Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3cE3LcUFsGok4hhyiRPNMO3v0IY.roa
File:                     3cE3LcUFsGok4hhyiRPNMO3v0IY.roa (raw, json)
Hash identifier:          J/dIx1yxJDPST5+l/bovqLR0o12mZuSZ3LsDtAQtfo8=
Subject key identifier:   DD:C1:37:2D:C5:05:B0:6A:24:E2:18:72:89:13:CD:30:ED:EF:D0:86
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       137F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3cE3LcUFsGok4hhyiRPNMO3v0IY.roa
Signing time:             Tue 31 Mar 2026 07:55:41 +0000
ROA not before:           Tue 31 Mar 2026 07:55:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4991 (0x137f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DDC1372DC505B06A24E218728913CD30EDEFD086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:46:10:6f:c2:06:8f:84:f8:6b:f6:75:d3:
                    ea:9b:1c:71:c7:69:d1:e2:78:23:7e:ac:90:88:89:
                    c8:b4:f8:21:3a:4d:82:9a:f5:d0:9f:54:e2:7e:7a:
                    f7:d6:5f:48:98:2f:11:6f:a9:dd:c9:25:25:9a:36:
                    ac:8a:5a:b2:3d:4f:1e:a7:67:e8:5e:db:74:a0:3a:
                    f1:33:a0:ae:e8:be:93:87:d1:9c:ce:77:71:d3:76:
                    40:cb:96:59:95:74:1c:53:a8:57:d8:90:dc:39:f9:
                    f6:fb:c9:50:fa:88:eb:00:a6:0d:0e:55:39:a9:e7:
                    ca:47:8e:d5:df:41:e5:f1:ce:3b:4e:ab:d2:d5:d8:
                    1a:51:8a:c8:67:f9:32:f1:4f:c0:81:f7:e4:ff:b3:
                    63:b9:6c:cb:3a:86:56:f6:6f:0a:64:59:96:c5:07:
                    2b:2f:b7:3e:cb:34:10:c2:e0:f6:50:bb:02:88:08:
                    20:ab:b7:ae:34:91:6f:ff:58:2f:bc:b1:78:6d:6b:
                    97:a4:57:4d:59:ce:2b:cb:79:2a:48:16:05:6a:53:
                    25:15:36:f1:54:43:74:9d:c7:87:ae:e9:76:a2:b6:
                    b5:50:d5:ef:92:66:37:bd:8a:ba:3b:39:07:71:53:
                    23:d2:c0:ef:99:45:a7:5f:31:a8:bd:e6:17:16:c6:
                    87:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C1:37:2D:C5:05:B0:6A:24:E2:18:72:89:13:CD:30:ED:EF:D0:86
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3cE3LcUFsGok4hhyiRPNMO3v0IY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:1a:3f:14:8a:f1:e2:83:5f:6b:43:bc:39:4c:b9:8f:4d:23:
         44:19:62:04:b5:0e:bc:4b:08:09:ba:6c:47:b0:db:29:7e:f6:
         68:8e:4e:81:55:43:62:f7:cd:fb:4a:f2:ac:06:93:7f:46:9c:
         a6:e8:ed:5a:5f:5b:ae:92:7f:6b:b8:ca:b4:7d:57:04:78:ca:
         b2:59:d7:76:c2:ab:d1:0a:3a:ae:16:b5:8f:eb:42:80:d0:31:
         4b:23:78:e1:11:de:57:a1:96:97:3f:38:b5:d4:14:f4:67:8d:
         3e:4e:f8:af:b7:60:18:6f:cf:29:3b:87:0b:4a:3f:b0:cd:17:
         76:c1:c7:93:f0:70:15:69:d8:6a:07:0c:87:81:7f:29:2c:a6:
         34:11:d5:26:93:45:a1:98:24:01:70:37:c3:69:81:85:4a:55:
         97:5e:13:20:fe:17:e2:59:4e:d1:0a:16:53:9c:8a:1d:c6:5b:
         ca:2e:08:6c:a2:f7:af:6c:f7:b0:a6:a1:e1:cc:17:5c:a5:d0:
         45:40:a7:59:5a:5c:62:ae:49:b1:15:1b:50:e2:ea:23:5c:ae:
         67:ed:bd:4e:2d:c6:04:f9:27:01:2f:50:19:e3:81:94:d9:63:
         43:18:87:07:1a:c2:ca:9b:34:c9:94:89:b8:6f:0c:2a:f0:ec:
         cf:e3:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:39 2026 by rpki-client