Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iQ2XZ7JBOn_I4DcrwCdjFGcEZ-Y.roa
File:                     iQ2XZ7JBOn_I4DcrwCdjFGcEZ-Y.roa (raw, json)
Hash identifier:          /++ikx0EFuPJOSrOIG23Aiz8SWTXIT+g+XyTIazZyuA=
Subject key identifier:   89:0D:97:67:B2:41:3A:7F:C8:E0:37:2B:C0:27:63:14:67:04:67:E6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1416
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iQ2XZ7JBOn_I4DcrwCdjFGcEZ-Y.roa
Signing time:             Tue 31 Mar 2026 07:56:50 +0000
ROA not before:           Tue 31 Mar 2026 07:56:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5142 (0x1416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=890D9767B2413A7FC8E0372BC0276314670467E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:34:b1:95:e8:51:fd:7c:49:fc:d9:b9:e6:
                    8f:79:42:78:98:02:b0:8c:fb:c0:8b:da:d2:79:97:
                    cf:4f:fe:9e:67:d5:9b:e0:75:5c:6b:6e:a6:36:ac:
                    fb:2d:7a:42:09:48:b9:72:04:2f:16:00:b3:87:31:
                    5f:b8:24:c2:50:75:0b:14:89:2c:8f:27:ec:0c:08:
                    46:e1:b3:0e:27:db:23:c6:df:d6:4f:56:20:29:60:
                    d0:9b:0e:f8:b1:1a:6c:bb:33:05:4b:09:04:37:ff:
                    65:c5:71:e5:5d:d1:15:81:ca:ac:ed:ac:e9:7b:a2:
                    2d:43:0a:9f:b2:10:c1:11:73:24:98:0b:7e:f9:f6:
                    b3:ef:d9:fe:b1:42:7e:7f:f6:77:91:62:ce:6e:16:
                    3e:71:3d:83:2e:42:d4:88:f9:77:f9:32:0b:ab:1f:
                    61:d8:d1:e4:d0:5f:c7:54:cd:2d:9a:47:3a:89:e5:
                    12:29:8b:5e:15:aa:e3:64:5d:ac:8f:88:66:a9:bf:
                    75:23:33:1d:f0:d1:1d:dd:a1:8b:c1:75:4a:a1:2c:
                    48:74:61:7d:a7:39:0c:25:80:bf:54:cd:b1:d9:f9:
                    5d:f0:e9:32:bf:b0:0a:7a:3a:96:a7:df:7b:94:05:
                    a2:88:96:19:2f:4e:33:cb:2f:1f:eb:8c:d0:6f:03:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0D:97:67:B2:41:3A:7F:C8:E0:37:2B:C0:27:63:14:67:04:67:E6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iQ2XZ7JBOn_I4DcrwCdjFGcEZ-Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:44:22:ae:2e:31:14:ec:63:53:34:0a:1c:4f:d7:4a:52:b2:
         e5:c9:e9:4d:00:cc:de:d3:3b:d5:d4:59:c5:07:c0:98:fe:ed:
         a6:21:7a:25:85:40:25:d9:fc:81:eb:19:46:cb:f9:2d:ac:2c:
         44:fe:3b:d5:6b:f6:4f:c3:08:98:3e:0e:87:8e:87:eb:5f:fd:
         10:54:0f:b9:ab:4a:f0:ef:bb:a6:c2:a8:17:df:7c:2c:7b:f9:
         66:38:56:e8:d3:e0:47:4f:46:8f:aa:23:b1:41:dd:b6:b6:53:
         80:d3:e7:9f:ac:8d:ce:aa:35:91:3c:5a:4b:51:c0:0a:a2:94:
         40:c8:ae:6d:04:1b:ef:e4:0e:8a:f3:7b:7b:ba:5b:c2:09:d9:
         4c:02:77:cc:a3:c3:21:2e:51:e1:53:ac:01:a7:11:c6:14:37:
         77:99:12:65:24:ab:29:a9:ca:e0:81:76:8f:ff:4f:20:27:cd:
         04:bf:17:d2:47:0a:32:f8:9f:35:60:22:ad:1f:e1:51:d4:e6:
         99:39:e0:c8:90:95:34:29:fd:12:97:16:fa:9a:5b:09:09:6a:
         3b:f6:71:c0:fc:33:fa:1a:e8:eb:e4:35:9b:7b:37:f9:09:27:
         aa:fa:2a:44:aa:16:3c:27:1a:dc:c1:4c:97:02:10:b2:be:19:
         c2:d7:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:54 2026 by rpki-client