Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DMvrzwv-vC7WpWhc_6WFplo6-A4.roa
File:                     DMvrzwv-vC7WpWhc_6WFplo6-A4.roa (raw, json)
Hash identifier:          hmDopKdNlZzZ9M0iNoeGHOKtNwz9UKdJ6hAd+UekRFc=
Subject key identifier:   0C:CB:EB:CF:0B:FE:BC:2E:D6:A5:68:5C:FF:A5:85:A6:5A:3A:F8:0E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       147B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DMvrzwv-vC7WpWhc_6WFplo6-A4.roa
Signing time:             Tue 31 Mar 2026 07:57:38 +0000
ROA not before:           Tue 31 Mar 2026 07:57:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5243 (0x147b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0CCBEBCF0BFEBC2ED6A5685CFFA585A65A3AF80E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:9c:47:e6:62:62:69:cf:11:06:54:ba:fd:
                    85:3b:9c:17:ce:fb:7d:79:da:36:15:01:5a:cd:62:
                    23:64:f6:74:ff:10:5b:1c:ea:ec:62:28:fb:27:d9:
                    d0:00:b6:64:4d:e1:b2:78:b8:af:ca:59:d1:c3:51:
                    00:4e:b3:07:47:67:20:0c:45:7f:09:a7:3c:39:f8:
                    9f:0f:4a:d6:60:53:6d:20:f6:6d:7e:e0:59:71:af:
                    a6:88:3d:a4:45:6e:3f:9f:9d:38:54:cb:0a:c7:b4:
                    f4:03:60:cc:c7:73:42:f3:5e:98:97:72:ff:93:fd:
                    8d:b5:d4:2a:c5:4b:0c:0d:5e:75:a1:c6:9f:61:ce:
                    c9:1e:40:c1:53:4a:e3:7b:a3:20:84:86:a8:ae:46:
                    03:59:66:64:74:06:dc:bf:27:2c:33:3f:0d:74:2c:
                    c7:38:23:63:01:8b:6c:93:e4:1c:63:b4:c1:9c:08:
                    81:e5:ff:36:7f:b4:fa:df:38:ba:18:47:31:8f:75:
                    63:cc:eb:15:ec:56:4e:d9:5e:58:8b:7e:c4:c6:7f:
                    89:f8:22:ba:ea:0f:66:49:18:9f:37:d4:0b:04:eb:
                    77:2a:6a:ed:91:dc:13:de:6e:61:01:c6:2a:60:e8:
                    73:31:b8:f8:09:33:9d:14:33:ad:24:e4:81:2d:d4:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CB:EB:CF:0B:FE:BC:2E:D6:A5:68:5C:FF:A5:85:A6:5A:3A:F8:0E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DMvrzwv-vC7WpWhc_6WFplo6-A4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:b2:39:47:9a:ad:fd:8f:90:8d:66:49:68:4a:75:93:6d:2f:
         59:dc:60:fc:f5:83:e9:10:3e:82:0c:6b:14:e1:ca:08:2f:a3:
         2d:7c:3a:45:4c:bf:b5:2c:0a:85:68:d2:4e:e0:bc:01:ea:5c:
         f2:84:40:80:5a:4e:16:a3:fd:a7:d0:5c:fb:cb:e7:27:11:0e:
         3f:79:72:f8:fd:fc:7b:4e:b9:b2:8c:d5:b2:3d:a9:ad:80:3f:
         d0:ab:64:59:12:13:ac:1a:1f:d8:2f:4c:31:94:64:2b:9c:32:
         f9:8a:4d:c4:a8:15:9e:a8:da:ad:bc:95:b3:26:af:7c:9e:94:
         7e:45:19:92:a7:d8:3f:8a:58:d5:5d:e5:76:83:44:2d:d1:8b:
         21:7d:fb:78:d0:0c:32:9e:d5:3e:1b:22:9c:31:56:67:78:f5:
         ee:0a:eb:f1:b9:e9:5a:b5:c9:4d:a8:c5:59:cf:69:e9:21:17:
         34:3e:81:ab:7f:39:59:14:b6:c7:52:24:82:58:24:5a:9e:da:
         f7:09:57:00:82:f1:e7:1f:78:88:6d:6e:c2:28:55:3b:d1:b3:
         9c:d4:be:8a:f9:7a:60:a1:a6:56:59:a0:7b:12:eb:f8:0e:e2:
         e6:88:93:a0:c2:2d:d8:45:a9:ae:dd:05:39:b5:e3:df:dc:b5:
         63:6f:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:43 2026 by rpki-client