Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9ZPIBA-Z19dkoHW3swUjKiIRYg8.roa
File:                     9ZPIBA-Z19dkoHW3swUjKiIRYg8.roa (raw, json)
Hash identifier:          BPBNSzoRUUiFw1PIZE79eELnx8daDEFAhaNDI7+sDK0=
Subject key identifier:   F5:93:C8:04:0F:99:D7:D7:64:A0:75:B7:B3:05:23:2A:22:11:62:0F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       158F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9ZPIBA-Z19dkoHW3swUjKiIRYg8.roa
Signing time:             Tue 31 Mar 2026 07:59:52 +0000
ROA not before:           Tue 31 Mar 2026 07:59:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5519 (0x158f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F593C8040F99D7D764A075B7B305232A2211620F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:8d:16:fa:34:62:35:a7:d6:58:c3:d4:3d:
                    0f:71:1e:73:b6:9d:22:70:7c:08:25:4d:5e:35:38:
                    87:0f:bd:6b:72:bd:ef:52:ca:9f:6b:c6:93:97:4c:
                    2d:2d:3f:ab:9d:c5:bf:af:6e:e7:eb:52:d1:9b:de:
                    68:c7:2d:24:10:01:78:8e:81:bf:cb:d4:16:6f:ac:
                    d0:d5:37:86:00:f9:a6:8e:de:a1:90:3e:26:78:20:
                    3e:4a:c8:b4:ce:bf:e0:0f:24:7b:d7:e9:7a:6b:9c:
                    72:07:67:71:0d:6c:f3:86:19:78:9b:8e:43:10:e0:
                    2e:ab:5f:78:c9:95:2f:06:f9:f6:38:04:98:5e:71:
                    38:14:b0:92:a3:01:43:87:17:0d:cf:c2:1b:92:0e:
                    44:3e:d0:3b:c7:92:0e:ff:73:13:28:8b:81:ad:9e:
                    fb:33:41:4f:d2:1f:95:db:49:ab:ee:83:21:b6:0b:
                    ee:07:d1:2f:2d:68:82:6e:2e:64:0b:a7:eb:38:9c:
                    8c:84:41:bf:db:0e:d7:fc:4c:dd:48:9d:8d:da:3f:
                    82:ed:30:98:77:03:21:df:46:4a:62:39:10:40:ff:
                    02:4f:7b:1d:cf:a3:ab:d0:0c:d2:89:20:f2:5d:ef:
                    cb:02:57:18:a3:29:4b:06:6e:38:af:b8:11:94:2b:
                    3a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:93:C8:04:0F:99:D7:D7:64:A0:75:B7:B3:05:23:2A:22:11:62:0F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9ZPIBA-Z19dkoHW3swUjKiIRYg8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:96:a2:a4:35:10:20:53:5c:b3:0b:a4:93:50:1e:99:66:af:
         1a:ed:e1:20:43:a9:ec:53:3b:2e:5d:4c:a8:06:67:60:fb:45:
         72:8c:ba:36:2a:cd:3b:07:3c:10:8e:99:be:01:f9:55:1e:96:
         5c:bd:32:f5:cb:49:cb:9a:e3:28:44:1c:da:46:60:a9:f4:c2:
         62:73:94:3c:77:da:42:3b:7c:63:16:c0:22:5b:c0:2f:67:13:
         70:aa:b5:28:41:6d:b3:d4:99:50:cd:98:87:af:56:72:73:58:
         a2:99:45:02:ba:76:28:04:24:ae:0b:87:ef:b0:5b:08:c7:aa:
         dd:a0:71:eb:50:b0:32:98:2f:e1:dd:aa:53:70:92:aa:70:b1:
         0a:bb:ad:c3:fc:b2:f8:ff:78:1c:17:18:9c:ca:3f:5d:e6:29:
         d1:ee:03:b7:7e:6e:cb:b2:03:b1:39:f4:76:22:6c:da:25:ce:
         37:0c:0f:5b:8c:60:33:fc:7f:9f:0e:49:33:7b:f6:5b:d3:c1:
         c5:a0:55:fe:86:7b:76:cd:f9:32:50:ea:8e:bc:69:3f:ae:73:
         4e:06:db:78:a0:e3:cd:87:4a:56:9a:b3:27:e2:e7:19:72:a6:
         a9:74:fa:2e:29:1e:03:97:4b:49:7a:1c:de:03:b9:3c:09:a9:
         7d:67:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:44 2026 by rpki-client