Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/708ylTfoJ12JbcNWKEnI5fVHG9w.roa
File:                     708ylTfoJ12JbcNWKEnI5fVHG9w.roa (raw, json)
Hash identifier:          zbeNO6iEwc+hIA0BcTcwrydZ4uQX6mt3I10+5q4Ifes=
Subject key identifier:   EF:4F:32:95:37:E8:27:5D:89:6D:C3:56:28:49:C8:E5:F5:47:1B:DC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1526
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/708ylTfoJ12JbcNWKEnI5fVHG9w.roa
Signing time:             Tue 31 Mar 2026 07:59:01 +0000
ROA not before:           Tue 31 Mar 2026 07:59:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.76.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5414 (0x1526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EF4F329537E8275D896DC3562849C8E5F5471BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:13:04:a5:c9:24:7a:c1:e9:69:88:51:87:
                    35:4f:a9:a5:7d:64:f5:5c:76:31:bd:09:86:b9:00:
                    f6:05:ac:28:22:af:3a:7d:37:0e:d4:cd:ab:22:b2:
                    51:d7:05:34:a2:bc:8d:b1:fa:68:f8:28:ba:40:d6:
                    d2:ad:60:11:45:89:f8:73:fa:98:02:76:a5:b4:52:
                    79:d8:09:b8:21:88:19:f1:57:a8:36:2a:a2:eb:36:
                    bd:b8:41:94:b4:29:51:77:07:cc:4c:2d:65:84:62:
                    30:e6:cd:ad:7c:4e:24:1a:cc:4d:0a:2f:10:1d:88:
                    1f:4e:6f:f5:fa:23:0c:9d:af:f6:1c:69:a8:56:39:
                    65:6e:0c:4e:97:c7:2e:04:86:a8:c2:00:87:8a:8e:
                    e9:eb:37:09:19:83:34:1d:0b:c9:45:05:6d:01:6d:
                    54:7c:76:dd:83:46:e8:ba:0c:85:84:07:ab:6d:67:
                    05:44:90:db:6b:ad:86:74:00:e5:b8:dc:d1:7b:e4:
                    c1:2f:af:d2:04:55:3c:71:d5:7b:a0:e3:36:09:85:
                    18:66:7a:72:dd:26:98:97:aa:b5:a0:99:45:b8:09:
                    71:62:55:ce:73:35:6d:d3:7a:97:06:5e:02:4f:9a:
                    e6:7b:04:70:d3:24:9c:6d:46:2b:1c:e7:b2:dc:c7:
                    ad:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4F:32:95:37:E8:27:5D:89:6D:C3:56:28:49:C8:E5:F5:47:1B:DC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/708ylTfoJ12JbcNWKEnI5fVHG9w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:51:b1:a4:64:29:a3:61:10:3b:9a:60:a0:6f:5e:27:80:5a:
         e0:f9:24:08:7d:0e:9f:ce:40:75:e3:f6:62:e8:61:4f:0c:44:
         8e:01:45:89:95:e1:83:12:63:3c:db:ee:f6:78:00:32:29:46:
         33:84:4f:ae:8e:da:58:9f:96:9c:71:93:ef:49:73:29:4e:dc:
         07:de:39:19:b1:9d:9d:3d:8f:c3:13:69:98:fd:47:30:1a:3a:
         ef:60:3b:1a:5b:1c:b9:98:0e:cf:c9:67:97:23:af:51:ed:59:
         f8:ad:c7:b3:a7:eb:b0:4e:9d:79:80:33:c9:ff:44:a8:30:bc:
         3d:e0:5b:ab:36:68:7a:7d:9f:90:f3:81:41:8f:20:cb:df:6d:
         40:22:f9:22:65:de:09:1d:98:a0:55:13:c6:35:40:75:5d:4a:
         41:73:9c:62:33:5c:6c:93:8d:df:90:13:b2:ed:02:5e:d1:43:
         a3:f9:2e:69:47:4b:8d:ed:54:34:39:84:a3:13:13:43:12:e9:
         8d:fa:78:07:14:93:8a:68:0d:d5:43:e3:34:4e:d7:76:1d:f6:
         94:f6:ee:ed:11:40:6b:93:66:83:72:64:5a:03:25:0c:c9:fe:
         35:4b:2f:e7:b1:91:5d:23:a2:f3:15:d8:2c:96:8c:0e:0b:02:
         1c:97:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:26 2026 by rpki-client