Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0OhsRmVU5I50xQ5zeLpPHu4ypD8.roa
File:                     0OhsRmVU5I50xQ5zeLpPHu4ypD8.roa (raw, json)
Hash identifier:          JiYAEHalzOnXeay0gDDSRGoB9GYeRl7ZSG+/jZXPr3Q=
Subject key identifier:   D0:E8:6C:46:65:54:E4:8E:74:C5:0E:73:78:BA:4F:1E:EE:32:A4:3F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1742
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0OhsRmVU5I50xQ5zeLpPHu4ypD8.roa
Signing time:             Tue 31 Mar 2026 08:03:27 +0000
ROA not before:           Tue 31 Mar 2026 08:03:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5954 (0x1742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D0E86C466554E48E74C50E7378BA4F1EEE32A43F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:55:fd:5f:f4:92:1f:e1:93:6b:a1:46:a1:
                    30:99:0e:7c:8b:0a:92:1c:52:e6:af:cc:9e:8e:ab:
                    a4:cd:a3:7f:ce:7b:5f:4a:9a:78:e3:12:ff:d6:d0:
                    c8:98:e3:bb:05:1e:fe:11:b2:2e:ba:36:2a:9b:ef:
                    6a:20:9a:99:0e:3c:f6:e1:6c:0b:0a:f6:57:e7:2f:
                    8e:b8:51:36:f7:ec:92:ef:31:1b:2a:7a:d4:e1:73:
                    ce:9c:c7:01:7b:66:28:24:15:73:9e:43:2e:c7:44:
                    15:60:a4:0e:af:44:de:11:39:2e:54:df:84:65:38:
                    6b:aa:58:18:69:b5:74:67:c1:77:dc:ac:67:52:de:
                    92:9a:18:91:28:25:78:06:8b:77:16:28:66:c3:3a:
                    80:5a:98:61:e9:8c:2f:59:18:d6:eb:42:8b:50:99:
                    fe:31:d6:2b:89:5d:db:dc:73:dc:e5:e5:54:7e:7d:
                    6c:56:69:90:5c:e4:18:3c:a7:3c:e2:f3:89:3d:65:
                    64:31:54:7f:07:24:e7:65:38:46:04:3b:8b:30:6a:
                    1b:6a:3d:3a:0a:44:73:02:3c:a7:eb:5a:00:e2:91:
                    80:d3:60:b9:cb:8b:3c:40:9a:f1:73:ac:9b:e7:94:
                    be:93:23:15:7b:48:aa:08:52:ff:15:92:2d:08:62:
                    5a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E8:6C:46:65:54:E4:8E:74:C5:0E:73:78:BA:4F:1E:EE:32:A4:3F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0OhsRmVU5I50xQ5zeLpPHu4ypD8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:48:5c:2f:f1:a0:0f:12:92:ce:c3:56:7e:9b:17:f5:5b:ae:
         2f:13:ac:27:f4:77:f9:67:75:71:dd:21:e4:db:1e:93:9c:82:
         d5:48:d4:7b:3a:56:29:7e:c9:37:c8:7e:a8:ce:a7:18:f3:a7:
         47:48:7a:6d:29:e1:ba:44:d2:81:1a:a4:b8:1b:86:fa:b5:e8:
         f6:c3:01:9e:3c:96:ee:2f:6f:96:3b:22:ee:2b:4d:55:c4:87:
         bd:80:4c:fa:a6:ec:c3:6a:a2:dd:5e:e8:24:2f:1e:6b:c0:84:
         8d:f9:d1:71:d5:07:f0:98:67:8b:b2:e5:12:db:f4:22:51:c6:
         0d:91:56:cc:7d:71:10:e6:0e:96:a2:7b:bc:e7:00:c5:91:f9:
         e3:59:dc:68:33:f4:b4:f6:a2:eb:34:c1:5d:40:d5:55:d3:9c:
         65:1f:57:65:25:24:bf:e9:fa:bf:ea:88:f2:a3:b0:0f:e2:4b:
         a8:f0:9e:58:af:6d:dd:62:9e:f2:ad:8a:e6:11:e2:21:00:68:
         43:d7:a1:4f:38:7e:b2:81:67:9e:4f:b3:7d:ef:69:49:6f:b7:
         92:c7:f7:1e:56:34:0e:9d:f1:b7:cc:e4:3c:81:bc:e2:00:61:
         c1:e3:7d:12:06:21:c4:bb:a1:48:bb:87:b2:a5:5a:36:8b:f5:
         9d:ae:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:17 2026 by rpki-client