Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/E58Jtkxk2U-LaNbmGmDwEobmN2A.roa
File:                     E58Jtkxk2U-LaNbmGmDwEobmN2A.roa (raw, json)
Hash identifier:          B7LMDYxd47M6+/wN4d+nXlKNEZExdWF+teyUpp23VO0=
Subject key identifier:   13:9F:09:B6:4C:64:D9:4F:8B:68:D6:E6:1A:60:F0:12:86:E6:37:60
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1686
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E58Jtkxk2U-LaNbmGmDwEobmN2A.roa
Signing time:             Tue 31 Mar 2026 08:01:57 +0000
ROA not before:           Tue 31 Mar 2026 08:01:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5766 (0x1686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=139F09B64C64D94F8B68D6E61A60F01286E63760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9c:78:0f:af:f9:60:9e:46:e5:1f:14:e8:3a:
                    1e:e5:53:9b:44:1f:4c:7a:cc:01:86:22:fa:44:9c:
                    89:52:cd:4e:9e:fa:26:d4:54:e4:1e:85:c1:71:41:
                    3f:4f:be:5c:9d:51:f1:84:9c:d7:e9:eb:bb:e6:11:
                    44:2f:a0:42:6d:45:93:cd:5b:d8:9a:2e:70:ba:bb:
                    0c:04:14:ad:db:f3:a9:8d:56:05:56:fe:92:fc:7d:
                    18:9d:0e:29:43:1b:a2:c7:04:03:90:55:ca:60:d3:
                    da:17:30:d7:c9:94:cd:c8:3e:e2:18:b1:d6:a5:8d:
                    27:51:f1:1e:87:c8:7b:8d:14:f2:9b:5d:36:5f:56:
                    b6:18:cb:ec:11:46:be:18:e7:d7:02:5e:ca:f1:0c:
                    ce:5b:12:e5:50:bd:a1:9a:ee:bf:08:02:99:ae:de:
                    ff:45:1c:cb:25:35:c9:5d:ef:0b:b1:5d:27:4c:48:
                    a9:36:cf:f0:82:29:70:74:d9:36:c2:6a:ba:85:63:
                    e5:9e:23:d1:38:d1:a7:c2:b7:28:69:17:04:ee:4a:
                    96:8e:b9:75:0d:91:a0:5b:3d:36:03:af:a3:9f:82:
                    d1:cf:59:30:40:88:1f:1a:18:ea:6a:35:8b:ba:a8:
                    eb:3a:68:b5:90:f5:41:74:2d:1a:8b:2e:71:8e:9d:
                    ab:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9F:09:B6:4C:64:D9:4F:8B:68:D6:E6:1A:60:F0:12:86:E6:37:60
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E58Jtkxk2U-LaNbmGmDwEobmN2A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:0a:32:6c:48:de:f9:6a:a3:8c:07:60:5c:c0:00:49:1d:8a:
         ae:28:05:67:ae:df:ab:91:8b:a6:81:f2:63:38:37:78:45:d5:
         80:76:c9:1c:b5:60:f0:aa:98:23:6c:ff:aa:a4:6c:40:4f:10:
         0c:70:73:23:d0:a8:e1:ba:b4:56:bc:d2:32:a7:4a:42:75:0d:
         ab:30:6e:4b:79:75:d1:0f:3f:56:ab:c1:5b:a4:e9:e9:51:4a:
         fd:84:09:45:79:f2:90:00:e6:fb:a1:57:b2:fa:b6:bd:f5:c7:
         1e:7c:0e:99:06:54:69:69:a2:09:d4:3c:db:d5:f1:db:34:e1:
         0b:e1:0e:8b:ba:b5:bd:26:7b:00:21:71:3f:58:dd:f3:4e:c1:
         fd:cf:bb:6f:44:77:d6:7f:85:8c:7d:28:36:d0:7e:f3:23:fc:
         13:12:cc:b2:c0:83:dc:4b:bf:02:96:cb:0b:77:7c:a6:73:db:
         45:5d:ce:81:47:39:4a:8d:74:ba:aa:e5:72:fb:1a:2e:dc:71:
         d1:0b:2d:5e:8c:30:17:95:25:87:1b:51:bc:bf:bd:c6:51:f3:
         e6:5f:3f:5a:90:cf:2c:bb:15:7d:8b:4c:3a:53:c0:bc:be:e6:
         39:b3:f3:b8:82:de:b2:dd:43:15:7e:50:40:63:d6:57:67:98:
         5f:35:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:01 2026 by rpki-client