Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0oYctFgXgkyUY7_EwJMz2yiVF4U.roa
File:                     0oYctFgXgkyUY7_EwJMz2yiVF4U.roa (raw, json)
Hash identifier:          zFAyqSvWE7k1cF2FsSST4nwOHG13xLgfstxp2kSR36Q=
Subject key identifier:   D2:86:1C:B4:58:17:82:4C:94:63:BF:C4:C0:93:33:DB:28:95:17:85
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17EB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0oYctFgXgkyUY7_EwJMz2yiVF4U.roa
Signing time:             Tue 31 Mar 2026 08:04:48 +0000
ROA not before:           Tue 31 Mar 2026 08:04:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.74.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6123 (0x17eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D2861CB45817824C9463BFC4C09333DB28951785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:36:6f:c7:e0:3b:bb:63:c0:8b:bc:3f:88:
                    b3:ba:cb:75:5d:43:8a:1f:28:e2:e1:91:13:df:8b:
                    5d:09:12:a4:cb:78:d4:9e:94:b1:f4:53:1b:ec:1d:
                    ff:c7:79:10:76:a2:92:28:62:63:84:af:f7:fa:b4:
                    0a:df:c0:79:bd:7b:be:27:4d:37:c0:85:c9:05:25:
                    82:83:15:07:33:43:50:aa:3c:4c:d1:0c:3c:43:da:
                    6b:64:34:95:81:f5:12:5b:be:b5:fd:29:d7:3f:36:
                    8b:18:23:d8:cc:a1:1f:2e:aa:2c:eb:a1:28:fd:56:
                    55:1f:91:53:0b:3e:cc:d4:e2:8b:0e:b8:04:e6:fb:
                    af:5b:5e:4d:6e:e4:30:b9:6a:83:da:20:a4:7f:ac:
                    d2:78:8d:9f:1e:d0:60:1b:34:71:34:47:f0:78:13:
                    8a:83:92:a0:e5:ce:5f:9a:46:be:53:3c:8a:17:4f:
                    b1:77:b3:23:04:94:94:b7:33:7c:20:95:00:12:cc:
                    63:33:e2:9d:9d:1f:18:86:49:2b:fc:66:b1:cf:a6:
                    85:87:e0:58:6a:7c:88:c3:0d:be:3b:c8:c9:e9:e4:
                    b4:52:cb:63:31:ad:b4:35:6c:5f:24:da:8d:1a:b2:
                    6f:86:91:67:40:f2:ea:e8:97:ec:d4:fd:4a:2a:10:
                    bf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:86:1C:B4:58:17:82:4C:94:63:BF:C4:C0:93:33:DB:28:95:17:85
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0oYctFgXgkyUY7_EwJMz2yiVF4U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e4:8c:94:fc:be:8b:9b:27:60:14:c5:27:d8:72:d3:c5:0c:44:
         b6:82:5f:40:97:f0:d5:74:19:e4:b8:95:04:90:45:4f:6f:0d:
         85:67:8f:bf:4b:89:40:b5:9b:36:30:b7:30:78:0b:1b:28:76:
         35:df:1b:32:03:49:68:3c:ed:ae:fc:95:f3:51:9e:71:e8:f0:
         fa:b6:4e:02:2c:88:da:82:9f:e3:2d:f6:07:56:86:a0:49:cf:
         1d:9f:c3:8e:86:7e:55:86:df:ad:91:6d:4b:fc:8f:ca:77:ca:
         74:d1:c1:85:52:6d:2b:91:7b:71:5c:17:b2:ea:40:d2:14:c7:
         69:ad:47:6a:2d:3f:c1:2b:74:6e:47:ad:87:1a:a3:d4:ac:ad:
         fa:b6:e8:b8:74:c5:7d:29:6a:f3:ab:39:ba:03:f6:fc:ba:b5:
         ef:42:ef:28:1b:df:fd:c8:fe:45:c4:04:f2:96:c2:ae:8f:dc:
         f1:c9:c4:a5:bc:3c:ce:86:03:99:e5:11:dd:e0:70:5d:43:bb:
         c9:5d:79:1b:9f:83:58:67:e2:55:ea:d7:6c:bf:3b:9e:de:5b:
         8e:b8:17:4f:8a:bd:a7:66:93:3a:e8:41:4a:3a:04:8e:2a:da:
         90:7b:26:30:af:8d:fb:cb:41:97:e4:70:92:3b:36:04:0f:5c:
         0c:a2:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:57 2026 by rpki-client