Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-9GTnhKFwV8ZkZHVNrQumQcwUWg.roa
File:                     -9GTnhKFwV8ZkZHVNrQumQcwUWg.roa (raw, json)
Hash identifier:          YeXfJDRPLM0VAKVQKn32W++1XXUYMZvOCAVC4IoQvcA=
Subject key identifier:   FB:D1:93:9E:12:85:C1:5F:19:91:91:D5:36:B4:2E:99:07:30:51:68
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1498
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-9GTnhKFwV8ZkZHVNrQumQcwUWg.roa
Signing time:             Tue 31 Mar 2026 07:57:51 +0000
ROA not before:           Tue 31 Mar 2026 07:57:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5272 (0x1498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FBD1939E1285C15F199191D536B42E9907305168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:3a:28:48:c6:99:80:72:b9:b6:fd:4d:1d:
                    cf:25:af:0c:ca:b5:c2:74:c9:54:1d:bd:af:bd:5a:
                    2c:b5:63:79:7b:1a:34:d1:f3:a1:11:88:b5:a2:ed:
                    f4:24:8a:49:d8:37:f9:46:a8:f6:d3:02:fd:94:79:
                    ca:5b:b0:50:2a:28:c6:55:39:05:7a:2c:8c:6e:27:
                    f8:51:62:b9:1e:dd:1b:28:bd:fa:32:8c:c6:24:23:
                    63:a7:01:3e:9e:58:cd:1f:60:eb:8a:c0:6c:06:88:
                    cf:8f:a1:a5:94:e7:07:2c:a1:1d:bf:ab:ea:91:f5:
                    25:dc:24:61:07:99:58:4c:65:c3:75:ca:80:be:02:
                    10:ba:3e:e4:2e:55:93:ee:52:47:f5:07:1a:0e:11:
                    b9:1a:d4:a0:2b:f1:12:c0:8b:01:d8:58:5c:0c:42:
                    c5:d6:7f:7a:37:06:01:e0:b6:d8:ef:37:e0:db:06:
                    58:7a:23:34:ea:8b:50:33:5a:84:21:42:97:ac:57:
                    15:07:b4:f0:4e:67:1a:ab:e2:fc:ed:2a:90:4d:fc:
                    88:dd:c6:e7:53:a3:ac:f8:d7:b3:46:2d:a6:5b:fd:
                    45:5a:bb:c9:c8:65:c3:88:2e:98:57:72:5c:3d:90:
                    3f:ca:d2:57:3e:7d:05:53:5d:e0:3b:86:be:9f:12:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D1:93:9E:12:85:C1:5F:19:91:91:D5:36:B4:2E:99:07:30:51:68
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-9GTnhKFwV8ZkZHVNrQumQcwUWg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:54:84:a5:87:83:b5:a5:26:d2:b4:ed:dd:f3:63:b2:19:e8:
         a3:22:3d:97:b1:6c:c9:c9:cc:d2:a4:31:42:e5:eb:0e:00:bd:
         9c:01:b1:c4:ab:35:fd:cd:8a:d5:57:c5:aa:9f:6a:c0:06:d0:
         64:11:36:59:36:b8:3e:57:5d:d2:81:c1:7b:14:e8:8e:bc:21:
         5d:90:67:1b:96:24:89:f8:cf:17:b2:bc:63:16:04:79:97:ea:
         87:bb:39:f4:7a:40:d2:cd:8a:d1:c0:61:e6:a7:e3:63:38:5e:
         59:88:c4:b5:43:e1:92:71:7a:9f:cb:a6:c6:70:b3:d7:41:69:
         bd:93:70:79:4a:80:1a:8b:ac:07:13:73:dd:b9:e5:b7:b7:c0:
         db:c8:5d:c4:0a:a7:b1:0b:3d:31:27:04:b4:64:bb:f9:a8:7a:
         12:40:e6:72:05:d1:9d:98:28:f5:8f:41:4e:a9:5d:18:c1:3f:
         4d:68:fa:14:02:11:48:42:59:9b:b5:e4:2a:68:64:77:28:9d:
         bc:c4:b4:c2:9b:d7:f0:06:d9:c3:00:2f:06:0d:55:8a:5e:1a:
         0b:74:6a:32:16:de:65:40:21:5c:98:31:82:64:58:08:ef:43:
         60:b7:ad:4f:f0:31:1d:e7:59:24:2f:97:a6:84:b4:ef:93:f9:
         07:26:2a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:08 2026 by rpki-client