Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CX9fk4f78Q_hLxuwhludiWc0cYU.roa
File:                     CX9fk4f78Q_hLxuwhludiWc0cYU.roa (raw, json)
Hash identifier:          M4X1q2HuW5CPxZELw8p1kmlaf9tEoqlFtD7vfTqeQbo=
Subject key identifier:   09:7F:5F:93:87:FB:F1:0F:E1:2F:1B:B0:86:5B:9D:89:67:34:71:85
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14F6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CX9fk4f78Q_hLxuwhludiWc0cYU.roa
Signing time:             Tue 31 Mar 2026 07:58:39 +0000
ROA not before:           Tue 31 Mar 2026 07:58:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5366 (0x14f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=097F5F9387FBF10FE12F1BB0865B9D8967347185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:57:d6:7b:62:4b:24:7c:26:0c:77:3e:af:
                    9c:ac:55:d3:c9:0e:82:0f:5a:01:38:f7:89:bd:75:
                    84:e5:73:24:3e:97:22:41:f2:1e:81:e2:a4:34:38:
                    6e:a8:50:59:6d:0e:07:64:db:d3:24:11:9e:67:75:
                    b2:eb:7c:e8:07:d8:cf:12:27:3e:fa:9a:d6:79:92:
                    b6:d2:9e:75:39:34:31:43:68:0f:92:93:1b:89:0f:
                    98:df:70:5b:b0:a5:56:96:4f:59:0b:2b:d9:17:26:
                    66:f8:56:c9:08:90:d7:71:e3:98:fd:2d:d3:d2:7a:
                    ef:09:af:b2:b9:cb:6f:ba:3d:28:d2:a7:34:b3:92:
                    df:d2:6d:2e:9a:9b:2c:33:3e:c6:a9:3a:65:11:1d:
                    f0:15:1b:9c:08:45:77:f4:c9:6d:6b:95:d2:b8:60:
                    19:38:c2:c7:57:ca:3a:cb:6d:18:13:44:71:0a:47:
                    75:5a:e5:aa:1e:3b:f2:e2:9f:ef:0a:f1:d5:51:cc:
                    ac:ea:63:09:0e:57:c6:f7:11:99:51:d7:dd:77:b2:
                    65:60:f2:8d:8f:30:f7:94:4e:a2:54:44:01:8a:77:
                    7a:7b:ef:a8:85:fd:5e:56:84:ee:ac:aa:14:01:5d:
                    d7:3f:36:2c:c7:66:b6:5a:e9:ec:9a:fd:2f:8f:79:
                    a4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7F:5F:93:87:FB:F1:0F:E1:2F:1B:B0:86:5B:9D:89:67:34:71:85
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CX9fk4f78Q_hLxuwhludiWc0cYU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:bf:cb:b1:0d:45:dd:73:90:60:b3:40:0f:c8:92:59:fe:39:
         58:f0:0d:93:6c:41:9a:5d:ee:c4:7d:6a:12:15:99:50:d6:0e:
         77:62:e7:55:b8:30:18:36:2f:37:4e:f7:b3:be:15:96:bb:3f:
         70:dc:b1:f6:0f:e3:81:ae:ec:09:59:f6:61:9c:9d:a9:54:f0:
         5d:ec:4d:15:ec:37:9e:b8:c7:23:33:5b:fa:d1:bb:1c:43:2e:
         0f:2c:a2:5c:59:3f:2b:e8:e7:7a:f6:01:47:2b:c4:05:cb:ad:
         a1:86:02:aa:75:a7:76:06:37:50:18:da:17:29:fc:8f:f8:7b:
         4d:2a:d0:d3:2f:a6:db:2e:62:f5:ec:a5:ec:a9:5a:71:17:dc:
         e6:c4:15:f5:91:5c:57:51:8c:ff:0f:9c:c7:79:70:7b:2f:73:
         4f:bd:1c:f5:e7:bd:9a:16:69:f8:68:36:b2:4e:22:92:fc:1e:
         ee:91:2f:b6:51:79:9f:ed:19:fa:9a:f3:b5:39:cb:71:92:bd:
         39:6b:57:f4:8e:95:9c:e4:02:99:27:d0:05:12:e6:d9:0c:1c:
         05:48:81:59:1d:ed:4b:a4:70:17:74:0e:40:9e:ad:d7:24:14:
         aa:5a:60:b5:50:40:a9:9d:c2:98:de:e8:30:be:59:ec:20:13:
         46:8b:36:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:14 2026 by rpki-client