Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/86loNgSSuNU7fWCjeWL2vl6KFUw.roa
File:                     86loNgSSuNU7fWCjeWL2vl6KFUw.roa (raw, json)
Hash identifier:          KfgeJhtVoTntbWHwQj+AktmCH+HowhphwmY0hXAN86M=
Subject key identifier:   F3:A9:68:36:04:92:B8:D5:3B:7D:60:A3:79:62:F6:BE:5E:8A:15:4C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1514
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/86loNgSSuNU7fWCjeWL2vl6KFUw.roa
Signing time:             Tue 31 Mar 2026 07:58:52 +0000
ROA not before:           Tue 31 Mar 2026 07:58:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.76.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5396 (0x1514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F3A968360492B8D53B7D60A37962F6BE5E8A154C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:36:de:2e:6e:b4:63:6b:70:21:f8:a0:28:
                    a6:ec:66:ad:52:d3:c7:67:85:56:e2:5b:a1:68:6f:
                    ff:95:41:f3:5c:bc:f5:ff:29:7f:fe:52:86:a9:fa:
                    a8:ab:ae:5e:10:76:05:a6:7f:01:64:da:eb:c2:9d:
                    22:df:22:50:cc:e2:12:5b:8a:58:8c:e7:74:7c:ae:
                    23:a7:96:1f:f9:74:f2:92:7a:7e:67:e5:95:51:89:
                    fe:14:be:29:41:87:f8:12:b3:4f:3e:2d:f1:34:15:
                    74:ff:b7:a3:42:8a:44:f1:e2:f0:33:5d:42:95:e8:
                    08:fb:31:5e:fb:20:d0:2e:f5:f4:0d:78:a7:b3:a6:
                    f3:2b:46:14:a3:61:b6:a0:a4:38:dc:64:7c:14:1d:
                    b4:f9:03:63:58:51:45:98:ec:d4:ec:23:c5:03:51:
                    06:3e:ff:07:55:4e:d8:e2:2e:b6:d0:fe:8c:23:c9:
                    42:8a:37:ed:4d:0f:56:94:bc:4e:ca:c0:b0:4b:01:
                    78:53:be:87:1a:7f:e3:db:6d:ad:dd:de:e8:e2:fa:
                    a8:01:c1:38:0d:78:bf:ac:69:5a:3c:dd:ce:25:82:
                    98:82:f7:63:ba:55:0d:d0:6b:13:8d:17:a7:6e:3a:
                    1f:33:0a:69:8e:3c:0b:b4:f2:0e:c6:44:6f:0c:2a:
                    12:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A9:68:36:04:92:B8:D5:3B:7D:60:A3:79:62:F6:BE:5E:8A:15:4C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/86loNgSSuNU7fWCjeWL2vl6KFUw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:09:d0:ae:08:69:c1:98:b3:49:44:ef:68:c3:06:9b:ee:a9:
         63:c2:03:bc:78:5d:ce:f9:cb:10:6f:60:aa:e7:01:35:83:6d:
         d7:29:d9:f3:1b:4e:86:16:41:73:33:52:9e:22:95:c9:53:e6:
         9d:43:8e:78:a6:4d:9b:38:69:79:1f:3e:49:e9:b0:4e:34:b7:
         59:2b:ba:a5:a2:ba:2f:bd:4a:e1:3e:2d:8c:29:51:cc:ef:50:
         91:c6:a4:99:2e:61:54:f9:cc:cb:11:2a:5d:60:0f:b8:54:25:
         fa:9f:bb:2c:9b:53:43:f9:26:ba:2f:ce:f8:f7:4c:47:32:6d:
         25:c2:2c:43:fc:24:34:f5:9c:ba:94:85:8d:a4:c8:4d:b1:f4:
         fd:2e:00:a3:2e:39:51:fb:b5:0a:5a:a8:f8:06:ea:1d:de:ac:
         98:d8:58:2a:f9:33:de:02:5b:9f:fd:81:b9:dc:0f:ab:6e:2a:
         fb:7c:cb:9d:0b:db:19:01:7e:3a:c4:91:13:0d:1c:f2:fe:a9:
         cf:19:a7:14:c5:62:44:31:55:dd:dc:fc:eb:fb:6d:73:71:7f:
         62:b5:95:74:4d:51:fe:60:75:d4:5f:9b:76:48:d4:a4:ad:34:
         97:5a:eb:0a:0a:ba:9f:49:6d:44:e3:7c:ac:65:79:4c:d6:d6:
         63:32:1f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:04 2026 by rpki-client