Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kZFvvb_c7HFguUOBnPDzR6ErD2c.roa
File:                     kZFvvb_c7HFguUOBnPDzR6ErD2c.roa (raw, json)
Hash identifier:          IsClUBJzmyIfNSQWmbaAjnzxB5fxtGwqbVCuaSnDF2g=
Subject key identifier:   91:91:6F:BD:BF:DC:EC:71:60:B9:43:81:9C:F0:F3:47:A1:2B:0F:67
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       143C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kZFvvb_c7HFguUOBnPDzR6ErD2c.roa
Signing time:             Tue 31 Mar 2026 07:57:08 +0000
ROA not before:           Tue 31 Mar 2026 07:57:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5180 (0x143c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=91916FBDBFDCEC7160B943819CF0F347A12B0F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:dd:76:4b:40:88:06:71:d9:85:b0:7f:a1:
                    a1:8a:6a:e2:2a:64:9e:a9:17:8f:d9:d2:df:ae:b3:
                    e4:da:ea:d5:34:ce:86:f4:7c:79:1d:1a:5c:6d:ca:
                    8f:5c:94:b4:7c:ee:60:19:14:ab:52:a4:3f:76:f1:
                    69:28:3a:f2:c0:a7:40:87:bb:54:26:89:13:34:a1:
                    ed:e7:41:c0:56:09:2d:c8:a6:45:d6:76:09:7d:db:
                    05:cf:ff:0d:3e:ac:6f:b7:30:aa:8c:27:0e:0f:eb:
                    8f:42:a7:f5:ec:6b:2e:c9:30:62:f1:73:06:18:66:
                    88:60:f7:d9:fe:b3:4a:f4:40:1a:40:1f:34:2e:4d:
                    80:28:87:68:8b:9e:22:4c:52:94:ff:48:b4:c2:f6:
                    47:e0:a1:9e:44:bf:fd:b0:4c:8f:c6:84:b5:89:78:
                    07:5f:b6:4f:35:1c:51:2b:6b:eb:09:44:a0:f8:cb:
                    e0:0c:73:68:f7:a3:2b:62:e0:44:41:50:3b:b7:74:
                    da:1b:d7:76:b3:0c:f0:fa:1d:6a:22:7d:32:97:11:
                    45:61:d1:67:80:48:0a:e4:d5:35:b8:10:45:ea:a2:
                    2a:42:1b:0a:e7:f5:40:b9:bf:a9:fe:cd:25:b9:f3:
                    ea:31:9a:90:26:d8:62:49:f3:b3:ed:e2:38:b6:80:
                    52:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:91:6F:BD:BF:DC:EC:71:60:B9:43:81:9C:F0:F3:47:A1:2B:0F:67
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kZFvvb_c7HFguUOBnPDzR6ErD2c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:2a:da:ad:d5:af:67:3d:13:30:d3:a9:b2:45:b0:bc:6d:f4:
         20:5c:37:9b:3c:a2:dd:38:50:59:82:21:cd:96:bd:d5:ad:9c:
         b7:3c:33:2e:48:e2:5e:dd:67:9f:0a:ef:53:d8:78:b4:ed:6a:
         10:8e:28:c2:17:4d:1a:52:d2:d5:bb:a9:66:c0:3d:02:a2:72:
         4f:32:b3:b8:80:fb:2f:3f:d0:54:76:9a:a1:0e:6a:6c:f0:fc:
         d3:f8:69:39:a6:73:45:ba:4a:60:1b:5a:fd:b4:d5:8b:9d:d5:
         2f:0d:5e:c2:93:17:d0:18:26:b6:7e:09:78:b5:0a:88:1c:10:
         51:6c:d0:77:91:26:2b:4d:0e:4e:92:b8:61:66:42:8e:a0:65:
         ff:53:a1:9c:9e:6a:ba:99:34:8c:e3:ec:c6:7e:b3:83:47:1a:
         14:fe:95:e7:ae:59:0f:d3:f6:e9:dd:25:3f:51:1c:97:bb:8f:
         1c:9b:28:7b:e0:ce:ff:ac:3a:0c:f4:d1:61:68:4a:b7:1c:ab:
         9c:92:52:5b:ea:f0:d9:a5:df:a4:be:a5:90:bf:af:cb:e0:25:
         79:74:04:3a:60:43:48:97:26:cc:9e:c5:a3:14:23:1a:43:d9:
         36:75:25:a7:66:59:46:46:55:4f:6d:ce:59:ae:ef:86:2b:5a:
         b2:68:e3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:32 2026 by rpki-client