Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7VqDVCHhJI4belMHj4MQBtWTwVQ.roa
File:                     7VqDVCHhJI4belMHj4MQBtWTwVQ.roa (raw, json)
Hash identifier:          iXMuxbQeCjMyIkDW87I/7Y6fN61aLldo8JTycGpm6UE=
Subject key identifier:   ED:5A:83:54:21:E1:24:8E:1B:7A:53:07:8F:83:10:06:D5:93:C1:54
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17B3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7VqDVCHhJI4belMHj4MQBtWTwVQ.roa
Signing time:             Tue 31 Mar 2026 08:04:21 +0000
ROA not before:           Tue 31 Mar 2026 08:04:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.122.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6067 (0x17b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ED5A835421E1248E1B7A53078F831006D593C154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:8a:3c:88:2d:9e:5a:77:12:08:50:de:a9:
                    b8:9a:9d:28:70:66:c6:3e:c4:ea:d5:02:b3:72:ec:
                    c1:e1:a1:a0:1a:02:4c:7b:f6:54:e6:5f:0f:fc:4f:
                    2d:ab:c1:74:0d:1c:03:f9:9b:23:df:b6:24:34:6b:
                    e1:bd:1c:35:fb:33:94:fd:1c:fc:df:e5:63:56:2d:
                    e9:4f:fc:8e:b3:53:69:22:b3:59:68:df:81:c9:8a:
                    6b:ae:58:dc:18:ad:3f:ff:56:ad:48:aa:4e:38:22:
                    cc:d1:ac:ad:09:63:e7:74:47:ad:77:9e:ea:c8:4f:
                    f3:c7:36:ea:7d:65:64:a2:fa:87:d6:24:c4:56:09:
                    d3:e4:ed:2e:58:e4:91:86:01:e5:52:ec:6d:f3:ea:
                    0d:02:55:c2:96:12:60:9b:af:d6:54:cb:94:ac:9b:
                    29:d3:c8:4c:79:9d:00:7b:28:0e:9f:ff:52:24:1a:
                    67:3e:96:13:0d:4d:a7:45:c9:68:19:85:00:ea:b7:
                    33:c8:ce:69:84:4f:12:13:d1:17:58:71:8c:05:8e:
                    73:8b:d2:27:e8:f5:62:4f:62:0e:ae:b1:68:de:0c:
                    9a:41:83:23:d5:0f:fd:10:79:bf:45:35:69:01:3a:
                    65:b2:aa:5f:d7:a1:b8:43:37:82:7f:fa:81:b6:63:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5A:83:54:21:E1:24:8E:1B:7A:53:07:8F:83:10:06:D5:93:C1:54
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7VqDVCHhJI4belMHj4MQBtWTwVQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e5:2d:2a:7a:b8:12:58:77:82:a7:06:d0:23:08:7d:52:01:85:
         65:0d:45:58:1c:a6:48:31:fa:91:91:78:a6:4b:29:8c:ef:12:
         61:51:09:89:08:3f:8e:bd:cc:9e:42:51:f3:f4:a0:cf:d0:ec:
         8d:ca:02:63:9e:63:18:5b:6c:f8:e5:19:14:31:8a:3e:31:71:
         cd:7e:01:56:8e:72:d4:7d:ad:57:67:9f:9d:2c:2f:98:d1:98:
         06:a4:21:14:db:1d:52:96:1b:b7:c6:cd:e3:a8:76:98:94:da:
         93:2a:30:00:6a:30:aa:2c:03:62:52:37:e3:eb:c1:29:da:0a:
         b8:00:31:ae:3f:6e:12:cb:ba:3d:46:d6:46:32:c4:c7:91:8c:
         41:04:72:ae:86:3e:27:3e:3b:a4:32:7d:98:73:12:e1:98:25:
         88:64:e9:d2:9c:95:e4:0f:55:65:10:18:43:b5:30:00:20:ec:
         2b:95:ec:f4:6b:76:3f:da:80:ea:da:c7:bd:62:86:1c:35:ea:
         e0:a0:27:ab:5f:bc:13:03:35:f1:c1:66:77:5b:5f:82:26:0d:
         ab:72:43:ad:de:df:8d:e4:9e:36:ab:87:d0:27:d1:a2:62:91:
         23:6d:a5:0e:46:4a:c2:a5:b0:f1:85:a7:49:68:e2:0f:51:de:
         4e:63:00:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:55 2026 by rpki-client