Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9M57zqzLXSBpTz4PIfAYEXpgYVM.roa
File:                     9M57zqzLXSBpTz4PIfAYEXpgYVM.roa (raw, json)
Hash identifier:          nHIm8zuG1DU3Sc6RmfTunp6DGmTZfsMhGL8vABe7/m4=
Subject key identifier:   F4:CE:7B:CE:AC:CB:5D:20:69:4F:3E:0F:21:F0:18:11:7A:60:61:53
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17A8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9M57zqzLXSBpTz4PIfAYEXpgYVM.roa
Signing time:             Tue 31 Mar 2026 08:04:16 +0000
ROA not before:           Tue 31 Mar 2026 08:04:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.122.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6056 (0x17a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F4CE7BCEACCB5D20694F3E0F21F018117A606153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e4:36:fd:eb:da:6f:54:45:45:e9:50:65:23:
                    88:b0:0c:82:43:29:e3:29:be:0b:eb:7b:55:82:ee:
                    e0:6b:83:bc:52:33:11:3d:5b:ce:96:10:94:fd:a4:
                    f7:d5:7a:b6:aa:50:31:86:44:22:05:6c:9f:82:17:
                    5c:0c:df:3c:a7:28:79:3f:ef:6a:e9:11:3b:23:e9:
                    21:91:b6:da:c5:c2:e6:c6:cc:1e:e8:f8:5f:c6:83:
                    47:21:60:ed:98:81:c3:b8:a1:e5:73:63:e9:77:06:
                    c3:ea:0c:c5:7e:03:0a:22:fc:66:c2:71:10:7b:bf:
                    30:e2:aa:31:e1:81:86:0b:02:03:78:c8:1c:1b:38:
                    de:b0:26:8a:f0:70:91:d4:f1:9d:cd:90:22:81:3c:
                    32:82:a2:7a:7b:40:7c:87:97:3d:e0:20:02:aa:b6:
                    c4:51:54:f3:1b:b0:33:40:8d:72:8a:6c:b8:4c:2f:
                    25:78:f9:b4:82:37:23:44:12:90:cf:dc:17:04:10:
                    0f:fc:0b:89:40:66:17:12:e9:a6:11:b4:44:0f:bb:
                    65:d9:9a:63:8b:3d:5e:0d:69:5f:d3:ff:8a:33:3b:
                    e4:d3:92:bd:0f:50:f3:b1:95:1b:7d:70:36:37:57:
                    8e:b9:f0:e7:0e:ec:89:7d:28:4c:59:05:ed:95:6e:
                    36:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CE:7B:CE:AC:CB:5D:20:69:4F:3E:0F:21:F0:18:11:7A:60:61:53
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9M57zqzLXSBpTz4PIfAYEXpgYVM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:86:2b:cd:28:f7:b3:93:79:47:6b:44:88:86:2a:8c:74:c2:
         46:3a:ef:c3:56:26:55:be:ec:49:c1:e5:e3:7c:67:fd:3a:ba:
         10:21:f5:cf:4a:e3:14:5f:53:5b:4e:4f:5d:f5:13:ce:70:00:
         d2:49:4e:dd:55:44:b5:ce:f8:45:ca:78:46:cb:43:4d:bc:a2:
         e1:f1:f6:3c:de:1e:e0:c9:62:56:2c:eb:6f:8a:bf:a9:ad:fd:
         09:da:ef:ef:6b:95:7c:25:00:53:78:9d:2d:a1:d6:95:08:12:
         e3:ba:25:b2:18:b7:18:4c:0c:76:b5:c5:bf:d1:e3:8d:ed:4d:
         00:84:9c:e5:ca:af:72:87:8b:b1:7f:3c:5c:13:3d:36:17:10:
         4d:ef:10:61:bd:f6:5a:d2:3a:94:58:95:a4:95:a5:21:a0:1c:
         aa:f8:5e:42:ef:03:7b:4f:58:04:25:2c:18:61:fc:fd:32:99:
         b4:0c:73:1f:d4:45:d0:28:5e:47:cf:ef:6a:aa:91:7d:61:83:
         be:ff:3f:64:71:a9:ee:32:75:a5:97:a2:b8:8d:aa:1b:8d:96:
         9e:e9:e0:81:be:8b:07:21:36:42:16:b7:dc:3d:49:2c:0d:c2:
         11:64:b4:07:54:90:e8:34:2e:80:21:15:a0:49:7c:96:37:23:
         b9:76:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:32 2026 by rpki-client