:bf:1b:03:11:bb:c3:43:f5:43:c5:4f:5a:
         5f:39:67:69:38:0f:97:f3:d9:53:e9:cd:92:11:1a:84:4a:4e:
         7b:56:dc:be:07:57:c4:ef:ce:54:d8:50:c4:3d:1e:88:01:aa:
         05:81:3a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:52 2026 by rpki-client