Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w12OFEGYBkwB2tq-oFeGNuBJMf0.roa
File:                     w12OFEGYBkwB2tq-oFeGNuBJMf0.roa (raw, json)
Hash identifier:          yyZQXBu4UAdMl/yq/e4Ecf9Y4XcqVuZpJK+Zylzo66Q=
Subject key identifier:   C3:5D:8E:14:41:98:06:4C:01:DA:DA:BE:A0:57:86:36:E0:49:31:FD
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1723
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w12OFEGYBkwB2tq-oFeGNuBJMf0.roa
Signing time:             Tue 31 Mar 2026 08:03:13 +0000
ROA not before:           Tue 31 Mar 2026 08:03:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5923 (0x1723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C35D8E144198064C01DADABEA0578636E04931FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:b6:16:cb:c5:a4:cc:07:36:ef:cb:9f:c1:
                    6e:07:91:38:4d:72:47:4e:f5:ab:dc:4e:89:bc:b2:
                    08:95:8f:04:c9:ca:d6:6a:49:90:c4:8c:f8:2d:c5:
                    c0:f6:5d:d0:3e:a3:96:af:fa:8b:d5:9e:d3:71:32:
                    f7:5a:68:79:04:58:0a:57:67:eb:11:4c:b6:14:c8:
                    fc:15:9e:8f:77:66:0a:27:0e:79:de:c3:99:7a:bd:
                    0e:d9:ef:ed:19:85:7d:d8:d2:07:17:77:13:21:cd:
                    72:46:6d:9c:0e:19:c9:b0:36:65:11:da:65:2f:47:
                    d8:ce:7e:14:c3:dd:42:1a:3e:98:2b:39:0d:05:2f:
                    e2:e5:4a:f2:2c:9c:6a:5e:0d:bf:72:dc:a3:22:27:
                    37:1b:ab:38:e6:81:44:33:86:5b:a1:87:37:78:fb:
                    53:32:d5:f2:2b:1b:d3:24:57:8a:f8:48:82:a6:e3:
                    14:01:2f:c0:0b:c7:6d:de:27:d9:49:f0:95:c0:9e:
                    45:7a:f4:c7:38:ce:f9:db:da:70:7d:9a:aa:ef:e9:
                    b5:a0:df:7d:58:71:23:50:cc:fe:6b:e3:a4:ef:74:
                    0e:40:1a:e7:62:27:6d:af:64:e9:82:6b:4b:d5:d5:
                    bc:da:fb:c8:6b:af:e4:c1:4f:2c:2d:7d:40:5c:ad:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5D:8E:14:41:98:06:4C:01:DA:DA:BE:A0:57:86:36:E0:49:31:FD
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w12OFEGYBkwB2tq-oFeGNuBJMf0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:c4:84:6e:a3:78:b9:eb:60:2c:1e:0b:6d:d6:e4:80:aa:
         e6:45:e9:7b:15:de:a8:e4:af:7c:78:9d:70:25:40:41:54:de:
         97:bc:b6:04:ae:fa:2f:13:8d:b5:02:32:c7:d2:38:9b:e3:48:
         b6:11:c8:da:4b:97:94:ec:10:1d:81:ae:5e:fb:70:16:54:39:
         ba:d6:cc:6f:79:7d:de:18:16:e2:e3:a6:db:d1:51:2a:f4:be:
         a3:2e:0f:a7:43:57:25:d9:46:5e:4c:46:c9:d1:e7:26:fd:f3:
         40:eb:a3:d3:69:ef:91:58:8e:e8:cc:2c:71:9b:30:e5:d5:16:
         a0:9c:92:a3:12:41:fd:0b:04:64:67:5e:a2:a4:ff:b3:99:f3:
         75:09:61:8c:96:88:34:3e:f6:93:95:80:84:a0:c2:7f:54:61:
         f7:4e:30:70:cb:1d:54:8e:35:36:03:90:b3:bc:84:1c:9a:b4:
         5f:91:23:7c:c0:6e:b6:7d:f2:87:8f:f2:47:f8:36:53:49:23:
         67:69:9b:46:38:dd:b4:ed:38:bb:83:26:a7:f6:bf:2c:18:2c:
         68:e7:05:3b:48:08:bc:e2:3f:43:a2:dc:90:94:b5:47:17:61:
         54:8f:b9:ea:20:dc:7c:41:84:a9:71:65:b5:5b:de:a5:5c:2a:
         e0:ec:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:25:14 2026 by rpki-client