Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ixtoJDZocu4DRqParO3HxZfzsIA.roa
File:                     ixtoJDZocu4DRqParO3HxZfzsIA.roa (raw, json)
Hash identifier:          4FmOcwAB56bKYqy/Xou+UD6554YYEJxWuo/a2/Ozk34=
Subject key identifier:   8B:1B:68:24:36:68:72:EE:03:46:A3:DA:AC:ED:C7:C5:97:F3:B0:80
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1060
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ixtoJDZocu4DRqParO3HxZfzsIA.roa
Signing time:             Sun 01 Feb 2026 01:32:50 +0000
ROA not before:           Sun 01 Feb 2026 01:32:50 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4192 (0x1060)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb  1 01:32:50 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=8B1B6824366872EE0346A3DAACEDC7C597F3B080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:56:98:36:23:39:ab:7b:06:98:e2:6c:fa:
                    ea:5b:9a:aa:a0:fa:dd:ad:e6:4f:70:f3:25:c7:a8:
                    e7:54:5f:f3:b5:98:65:11:c6:b7:1f:ea:b0:41:37:
                    84:12:fb:bc:9d:e3:b3:a4:78:03:05:d7:74:e8:e7:
                    11:cd:ad:be:a2:c4:dd:1f:a8:30:aa:5f:8d:cf:b4:
                    78:a3:34:61:27:4a:81:2e:da:26:f7:e6:cc:80:bf:
                    3f:fa:e7:e2:e0:a6:ac:6a:67:a6:71:7e:06:c0:76:
                    c4:e0:b2:e5:fb:65:43:34:10:94:05:5a:85:86:51:
                    3c:92:c9:fd:42:3e:93:98:f6:0f:39:aa:72:7a:13:
                    84:6d:f5:2b:ca:44:1b:0f:ed:42:8a:08:c8:a3:e4:
                    6e:2b:45:7e:11:71:dd:d0:65:00:5f:45:0c:18:e6:
                    09:4d:af:48:7a:a5:ec:d5:cd:e2:06:a7:92:8b:55:
                    64:4e:28:22:5d:1b:fc:60:92:67:7e:4c:c3:56:ab:
                    64:57:ec:a5:e8:6b:db:20:6a:e2:d7:51:01:16:7f:
                    2d:d7:9a:87:4b:8d:68:ea:bc:12:60:28:2c:09:a1:
                    d1:a2:5d:1b:99:c3:e4:4e:10:d7:a3:14:03:fa:9e:
                    f4:72:c8:27:2c:e4:f0:f9:f5:66:a7:a3:d5:a2:82:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1B:68:24:36:68:72:EE:03:46:A3:DA:AC:ED:C7:C5:97:F3:B0:80
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ixtoJDZocu4DRqParO3HxZfzsIA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:e1:0d:d5:f0:5a:8d:fd:f6:a2:2a:82:0c:77:b0:cc:95:96:
         c2:25:f7:61:23:f6:6d:df:a9:e9:7a:87:0d:e7:ce:fa:6b:c1:
         38:1d:09:41:11:08:0c:bd:ff:d2:e2:c6:f6:3b:64:39:39:35:
         89:bd:91:2a:c2:84:c6:d7:76:7e:d7:6f:d8:18:2d:f4:79:d1:
         11:b0:69:11:2e:9f:39:ff:4f:72:d2:5d:a7:42:42:c5:68:32:
         ba:0f:b1:47:15:8e:85:ca:12:c1:55:a6:71:ce:cf:7b:0c:36:
         6d:58:48:a2:6e:0a:32:2b:9c:7b:27:09:31:7e:23:22:f6:2c:
         ae:1e:6f:6f:48:19:54:97:53:0a:6c:6f:17:71:57:33:87:4d:
         d3:db:26:ac:ff:a5:42:1a:45:de:37:54:92:03:13:65:2d:a4:
         fb:44:75:50:4a:5f:58:5b:b3:98:ca:a8:d5:43:7c:2c:a3:b0:
         19:78:33:c8:78:0e:a9:e1:aa:c4:23:61:29:04:13:49:41:e0:
         da:6d:2a:d4:34:21:51:02:42:56:3d:00:b8:a2:8f:84:87:03:
         14:6a:5c:bc:e3:d2:30:f6:a3:8d:8e:82:2d:24:0d:08:48:43:
         e0:68:13:69:29:b8:53:e3:80:f9:43:14:bb:bc:6c:e4:d3:08:
         20:4d:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:05 2026 by rpki-client