Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-Az6i8RUpmxh9OfUcy-kX0aJqo.roa
File:                     p-Az6i8RUpmxh9OfUcy-kX0aJqo.roa (raw, json)
Hash identifier:          UgHgS24D2MUPVW7R0uIefjohd6tr3HEJF6T77dE/68k=
Subject key identifier:   A7:E0:33:EA:2F:11:52:99:B1:87:D3:9F:51:CC:BE:91:7D:1A:26:AA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14D8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-Az6i8RUpmxh9OfUcy-kX0aJqo.roa
Signing time:             Tue 31 Mar 2026 07:58:24 +0000
ROA not before:           Tue 31 Mar 2026 07:58:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5336 (0x14d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A7E033EA2F115299B187D39F51CCBE917D1A26AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:22:8c:1a:f6:f9:d5:69:39:6a:0e:e9:d0:
                    5d:c3:6e:6f:86:2e:bd:42:48:0e:10:b2:11:8c:04:
                    a0:9c:8a:16:44:10:2f:d7:1e:fc:e7:44:c8:8a:1a:
                    10:fc:78:cf:55:7a:67:e8:bb:39:1f:9f:e7:5a:af:
                    0f:f5:e2:2b:47:ec:a6:9c:b1:07:58:2f:52:e0:7b:
                    47:57:ec:16:e1:32:29:c7:e6:05:4c:46:b5:f8:94:
                    a3:7d:f4:d5:2e:56:09:61:4b:ba:ba:70:2e:38:3b:
                    f9:cb:41:cb:eb:42:72:04:41:f1:ec:b9:55:78:d4:
                    9f:85:3a:7b:b6:5f:70:bf:db:93:39:9f:7a:c0:26:
                    8a:29:f0:af:fe:f2:63:03:7f:65:d1:fa:2b:6f:d0:
                    c3:04:3d:aa:8e:e2:c1:a6:df:38:95:c9:ad:36:cf:
                    34:61:b6:3e:55:7a:39:09:31:ab:c9:24:77:7c:f0:
                    71:ea:39:c1:ea:55:30:fe:26:a4:c6:38:e4:2e:dc:
                    7e:2d:ed:d6:ef:00:43:e5:2d:14:93:ab:c9:6c:90:
                    9d:6e:41:12:c0:60:98:7e:b5:a8:d1:9f:73:6d:19:
                    d3:0d:32:54:93:55:17:00:25:18:7a:35:72:23:95:
                    3a:c0:0f:78:bd:4e:58:03:c1:5c:54:b9:50:90:97:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E0:33:EA:2F:11:52:99:B1:87:D3:9F:51:CC:BE:91:7D:1A:26:AA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-Az6i8RUpmxh9OfUcy-kX0aJqo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:0b:c5:21:50:ed:de:56:4c:8c:d7:2d:0f:c4:d6:23:ba:51:
         a8:b8:d5:6c:71:ed:0a:95:8b:ea:bd:42:3c:58:6a:41:a3:e8:
         1f:86:3d:9a:f6:65:0e:8e:a2:fa:59:d4:d5:a4:f4:b7:58:39:
         ce:8b:37:18:66:1f:df:bf:be:75:9f:02:6e:88:46:52:c3:2c:
         36:22:76:39:92:c4:25:56:4c:28:98:13:a6:96:9b:9a:ff:4b:
         93:43:07:6e:10:57:90:1b:43:19:b2:7a:a9:4d:9c:80:c0:de:
         54:01:7e:e2:3e:f1:70:6a:64:9e:9d:5a:ad:45:ad:e0:a2:2f:
         67:4a:28:35:7e:19:25:2c:85:a0:d5:35:96:5a:26:ad:6e:ad:
         87:00:b9:a5:d3:10:c2:5e:d7:14:13:12:9e:bb:e6:1f:0f:98:
         7f:f3:23:3f:86:cd:4e:44:ef:93:b6:64:c4:ad:11:c4:4c:8a:
         13:6d:53:d6:e5:bf:bd:0c:ba:78:ec:9d:8e:15:1f:61:34:79:
         20:2e:c5:02:71:d1:1c:7b:0d:6a:d3:c8:85:83:f8:af:3b:1b:
         c3:75:c0:97:af:10:77:4b:91:35:94:46:35:41:1f:79:9e:ed:
         c6:b0:38:84:47:d2:08:19:8b:30:f4:d4:99:d5:6a:1b:b1:ae:
         ca:bd:a6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:09 2026 by rpki-client