Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4pAcFSYbDwYyjCdMYoZFT1rXfHI.roa
File:                     4pAcFSYbDwYyjCdMYoZFT1rXfHI.roa (raw, json)
Hash identifier:          a9fHubYybmtHR/GKGeYYjNgBBKLjLN7S5YlY6amPBWg=
Subject key identifier:   E2:90:1C:15:26:1B:0F:06:32:8C:27:4C:62:86:45:4F:5A:D7:7C:72
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1640
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4pAcFSYbDwYyjCdMYoZFT1rXfHI.roa
Signing time:             Tue 31 Mar 2026 08:01:27 +0000
ROA not before:           Tue 31 Mar 2026 08:01:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5696 (0x1640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E2901C15261B0F06328C274C6286454F5AD77C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6c:c2:f4:1d:22:83:5b:06:56:ea:f9:c1:af:
                    2d:db:74:f3:53:dd:c6:b8:73:0d:64:5c:da:45:f2:
                    2d:0a:3d:0d:b8:e4:76:12:7d:88:5b:fe:39:6a:54:
                    77:78:6c:dc:c5:0a:fd:91:5e:c1:fb:8c:37:ed:58:
                    c2:29:f1:42:08:c2:a5:d7:a7:7c:6a:2e:ca:f0:76:
                    2c:ab:d5:5b:75:f0:e5:f7:db:92:03:5b:48:1d:36:
                    22:80:86:60:3f:0c:3c:ee:4e:c6:ae:e8:5c:b9:8b:
                    40:85:bc:42:13:d4:95:00:ee:15:4d:28:2f:16:2b:
                    75:5a:c1:b3:96:0b:82:04:11:33:68:d3:68:bd:00:
                    4e:76:32:d1:54:74:30:85:62:e5:53:c3:05:84:11:
                    36:64:c5:fd:59:3b:39:f4:b0:bb:39:ee:18:b4:99:
                    d7:6b:8f:8e:07:04:87:bc:d3:24:6d:78:81:78:50:
                    a2:fc:49:f6:31:e0:55:eb:74:dd:68:b3:d9:d2:96:
                    39:f3:57:ac:79:c4:80:40:6b:47:90:4e:cb:c5:21:
                    3b:bd:f0:3e:fa:9e:b7:3a:e6:47:45:51:a9:28:bc:
                    d5:d3:81:9a:79:cf:c0:21:4f:78:7f:e0:01:54:13:
                    09:24:34:72:90:66:cb:a3:90:73:59:49:a2:5c:e7:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:90:1C:15:26:1B:0F:06:32:8C:27:4C:62:86:45:4F:5A:D7:7C:72
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4pAcFSYbDwYyjCdMYoZFT1rXfHI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:3b:a4:82:60:0c:45:31:10:06:b9:12:66:b7:55:22:3b:e4:
         74:a0:31:cb:ef:01:c9:93:6a:b5:21:66:c8:38:77:7e:6c:e4:
         c2:db:a4:99:fc:56:8e:7f:dc:8a:66:af:61:f5:d9:6b:70:28:
         47:0a:96:8a:68:79:bc:da:59:b7:3f:0b:df:a3:9d:27:f0:14:
         bb:8c:8d:c7:29:f9:e1:19:82:35:a2:06:ee:7f:9a:27:5a:7d:
         37:91:9f:5c:95:8c:7d:d2:63:dc:a9:0f:74:a4:55:7d:6a:52:
         ce:b2:1a:a7:1a:38:9f:eb:2b:39:54:4f:7e:d7:4b:4a:33:e5:
         f2:fc:7b:77:f0:a1:e5:35:51:4f:a6:ff:ea:1b:ad:2b:b6:00:
         35:55:87:12:ee:11:b8:12:1e:59:3c:d0:a6:54:90:4b:45:17:
         e5:40:a2:9f:4c:49:1e:1d:1a:7d:c1:7f:bf:6f:28:33:3c:e8:
         d7:56:54:19:82:24:3b:7c:c3:69:71:cd:0c:dc:66:31:e0:de:
         5d:e7:34:9b:9d:39:eb:b2:90:9d:36:67:4e:dd:c9:1c:0f:bd:
         cb:48:60:18:5b:00:e7:bb:0f:d2:5f:cc:72:eb:af:0e:e9:d0:
         ec:75:6c:ad:bd:52:a5:f1:1b:66:ad:b0:3a:78:10:fd:8f:73:
         4a:f8:2f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:53 2026 by rpki-client