Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0OZTZy6eVX5oNuToGO1BOM2FlrQ.roa
File:                     0OZTZy6eVX5oNuToGO1BOM2FlrQ.roa (raw, json)
Hash identifier:          LkutX0FMom7FPNNVNXN09UVl3AfMkQQ9whtAu7J+NP4=
Subject key identifier:   D0:E6:53:67:2E:9E:55:7E:68:36:E4:E8:18:ED:41:38:CD:85:96:B4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       105F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0OZTZy6eVX5oNuToGO1BOM2FlrQ.roa
Signing time:             Sun 01 Feb 2026 01:32:49 +0000
ROA not before:           Sun 01 Feb 2026 01:32:49 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4191 (0x105f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb  1 01:32:49 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=D0E653672E9E557E6836E4E818ED4138CD8596B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:46:07:49:f5:0e:93:98:d2:42:a9:78:04:
                    aa:16:46:1c:2c:3a:f4:9b:60:19:20:39:73:28:9f:
                    b9:09:33:35:ad:eb:ef:ff:f3:3a:bd:fe:04:af:45:
                    c3:68:87:6b:ec:ef:fe:45:c1:de:a1:4f:bc:93:43:
                    37:57:ac:5c:e1:ba:4c:94:60:cc:96:45:e3:7b:68:
                    65:7e:fa:30:3e:47:d3:40:0a:b0:81:70:92:4b:31:
                    af:99:74:06:6c:ee:c8:e3:e8:60:61:76:71:67:aa:
                    56:ca:ae:a9:c2:ea:7a:2b:5e:76:f4:6d:99:df:c7:
                    f0:47:73:00:61:26:eb:e5:ef:c0:75:c4:30:b6:b2:
                    63:03:72:cc:80:eb:9e:58:de:31:97:8d:71:03:ec:
                    5a:69:aa:94:f7:ee:2e:39:90:1b:ad:a6:24:ac:51:
                    4e:fa:a0:3d:2b:57:a3:c0:8d:55:8a:26:a4:05:8c:
                    a4:f4:51:a7:f5:f9:2f:6a:10:48:77:68:77:82:02:
                    b1:f3:35:93:00:c8:75:95:8f:8f:bb:84:4d:16:cf:
                    8c:99:89:66:14:20:41:e6:41:0d:4b:1b:c1:fb:59:
                    73:d7:87:74:64:d7:66:46:71:f6:c2:9b:19:97:19:
                    8e:f0:56:82:83:da:9f:fc:ac:db:bd:23:b9:c1:27:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E6:53:67:2E:9E:55:7E:68:36:E4:E8:18:ED:41:38:CD:85:96:B4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0OZTZy6eVX5oNuToGO1BOM2FlrQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:17:7b:47:a8:d5:53:e9:c7:08:ba:e2:06:96:14:b9:00:47:
         3d:ba:2f:f1:18:bd:63:45:9f:11:dc:c6:ce:e1:23:98:b3:2a:
         8d:18:45:07:e2:29:3c:14:1b:19:78:6d:bd:c7:9c:8d:be:4b:
         94:75:6d:ad:79:00:19:79:58:b0:4d:0b:c1:6f:16:36:63:83:
         bf:af:1b:05:57:61:48:13:8e:07:47:3b:71:b8:f3:ca:46:ed:
         ea:33:39:de:e9:6d:7f:5f:7b:97:a0:75:c0:0b:91:b1:51:6f:
         25:59:7b:18:c8:a1:67:43:91:f0:4c:d9:69:f8:88:dc:cc:b7:
         cb:7a:86:7a:98:6c:43:74:f3:75:7e:b2:1f:05:fa:bd:e6:0a:
         ae:f2:a4:8b:8b:b0:17:f7:19:12:31:ab:0e:12:04:88:dc:a0:
         f1:bf:da:8a:91:26:0d:0c:7d:47:29:aa:f7:fc:49:f8:cf:af:
         f5:4d:55:94:b7:42:bc:35:a4:6a:bd:ab:01:fa:5f:09:90:b7:
         50:40:b4:1b:38:0a:b9:41:bf:86:06:2a:db:bf:a5:4f:38:9a:
         bd:c0:8f:db:ca:4d:f9:62:16:aa:1a:1f:fa:d8:e4:bd:a5:b7:
         4b:25:88:ef:6c:cf:2c:23:5c:b5:19:a4:9d:1a:bb:f1:f8:92:
         fc:a4:51:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:58:51 2026 by rpki-client