Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3o5nfov_-LcTawivOzgkLJ2Yud4.roa
File:                     3o5nfov_-LcTawivOzgkLJ2Yud4.roa (raw, json)
Hash identifier:          5JV0PLdNOjWUVAVEg6KoQzMGSbzhbRaVk6OuNJfO/Uo=
Subject key identifier:   DE:8E:67:7E:8B:FF:F8:B7:13:6B:08:AF:3B:38:24:2C:9D:98:B9:DE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       150C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3o5nfov_-LcTawivOzgkLJ2Yud4.roa
Signing time:             Tue 31 Mar 2026 07:58:49 +0000
ROA not before:           Tue 31 Mar 2026 07:58:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5388 (0x150c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DE8E677E8BFFF8B7136B08AF3B38242C9D98B9DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:93:e5:65:a0:19:20:83:87:06:88:b8:03:
                    8f:63:a8:e1:16:8d:3d:5a:82:95:b8:42:96:ed:6f:
                    61:6d:19:45:e9:3f:ff:98:ea:c6:bf:ca:07:0e:af:
                    d2:7a:15:20:aa:b4:1b:cf:5e:71:9e:d4:a6:af:20:
                    9d:24:84:cc:cd:d5:79:32:ee:cb:19:d4:32:94:71:
                    47:eb:64:6f:e8:7a:22:0b:28:7c:fb:c2:a6:a1:9e:
                    bc:d8:40:96:0e:8e:86:71:e3:5e:af:3d:ed:8c:d2:
                    ab:3b:c0:71:5f:1e:13:2a:ed:13:6c:c5:d4:c4:8c:
                    5b:da:1a:6b:d5:87:0b:64:8d:3f:f7:22:3e:4d:fc:
                    b0:33:ab:01:0c:fe:95:fe:15:3e:e7:d8:82:9b:e2:
                    c2:3d:4c:d4:11:c9:8c:20:50:b5:61:59:5e:31:c1:
                    91:68:70:bb:e1:91:28:2d:ad:84:df:2e:46:98:fd:
                    00:94:14:23:72:ff:00:b4:2f:34:eb:42:b5:59:d1:
                    c5:4c:57:7c:7b:1a:28:ec:b0:80:02:ad:a9:f5:9a:
                    44:90:58:5c:32:a3:e3:f5:e0:51:9c:61:88:d8:27:
                    4e:c6:7e:11:de:ba:b2:98:34:a5:ff:0e:b7:15:ed:
                    64:bf:ac:66:75:c7:b1:e6:e6:41:30:22:7c:ae:ba:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8E:67:7E:8B:FF:F8:B7:13:6B:08:AF:3B:38:24:2C:9D:98:B9:DE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3o5nfov_-LcTawivOzgkLJ2Yud4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2f:84:4f:ed:c2:76:cd:5b:23:60:09:f4:b1:0f:dc:e9:dd:22:
         1b:83:78:de:42:05:5d:77:26:09:62:6a:02:8f:e5:a9:48:ae:
         ac:a6:10:a0:13:6f:85:e0:05:ff:54:fc:a7:ac:fc:71:90:b4:
         f5:55:44:dc:d9:82:74:9b:8b:82:39:5a:fb:2e:78:20:bb:70:
         17:a5:6b:8d:a9:78:c9:cb:53:a8:19:ee:a5:a6:4a:0c:7f:37:
         fc:6c:84:60:d1:92:55:f1:45:1e:64:0f:ad:f4:76:95:7a:22:
         11:26:70:8d:d6:b3:d4:b7:99:b1:95:cf:97:8f:be:5d:7f:23:
         ea:b1:a8:07:07:1d:0f:81:1f:b6:2a:8f:12:64:25:c9:a1:3d:
         de:d4:07:ef:76:20:ec:d7:a8:7c:81:a1:09:8e:95:f6:4d:e4:
         05:8f:d7:fc:71:50:4b:5a:ee:9f:42:4f:aa:00:31:04:19:55:
         f6:17:e0:70:a3:1f:46:57:42:81:56:ae:9c:95:21:2f:12:3f:
         44:59:50:da:bc:a0:78:de:c8:d1:f4:8c:cd:bd:1e:cd:3b:c1:
         ce:a9:80:af:5c:ae:cd:b0:1a:2f:fd:a3:ea:ec:1d:ce:4c:5f:
         33:c5:dc:07:c9:d6:12:84:c1:82:ed:75:54:11:e9:c4:db:e2:
         3f:d9:2c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:21 2026 by rpki-client