Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/02ll6ZU9MK_KeIZoMSRM9tNdZTQ.roa
File:                     02ll6ZU9MK_KeIZoMSRM9tNdZTQ.roa (raw, json)
Hash identifier:          RyX4HGRv8vdVs01Dycq0a2g8hLtKQm4ds06cPZQvXdE=
Subject key identifier:   D3:69:65:E9:95:3D:30:AF:CA:78:86:68:31:24:4C:F6:D3:5D:65:34
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1781
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/02ll6ZU9MK_KeIZoMSRM9tNdZTQ.roa
Signing time:             Tue 31 Mar 2026 08:03:57 +0000
ROA not before:           Tue 31 Mar 2026 08:03:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.159.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6017 (0x1781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D36965E9953D30AFCA78866831244CF6D35D6534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:a4:85:44:2d:53:53:e2:16:cf:34:cb:9e:
                    93:e8:2b:83:b1:7e:f9:b6:05:56:6c:dc:d7:32:5c:
                    90:ec:e6:58:c9:14:e2:7e:b1:01:5e:7d:61:dd:16:
                    48:ba:22:21:ef:a0:78:3a:ff:6e:53:55:ac:3e:0e:
                    73:b6:cf:74:87:46:26:61:f0:81:20:e5:47:c7:37:
                    f8:9b:9a:63:d6:45:53:72:fb:18:ab:15:27:89:47:
                    2e:f9:11:d0:c6:78:cf:38:52:f5:e4:a4:3a:4f:41:
                    17:20:4e:82:2a:f3:08:bf:0d:c9:33:3a:37:4b:f4:
                    16:08:d5:09:59:69:2f:5b:82:ad:4d:ca:fe:ee:1c:
                    32:b1:e2:42:f8:3f:da:74:66:50:4e:a0:e0:5f:07:
                    e9:87:6d:27:12:1f:95:64:2e:c2:48:67:a0:de:ae:
                    df:f2:f0:a7:b3:59:41:66:03:91:30:7b:71:83:a0:
                    0e:58:33:8a:84:b5:85:17:89:a8:ca:4a:a6:26:25:
                    fd:ab:2d:f8:41:47:00:d6:37:5f:99:88:aa:06:2c:
                    99:ca:2c:13:81:50:b6:a5:3b:a8:1d:9f:fc:94:e1:
                    88:ca:7f:1f:57:22:e7:ea:03:8e:b9:f3:4f:d1:17:
                    9a:dc:8e:d0:a7:da:12:9a:30:8c:43:73:06:5e:eb:
                    66:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:69:65:E9:95:3D:30:AF:CA:78:86:68:31:24:4C:F6:D3:5D:65:34
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/02ll6ZU9MK_KeIZoMSRM9tNdZTQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0e:40:91:62:3e:45:84:1d:28:29:50:9f:fb:46:f9:a7:c0:ab:
         ad:54:37:dd:b5:8c:71:bd:5f:a1:ca:c5:5c:39:59:2e:f4:52:
         43:da:87:6f:bc:37:8a:41:80:e2:88:27:77:08:3e:3e:31:63:
         5c:13:58:c6:3d:cd:7f:db:3f:b5:5c:ee:a3:f1:2c:2c:45:ae:
         e9:cf:5c:fd:54:fd:c8:ed:e8:52:c0:a6:0f:aa:eb:e1:d3:52:
         4c:a4:aa:cf:ff:8e:db:2b:45:4c:ca:af:a2:58:28:2a:91:92:
         e5:9c:0f:c4:49:3c:55:da:2d:21:98:a2:aa:7e:84:5f:5b:1a:
         d8:ca:28:1e:10:5c:45:08:df:c9:e1:b3:fb:27:e6:01:6e:b5:
         aa:33:1e:ea:ba:ac:70:ec:a0:23:b4:98:33:38:a3:a7:17:e8:
         b7:20:3d:22:0d:7b:d0:b2:27:c8:01:7d:eb:97:9f:4f:17:5f:
         a2:0c:ed:ea:c9:99:5c:29:87:9b:77:a3:80:03:77:89:7b:2b:
         29:ef:00:60:1b:78:95:82:a6:f8:85:e5:89:dc:76:13:98:d0:
         08:40:9a:e4:e9:7f:9f:3d:03:83:ae:60:fd:b9:59:dd:3b:ed:
         2d:80:96:b9:b0:4f:b6:b5:5e:9b:a4:74:1f:6d:22:44:00:a4:
         22:a8:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:39 2026 by rpki-client