Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9i4yzkChGsSAs2NX8wrYsLvNCgQ.roa
File:                     9i4yzkChGsSAs2NX8wrYsLvNCgQ.roa (raw, json)
Hash identifier:          IvfHQMH2X8FtK53rSkzPwFlh9V8aHJsYh3OD5P4BApA=
Subject key identifier:   F6:2E:32:CE:40:A1:1A:C4:80:B3:63:57:F3:0A:D8:B0:BB:CD:0A:04
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1512
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9i4yzkChGsSAs2NX8wrYsLvNCgQ.roa
Signing time:             Tue 31 Mar 2026 07:58:51 +0000
ROA not before:           Tue 31 Mar 2026 07:58:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5394 (0x1512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F62E32CE40A11AC480B36357F30AD8B0BBCD0A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:d3:e0:f3:a1:40:2f:4e:1a:81:06:49:6a:
                    69:0e:46:28:27:6b:1b:c2:87:30:5f:0a:ba:e0:62:
                    4f:a3:ec:b1:1c:1a:9f:98:93:54:2d:52:4a:0e:21:
                    96:55:38:c0:7b:8f:91:3e:40:4d:2d:c5:50:61:e3:
                    a7:c7:94:d9:aa:eb:40:ea:17:f1:a2:1d:bd:63:5f:
                    f8:0f:44:5d:ad:92:60:54:0a:52:2b:5e:1c:5f:fe:
                    43:61:c5:07:5b:fa:95:76:f8:22:4a:ea:e9:db:b9:
                    12:75:22:e9:78:46:b7:c0:42:04:80:7d:0d:9e:4f:
                    ff:e6:1f:5d:4d:47:3b:35:a3:24:73:5e:0e:9b:2d:
                    32:58:4a:77:4d:8f:f9:f2:da:c4:e5:62:7d:33:76:
                    1c:0d:d7:0b:ba:37:58:d0:7d:cd:02:c0:44:9b:84:
                    f8:03:6f:7d:06:7b:69:d1:ed:84:e5:96:33:2b:85:
                    da:a4:e8:bd:53:25:2c:07:1c:cf:4b:26:0d:de:48:
                    91:37:eb:2e:42:02:d0:38:af:15:ed:fe:01:11:18:
                    6e:0c:eb:17:98:ab:0c:2d:2a:9b:39:30:a0:4b:f6:
                    34:67:fe:8c:5d:42:14:3d:45:26:e4:a8:5c:6c:f6:
                    26:4d:51:8b:c7:18:b2:00:cf:b9:c8:32:62:b3:bc:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2E:32:CE:40:A1:1A:C4:80:B3:63:57:F3:0A:D8:B0:BB:CD:0A:04
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9i4yzkChGsSAs2NX8wrYsLvNCgQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:63:ea:d0:c0:08:41:4a:0d:7e:c4:69:f2:8e:96:41:9a:56:
         d3:2c:82:24:61:2f:72:75:4b:69:f4:a1:c8:6a:62:1e:cd:6c:
         ee:0e:15:14:db:e0:03:16:7e:44:6a:3a:24:a9:53:4f:1d:74:
         20:87:4a:79:92:d0:35:d4:a9:01:b4:b3:d9:12:e5:4f:c1:b1:
         ca:bb:7d:21:dd:62:fe:f3:4a:2a:e8:af:6e:fe:2c:53:6a:0a:
         8a:99:35:2b:07:89:52:5b:28:a6:f6:77:0e:14:dd:3c:f3:e4:
         d3:88:d2:01:af:59:de:7d:97:47:72:f5:35:0f:03:d9:f6:ab:
         65:c0:43:8f:f7:22:b6:ec:ac:3d:cc:36:62:b6:e1:ed:3e:4c:
         ff:1c:80:b3:48:d2:b5:dc:25:3b:f3:cd:93:f6:24:7f:3a:ed:
         33:2f:b0:c3:38:ba:5e:33:ec:b8:07:7a:f5:35:3a:cf:3c:35:
         ed:27:8b:f6:47:d4:0c:58:43:ef:a3:38:be:fc:23:55:c1:d1:
         64:ea:c7:a5:bf:f7:92:40:96:e8:37:52:b0:b4:f3:37:07:2b:
         92:66:4a:20:e2:af:d5:df:f7:fa:41:9d:01:90:3d:5d:4f:03:
         7b:11:26:0b:f3:ad:ef:76:d1:bc:97:a9:f2:51:c0:ab:9e:b5:
         3a:78:af:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:01 2026 by rpki-client