Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9SV6cbhtWyL6ehlUIhjnzdne_yg.roa
File:                     9SV6cbhtWyL6ehlUIhjnzdne_yg.roa (raw, json)
Hash identifier:          O/MYUBPfZAphWIyDLaYdd3q+yjoOkYoKugSdlMWAXwQ=
Subject key identifier:   F5:25:7A:71:B8:6D:5B:22:FA:7A:19:54:22:18:E7:CD:D9:DE:FF:28
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       179C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9SV6cbhtWyL6ehlUIhjnzdne_yg.roa
Signing time:             Tue 31 Mar 2026 08:04:11 +0000
ROA not before:           Tue 31 Mar 2026 08:04:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6044 (0x179c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F5257A71B86D5B22FA7A19542218E7CDD9DEFF28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:23:6c:0d:d0:3f:78:72:a3:20:e4:e4:97:ca:
                    32:ee:db:64:7f:73:de:74:c5:b6:be:81:a4:ea:6e:
                    bc:f0:c3:3e:88:ed:8e:42:9b:09:57:da:fb:96:30:
                    f7:ab:c6:ed:90:a9:de:08:58:7e:6b:33:6a:80:1d:
                    0c:d7:13:ca:ac:ce:87:c1:4e:65:9e:69:d2:17:f6:
                    13:98:3f:c5:25:7b:bc:d9:34:5c:5b:5a:09:ab:6b:
                    39:d7:11:1a:3d:ad:d3:1d:ed:a8:05:2f:cd:26:e9:
                    77:a3:71:24:ab:b3:85:9f:2c:5d:e3:ee:09:9d:41:
                    2c:16:39:1e:16:71:a5:31:96:9f:ed:75:49:68:2c:
                    24:b5:b8:23:8e:d6:01:3b:82:f3:35:78:71:d6:8e:
                    4c:a9:b2:1d:1d:e1:86:8e:1f:c4:33:c1:eb:4a:f5:
                    98:97:e2:b7:ff:66:2d:ab:b7:15:5c:57:a6:b3:c2:
                    60:1a:65:9f:05:2e:0e:b5:be:03:b7:b5:b4:ab:5f:
                    de:5e:60:52:0a:76:6a:1a:9c:02:d3:62:9c:38:b4:
                    1c:16:b6:d7:2b:9c:c2:79:df:25:24:a0:bf:89:89:
                    a8:cf:f4:cb:b2:f9:4f:61:4a:9e:3c:18:ce:1b:67:
                    f5:ae:bc:f8:b4:b0:55:46:ac:71:ea:bd:ab:d4:b7:
                    11:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:25:7A:71:B8:6D:5B:22:FA:7A:19:54:22:18:E7:CD:D9:DE:FF:28
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9SV6cbhtWyL6ehlUIhjnzdne_yg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:32:d6:8d:c1:f6:d1:e5:d2:f6:80:8f:0d:b8:17:aa:2c:c6:
         4a:68:20:11:a2:d3:42:12:ad:6b:01:3a:87:2d:e6:25:7e:38:
         9d:16:ed:81:aa:7f:2c:53:94:f2:b3:57:80:35:6b:cc:3e:24:
         51:de:b5:e6:c0:2e:1f:d7:89:fa:df:cb:e3:53:ee:ae:03:7e:
         53:8a:42:72:17:bb:54:f9:95:1b:29:67:f1:d6:b2:76:b9:8c:
         3e:15:3f:3b:b8:f9:f4:ba:91:ef:47:1b:c1:46:24:a7:77:21:
         e0:23:32:43:41:00:26:b6:bd:e0:d1:70:19:f5:a0:3a:97:67:
         e2:b0:89:67:a4:cb:99:39:a5:cd:38:12:34:e0:85:a0:88:ae:
         5f:fc:49:16:75:92:0f:2b:ba:6c:e6:95:4f:3a:a5:c1:e0:50:
         6f:ce:33:e5:ce:1c:30:a0:96:2d:53:63:65:ae:d0:30:f2:49:
         d7:e8:35:db:ff:cb:ac:44:e3:d0:29:31:c8:11:4f:68:1f:f5:
         1a:7e:7d:03:60:0f:16:9a:7a:61:f0:6e:ca:46:6e:ec:f4:7b:
         f8:04:34:26:22:15:d2:dd:97:f9:01:32:18:a6:a4:6f:d4:4b:
         a5:cf:3b:ae:c9:a5:cb:97:b9:f6:d6:29:38:15:5f:c4:58:53:
         34:d5:f2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:57 2026 by rpki-client