Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AvQ0McMyTXZx84iZdrqpPegGslM.roa
File:                     AvQ0McMyTXZx84iZdrqpPegGslM.roa (raw, json)
Hash identifier:          H+owxU4QZfmcHovnLjv2ivqDL2DuXWqbOqWeQ+tbsRg=
Subject key identifier:   02:F4:34:31:C3:32:4D:76:71:F3:88:99:76:BA:A9:3D:E8:06:B2:53
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14E3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AvQ0McMyTXZx84iZdrqpPegGslM.roa
Signing time:             Tue 31 Mar 2026 07:58:29 +0000
ROA not before:           Tue 31 Mar 2026 07:58:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.228.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5347 (0x14e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=02F43431C3324D7671F3889976BAA93DE806B253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:8b:46:d6:8d:8e:be:48:f6:77:23:a7:21:
                    d9:f9:fe:77:e7:2d:2c:b2:f1:53:28:7a:08:a3:ab:
                    c3:71:9f:60:c8:d5:75:28:e3:90:c1:e4:d2:e2:17:
                    d3:13:9b:65:4e:9d:c3:e1:90:b2:5c:9f:71:4a:1b:
                    41:2b:b1:f2:99:78:89:6f:12:dd:a1:da:c8:f4:68:
                    a0:ec:38:36:f4:c5:3e:7e:7d:58:f6:ba:8c:65:dc:
                    4d:49:8e:b2:ed:5f:3f:92:a3:78:d8:d5:2a:29:11:
                    63:97:3b:07:c2:57:75:61:23:65:16:13:65:82:b2:
                    37:77:1c:0e:2d:03:0e:a7:5a:27:63:cf:2a:e0:ae:
                    ec:54:0e:b7:c7:e6:99:1c:83:66:81:eb:7f:93:86:
                    3a:d3:9a:24:cc:27:8f:bd:3a:01:52:a0:8d:f6:4f:
                    cb:ed:0b:72:a3:61:76:0a:3f:d3:1c:5b:40:1e:b4:
                    db:59:15:bf:c5:6e:8b:8c:9a:e8:e0:d1:03:0c:cc:
                    d0:9e:53:e5:cc:1b:5a:f2:46:53:7e:a0:a2:2c:d4:
                    1b:91:2f:53:26:c3:75:d1:bf:ec:1a:92:23:0a:9a:
                    10:d3:de:eb:1f:6e:24:b3:f7:f6:86:c1:c8:0e:ab:
                    17:0c:46:3c:cb:d4:5a:a6:84:80:e1:86:5c:59:e7:
                    8a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F4:34:31:C3:32:4D:76:71:F3:88:99:76:BA:A9:3D:E8:06:B2:53
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AvQ0McMyTXZx84iZdrqpPegGslM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.228.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a5:2e:91:9b:b1:65:36:3c:b6:e7:a5:81:ca:ac:5a:7d:f8:63:
         56:c1:11:82:0a:78:b5:78:7f:af:8f:94:f1:15:53:c2:34:5b:
         da:b9:46:91:8d:54:a3:22:5e:38:1f:04:33:34:97:fa:45:c3:
         e7:94:b6:26:b3:d3:60:2d:58:ba:49:76:22:87:93:44:41:8b:
         93:58:09:3d:57:ec:cb:a2:9a:58:c8:83:5c:e8:88:1c:f9:ee:
         36:6e:cd:88:b9:c0:99:ec:0d:4d:02:59:9d:b1:d4:88:99:c5:
         ab:18:50:b1:6b:42:ae:c4:e6:e8:55:36:09:76:48:84:f0:f8:
         74:96:80:1a:ed:73:fa:05:5b:8c:fd:42:5c:75:f3:4d:37:f8:
         3a:c7:9d:e9:5c:38:75:c5:5e:48:47:d9:52:21:73:b9:eb:92:
         7b:06:45:1e:ff:ff:68:e4:b7:53:7f:73:8f:05:f6:d3:70:e1:
         c0:32:63:37:81:c8:30:19:31:19:97:87:f5:27:59:e3:75:6e:
         3f:ce:a2:12:05:05:36:0c:b0:2c:ec:66:bb:c6:94:27:00:80:
         1a:48:ec:10:37:ac:80:87:26:7e:d9:04:b3:c9:75:5c:d0:65:
         ad:c7:f7:ad:ac:24:02:c9:67:be:0c:3f:8a:95:a7:44:d4:d5:
         a1:cb:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:31 2026 by rpki-client