Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/orNQzeTnfdlr98ZrEfW5zI20d6E.roa
File:                     orNQzeTnfdlr98ZrEfW5zI20d6E.roa (raw, json)
Hash identifier:          1jvfyDC8IwWvCeF4hZvOiI7c7ZEOeS1Jt6/ZosJpaZ8=
Subject key identifier:   A2:B3:50:CD:E4:E7:7D:D9:6B:F7:C6:6B:11:F5:B9:CC:8D:B4:77:A1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1434
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/orNQzeTnfdlr98ZrEfW5zI20d6E.roa
Signing time:             Tue 31 Mar 2026 07:57:05 +0000
ROA not before:           Tue 31 Mar 2026 07:57:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5172 (0x1434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A2B350CDE4E77DD96BF7C66B11F5B9CC8DB477A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:de:b7:e7:30:a1:aa:7e:00:70:91:aa:8e:6e:
                    41:3a:60:bb:3c:86:1c:22:f6:85:0b:db:65:ea:83:
                    46:e5:b5:e3:75:b3:91:f8:f4:bb:e3:0c:3c:36:92:
                    6b:82:a7:b3:8e:7b:3a:76:28:fe:bb:fa:be:84:88:
                    7b:ab:69:fd:65:8a:ba:e8:57:2b:97:0f:18:61:28:
                    37:d1:76:da:c0:1d:ef:06:20:8b:16:ae:47:72:14:
                    15:ac:7b:f1:88:7f:38:96:f2:29:d6:c3:ac:09:4c:
                    53:1d:0e:b3:6f:e6:d7:e9:48:6d:09:38:fb:12:12:
                    e0:64:d8:a0:c3:91:b7:a8:dd:5d:c2:00:5e:62:12:
                    00:b0:40:71:be:af:38:d5:5f:96:85:ce:0f:4b:11:
                    e7:c8:9f:94:a2:9b:1c:e6:b8:d5:d5:80:ee:50:d4:
                    98:2c:02:9e:5e:98:da:ba:a5:42:0b:e3:49:cd:a2:
                    b4:94:67:f0:8f:e2:12:e5:02:f0:f8:30:79:9b:82:
                    e1:4f:4b:10:32:bd:47:8b:00:60:0a:e1:54:59:d1:
                    7b:46:69:59:0f:92:71:51:6e:15:90:d3:18:45:4e:
                    04:5c:1b:b3:bc:c8:49:47:76:46:63:36:ea:dd:de:
                    c2:2d:32:8a:5e:e3:dc:36:ad:f2:e8:09:f7:a5:f1:
                    40:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B3:50:CD:E4:E7:7D:D9:6B:F7:C6:6B:11:F5:B9:CC:8D:B4:77:A1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/orNQzeTnfdlr98ZrEfW5zI20d6E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:0d:58:63:21:92:a9:1e:9d:10:dc:70:36:b5:26:49:08:89:
         6f:d1:78:81:ae:c1:d5:95:2c:69:b2:51:07:e6:47:42:49:e1:
         d3:27:5c:9c:96:46:7e:7e:68:d1:2d:0e:17:6d:99:08:79:75:
         75:71:c5:80:b0:56:d7:4c:80:af:83:8c:b2:99:45:36:94:2e:
         c7:94:51:6e:58:92:96:c8:79:52:dd:17:b5:2d:f3:ad:85:f7:
         89:65:10:c0:21:10:f1:43:43:c8:4f:15:18:01:94:6d:b4:b2:
         2b:eb:16:92:b1:21:5a:7f:a8:f8:38:2b:d5:3e:10:f6:f5:f6:
         b2:46:7b:c9:91:08:73:22:50:cb:9a:50:5f:d3:97:6e:f7:ca:
         a1:6f:37:a2:a3:0f:ed:92:39:90:cc:4b:4c:2d:58:1c:5d:da:
         1e:81:7e:64:82:7f:8a:b2:b0:31:e8:96:90:bb:cc:f1:7d:45:
         eb:4a:98:50:4f:6f:bd:8b:7d:ea:8f:b6:e1:54:51:6e:37:12:
         6b:cc:51:00:30:98:4f:96:ab:33:57:be:02:f0:0e:f3:7b:d0:
         39:b7:2c:20:07:8c:37:4d:1d:4d:d3:f7:42:a6:ae:d7:20:87:
         ed:89:f1:87:1e:5d:74:10:4f:4f:48:d6:81:8b:a7:18:f8:a2:
         5a:d2:c2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:48 2026 by rpki-client