Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3opZNEPOksg2S6VKYDZVQRgjA0Q.roa
File:                     3opZNEPOksg2S6VKYDZVQRgjA0Q.roa (raw, json)
Hash identifier:          hP8MTdHU9yAk19lfa6B9spiHZ8NcMQ7+tH2uaC3Ywds=
Subject key identifier:   DE:8A:59:34:43:CE:92:C8:36:4B:A5:4A:60:36:55:41:18:23:03:44
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       B2
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3opZNEPOksg2S6VKYDZVQRgjA0Q.roa
Signing time:             Tue 31 Mar 2026 07:55:21 +0000
ROA not before:           Tue 31 Mar 2026 07:55:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        160.249.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Mar 31 07:55:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DE8A593443CE92C8364BA54A6036554118230344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:a9:52:c2:74:20:11:48:92:0c:92:b3:a2:
                    b5:d4:cf:91:20:8d:64:79:d5:0d:8c:1b:85:a2:d6:
                    07:f5:7d:06:41:4d:b9:9f:2d:cc:6f:5f:af:3d:ff:
                    45:41:52:02:d3:1c:ec:50:8f:77:50:88:5b:63:d7:
                    d0:5d:c7:39:1b:d1:df:20:a6:e5:f0:53:b1:96:c8:
                    56:b3:58:ec:ce:96:e9:bb:92:1a:3f:bd:c4:c9:02:
                    6b:9a:90:69:a0:b3:2a:7e:21:38:62:2f:0e:0e:36:
                    5d:b0:4f:71:ce:e5:54:dd:09:11:f8:ff:ec:d1:3f:
                    35:8a:f8:1f:c9:90:c1:cc:e0:68:6f:35:71:af:dc:
                    45:81:b6:72:e1:d1:9c:e2:69:03:28:14:07:c3:9a:
                    44:a6:5f:70:9a:fc:93:6a:82:fb:32:5a:6c:52:2d:
                    c3:44:65:fc:97:01:f6:1e:c1:ed:6e:ce:95:55:df:
                    29:87:fd:7f:35:cc:fd:31:6c:93:eb:af:d0:e0:ab:
                    d9:76:df:08:7a:a2:45:9c:81:63:59:d9:a1:ad:3f:
                    38:9c:c2:2d:2c:0d:d0:cf:8f:a2:9d:2f:d6:c0:95:
                    07:49:27:b8:1c:86:1e:25:1c:b0:63:04:bb:f5:23:
                    96:05:10:b5:bb:b4:d3:b2:2a:e9:a3:4c:b6:b2:81:
                    f5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8A:59:34:43:CE:92:C8:36:4B:A5:4A:60:36:55:41:18:23:03:44
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3opZNEPOksg2S6VKYDZVQRgjA0Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.249.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:81:32:d1:9c:65:fa:d2:76:7a:a2:1f:ca:7c:57:25:22:8b:
         42:ab:e1:2a:5c:13:0d:c8:55:04:28:fb:e6:cb:97:7a:14:e5:
         7a:a3:06:b1:77:c7:ba:11:64:c3:7b:cf:d8:f6:11:65:6a:9b:
         bb:e0:44:aa:8a:4a:fa:6e:43:69:ea:b9:c6:6c:64:22:0a:32:
         42:08:7c:c4:27:39:fc:0d:ca:ad:57:63:6d:69:36:b4:a5:40:
         2d:71:59:c0:d0:c3:a2:5b:a5:6f:4a:72:34:7d:79:2a:0d:03:
         20:57:13:77:10:3c:f7:7e:12:6b:57:25:f5:17:c8:f5:90:67:
         4d:db:e5:4d:ff:ba:d0:f3:0b:92:30:c4:ea:80:38:44:de:05:
         8d:27:ab:a5:b8:7e:9c:56:c6:a3:55:49:41:7a:0f:e5:68:76:
         c3:b6:dd:17:7d:9e:2b:b4:13:f0:dc:96:58:25:1f:8e:24:40:
         2e:49:ea:e3:88:1f:f9:e7:b5:08:10:f0:06:bc:1c:53:c7:fb:
         7f:0e:1f:b6:d3:c2:28:f4:bb:96:7d:51:21:b9:c2:de:0b:cf:
         e6:16:e1:72:76:53:68:0f:01:c6:3d:46:2c:36:4f:f3:21:9d:
         62:ce:3e:ed:1f:02:07:7e:06:d0:cc:4f:73:c3:f5:cc:7e:95:
         83:5c:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:30:28 2026 by rpki-client