Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/H5D3bknu6KR4fnjs4PcMS394Iyo.roa
File:                     H5D3bknu6KR4fnjs4PcMS394Iyo.roa (raw, json)
Hash identifier:          ITPnPQTbqFhwvW2laCmZCiTzkyXnyK3NuXK7CEBe0kE=
Subject key identifier:   1F:90:F7:6E:49:EE:E8:A4:78:7E:78:EC:E0:F7:0C:4B:7F:78:23:2A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1868
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/H5D3bknu6KR4fnjs4PcMS394Iyo.roa
Signing time:             Tue 31 Mar 2026 08:05:55 +0000
ROA not before:           Tue 31 Mar 2026 08:05:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6248 (0x1868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1F90F76E49EEE8A4787E78ECE0F70C4B7F78232A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:49:84:52:72:55:6b:3f:7c:0f:80:b6:82:9d:
                    e2:b2:2e:e0:bd:a1:c6:e4:de:64:c4:2f:d7:47:19:
                    14:de:e2:7d:36:fe:5b:e9:67:15:89:39:e1:e3:aa:
                    58:c2:c3:d3:6f:22:7f:b4:09:bf:eb:c1:3c:5a:3f:
                    95:0b:e2:b8:36:1b:4e:be:ef:5e:43:38:a2:64:15:
                    f2:3f:94:82:03:a1:13:d5:9d:34:20:09:ee:5e:67:
                    6b:6e:5b:e6:55:9a:2e:d6:48:4f:76:fc:9c:1f:08:
                    f3:01:04:75:82:31:87:a0:fa:97:23:6c:bf:68:b2:
                    42:aa:96:8d:47:b8:d9:b0:c3:df:cc:26:7a:fd:b0:
                    30:1c:5f:e0:09:cb:8a:4c:03:72:76:9f:a7:e6:c1:
                    91:2f:4e:12:48:0d:07:13:c8:ff:1c:78:2d:08:65:
                    61:6e:41:c0:e0:3b:14:e2:1a:96:34:88:10:cd:16:
                    f8:1a:ad:fe:14:b1:f7:7a:7a:3e:e6:ce:b8:e5:07:
                    02:08:ee:0d:1c:e5:1f:16:dd:8f:04:e9:40:3c:84:
                    ad:e0:27:a6:1b:2b:6b:37:e7:0c:93:78:c1:b4:3c:
                    cb:de:77:47:ad:c4:96:9b:4b:2a:40:84:68:17:0c:
                    e3:0a:f6:8e:50:cf:58:97:eb:b1:1e:35:8b:32:c9:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:90:F7:6E:49:EE:E8:A4:78:7E:78:EC:E0:F7:0C:4B:7F:78:23:2A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/H5D3bknu6KR4fnjs4PcMS394Iyo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:6e:c8:ec:af:da:25:63:d2:81:8f:35:77:00:67:44:7b:e6:
         12:7a:03:5a:33:66:93:17:8c:ca:6d:6a:4c:be:99:1e:47:9c:
         4d:86:1f:84:5e:5f:c6:bc:a5:77:75:de:29:d6:db:fc:e6:0f:
         8c:fc:62:12:bc:c9:58:77:99:d2:bc:36:2a:21:fb:7b:66:df:
         f3:ea:6c:be:c3:b2:a2:a6:9f:a6:10:df:e9:d7:11:70:01:bd:
         63:57:98:12:5a:c3:86:53:e0:b0:6c:e8:56:a4:a1:48:08:39:
         cf:df:3e:b3:78:ac:b0:49:91:7f:17:96:c3:9d:0a:bd:4e:6b:
         48:c5:c4:af:c2:8f:c1:39:8b:1b:13:1f:e3:f1:2e:f6:16:cc:
         c5:e4:fd:a6:fa:9d:54:f2:3f:a7:a4:f1:37:a9:99:b4:d6:e4:
         28:1f:44:7f:20:70:7a:f7:73:01:ef:cd:8b:0c:66:bd:1d:01:
         fc:ad:11:74:07:26:95:95:48:a8:aa:df:24:f0:ed:b8:4e:9c:
         4f:8e:22:07:aa:40:99:1c:94:0f:cb:f7:f6:33:32:a1:84:8b:
         31:7c:da:b6:36:10:6c:45:dd:cb:36:37:11:f0:49:05:18:0c:
         9f:12:09:c4:26:2c:43:bf:b5:4c:4c:51:cc:a8:cc:84:24:50:
         99:56:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:54 2026 by rpki-client