Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GVa6xaUP63-C55XFjVV6GlM-lOI.roa
File:                     GVa6xaUP63-C55XFjVV6GlM-lOI.roa (raw, json)
Hash identifier:          cdCg3Ht3eAn8Htls+TEDlEb6W3UeP2I/ZYjV42gKtpk=
Subject key identifier:   19:56:BA:C5:A5:0F:EB:7F:82:E7:95:C5:8D:55:7A:1A:53:3E:94:E2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1809
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GVa6xaUP63-C55XFjVV6GlM-lOI.roa
Signing time:             Tue 31 Mar 2026 08:05:06 +0000
ROA not before:           Tue 31 Mar 2026 08:05:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6153 (0x1809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1956BAC5A50FEB7F82E795C58D557A1A533E94E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:89:73:e3:07:86:c7:e7:bb:c9:c2:88:2b:
                    ab:5d:5b:28:6a:fd:1d:c7:9a:8a:ba:bd:0e:f5:9d:
                    52:39:6e:cf:26:00:f3:27:56:2f:40:ad:9c:3a:de:
                    4c:ce:74:05:34:9b:db:f2:1e:ee:d7:b0:cd:d6:7e:
                    5f:a4:f6:69:06:ed:1a:c5:ca:ff:e7:9b:0a:86:00:
                    f5:be:14:f4:4b:e4:26:45:ba:ff:1f:8f:9f:1e:33:
                    27:b4:b7:a0:4d:02:f2:8e:45:5e:4d:da:39:8b:bc:
                    65:e5:f2:ce:67:cd:cd:6d:ff:01:f7:6b:09:52:7c:
                    68:e1:23:96:77:94:c3:47:45:6b:23:b2:75:90:7a:
                    55:5f:dc:53:07:5a:28:86:06:9c:64:d5:cb:bb:f0:
                    5e:c6:8b:2c:76:c9:5b:4d:b4:f4:9d:16:50:50:61:
                    a7:f6:2f:30:50:51:32:d2:a3:8a:01:0e:0a:b5:1c:
                    f2:cb:02:c5:17:39:21:1d:b5:63:b0:3b:7a:c0:ff:
                    ae:07:2e:68:4a:c3:48:28:cd:28:98:bd:2a:16:ef:
                    33:90:cb:96:40:09:fd:93:4c:e8:69:22:68:f7:b1:
                    f2:e0:01:e2:b6:94:74:86:a5:50:44:18:10:3f:5a:
                    4c:07:32:0b:c7:d8:9c:cc:fd:0c:c4:d3:18:32:a1:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:BA:C5:A5:0F:EB:7F:82:E7:95:C5:8D:55:7A:1A:53:3E:94:E2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GVa6xaUP63-C55XFjVV6GlM-lOI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:12:3e:72:e1:49:a1:90:e1:57:a7:03:21:73:21:ed:a9:b7:
         7c:fe:80:61:ff:02:a0:f9:cc:98:80:fa:eb:bf:7d:45:ff:e6:
         e5:cd:4b:68:14:ba:7b:07:84:46:77:1e:25:49:69:12:39:ab:
         b0:f4:84:7f:86:7b:3f:5d:3c:2e:47:5d:20:85:a1:64:e6:64:
         0f:12:ad:d1:16:d6:ee:07:eb:32:9b:32:96:b0:8d:56:b5:8f:
         46:60:af:f1:80:41:39:60:be:d6:e9:6c:90:0a:2e:be:aa:af:
         a4:66:62:6f:63:a9:c7:30:1a:70:60:53:61:fd:22:5c:85:1e:
         fe:8e:ed:a1:95:f3:57:a6:a5:ec:e6:62:01:d8:35:38:87:83:
         71:87:64:60:a6:35:a3:3a:ec:cd:aa:25:75:c2:8d:9e:3c:4a:
         20:08:43:34:9e:a4:82:c3:a3:87:1d:ed:82:ec:d8:ff:cb:2f:
         2f:e8:72:e4:4a:22:54:7a:ca:35:3a:bc:11:1b:81:ec:31:25:
         ba:0e:93:94:fd:16:99:74:da:1c:83:45:17:6e:5f:65:a2:63:
         52:35:a2:73:88:a7:02:88:3a:c2:75:ab:ce:0e:fb:2d:f1:a6:
         b7:54:64:47:18:8c:5a:ce:90:65:ad:0a:4e:4e:f9:af:1c:d8:
         f1:a5:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:35 2026 by rpki-client