Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/F4Lp0z1BLHbKs2bCwnEYxWe77-A.roa
File:                     F4Lp0z1BLHbKs2bCwnEYxWe77-A.roa (raw, json)
Hash identifier:          NvKelYHb+cEHQub8G0I3R4SDJo4DkSP0amvAreVSlGI=
Subject key identifier:   17:82:E9:D3:3D:41:2C:76:CA:B3:66:C2:C2:71:18:C5:67:BB:EF:E0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       150D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F4Lp0z1BLHbKs2bCwnEYxWe77-A.roa
Signing time:             Tue 31 Mar 2026 07:58:49 +0000
ROA not before:           Tue 31 Mar 2026 07:58:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.76.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5389 (0x150d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1782E9D33D412C76CAB366C2C27118C567BBEFE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:b3:3c:36:35:05:7f:22:3f:5a:11:3a:dd:
                    b3:c7:a7:50:a2:fe:a4:a3:87:ed:01:68:19:b6:88:
                    ce:65:f6:c7:48:52:0e:7c:97:82:cd:59:ff:08:59:
                    46:d5:9c:94:c2:a1:67:b4:b0:f8:f0:9a:02:6e:b2:
                    db:d6:b6:96:77:ae:85:10:53:9e:00:fa:bd:54:25:
                    ba:1f:b6:48:a0:ad:75:dc:96:c8:73:84:c0:be:ae:
                    bf:0b:d1:c3:08:c4:61:1d:d6:07:90:a7:82:1c:20:
                    87:9d:3f:18:c8:9c:75:60:56:2d:e9:4b:9d:1a:9a:
                    6f:3e:6a:6c:77:07:b2:87:73:24:4c:80:be:7b:a7:
                    8f:e2:1d:31:fc:e1:e0:2e:2c:91:ca:12:a1:f6:92:
                    15:ba:b2:18:08:ce:39:84:1c:3c:14:a4:08:8f:7c:
                    a7:ee:a8:0c:cb:ad:79:3e:7f:31:ea:ae:7a:11:2d:
                    ea:d7:4b:64:45:fd:e0:4b:de:78:20:85:52:e4:0c:
                    77:81:d8:b8:eb:89:af:72:34:84:51:92:91:df:4e:
                    e5:5d:19:2b:9d:03:5d:99:54:24:54:6d:a6:80:f2:
                    58:fc:b1:42:14:ad:6c:10:87:65:01:62:ac:75:3c:
                    99:d1:8e:08:fd:72:72:be:53:f1:ef:e4:cc:c7:12:
                    36:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:82:E9:D3:3D:41:2C:76:CA:B3:66:C2:C2:71:18:C5:67:BB:EF:E0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F4Lp0z1BLHbKs2bCwnEYxWe77-A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:0f:a9:66:9d:00:9a:36:f4:89:c1:70:48:a5:97:fc:fb:0e:
         a9:cf:bb:f7:35:13:2f:47:03:14:9b:d6:dd:9c:eb:5d:88:3d:
         cd:be:7a:81:e0:03:54:10:4f:a0:e7:e7:e1:66:f7:0f:74:0c:
         4f:91:34:19:f7:b5:38:7c:18:74:e2:d3:cc:86:d9:75:97:93:
         2a:31:6d:05:29:79:91:34:cb:0f:4a:ac:e5:bb:cc:1a:f7:ec:
         15:0f:c2:16:44:fb:b6:ff:97:b4:cb:c7:b0:e6:dd:07:00:5c:
         a1:02:38:44:f9:fe:12:d0:ba:80:10:e2:12:24:38:ef:e6:bf:
         9e:41:81:6e:13:ce:44:3a:22:ef:f6:02:94:29:de:8f:68:55:
         93:e9:ef:84:8a:b9:28:f5:30:e6:61:d7:45:a1:32:c7:58:65:
         0a:99:0b:09:f4:71:e5:f4:b9:00:2e:81:ac:ff:c6:23:05:58:
         4b:11:25:1c:08:6b:2a:10:61:b0:72:86:98:f0:48:35:c6:45:
         db:2c:da:48:3f:2c:ca:08:6b:a9:b8:a7:3c:cf:6d:cd:a8:cc:
         a3:5e:73:60:98:70:8c:bb:e6:21:b6:81:91:f9:04:04:f3:d6:
         2d:df:08:47:aa:57:77:fe:e3:fd:7b:f7:c0:f1:1f:d8:98:50:
         ae:b3:68:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:02 2026 by rpki-client