Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IyxJwvgBDgTo-yVdV7WqgNEo46E.roa
File:                     IyxJwvgBDgTo-yVdV7WqgNEo46E.roa (raw, json)
Hash identifier:          egg3RxLQ/usEP9615aJ/deuemQJDEnuH4re+WC70GGQ=
Subject key identifier:   23:2C:49:C2:F8:01:0E:04:E8:FB:25:5D:57:B5:AA:80:D1:28:E3:A1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16F8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IyxJwvgBDgTo-yVdV7WqgNEo46E.roa
Signing time:             Tue 31 Mar 2026 08:02:51 +0000
ROA not before:           Tue 31 Mar 2026 08:02:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5880 (0x16f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=232C49C2F8010E04E8FB255D57B5AA80D128E3A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:78:43:73:e8:f1:60:73:04:3d:85:27:f5:
                    8e:20:b5:81:ff:b1:62:43:f3:f3:3a:9e:a6:a6:68:
                    1c:6a:7f:06:d1:bf:54:99:9a:dc:29:19:ef:21:5a:
                    89:0b:b4:4f:ef:81:6b:43:bd:b5:fa:f0:87:e8:4f:
                    0d:ee:81:70:6d:4c:b6:c9:81:45:97:b1:16:7c:2b:
                    7e:04:3d:ed:9e:b7:ad:f7:e7:f8:16:4d:df:66:a4:
                    f8:ad:ed:c9:66:01:d2:b0:6e:41:96:5d:97:60:45:
                    47:6e:76:63:48:bf:6d:25:1a:d7:d0:7a:75:1c:30:
                    59:c4:da:0f:10:0a:d7:27:af:f1:ca:b5:6e:85:d1:
                    a0:86:eb:24:33:1f:82:8c:00:22:8c:5e:fe:bf:fe:
                    c8:d8:a6:37:0b:7c:06:0d:61:b1:56:a6:19:29:ad:
                    4c:c6:97:20:78:2b:51:aa:a0:62:a6:bf:42:56:76:
                    b5:aa:24:9e:c0:c0:66:7f:fe:bc:27:ec:d5:9d:53:
                    27:cd:29:2b:bb:63:6c:b1:0e:29:5d:f8:2b:aa:9b:
                    fa:d9:98:37:d3:ca:a3:73:ec:b2:8b:af:7f:0b:0c:
                    1c:69:0d:b4:b0:9c:6d:6c:6f:f2:19:5d:fa:54:c7:
                    d3:a0:47:14:78:a7:79:2e:9e:1d:c8:bb:fb:31:4d:
                    14:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2C:49:C2:F8:01:0E:04:E8:FB:25:5D:57:B5:AA:80:D1:28:E3:A1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IyxJwvgBDgTo-yVdV7WqgNEo46E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:26:00:99:48:19:e6:0d:32:34:b2:a7:08:26:45:88:13:
         bf:a3:8b:30:eb:bf:a5:28:15:de:07:82:b5:b8:cd:28:a9:91:
         9b:19:6c:fa:c8:80:4d:0f:aa:75:e3:25:b9:d1:67:f9:7c:a1:
         4d:d6:72:30:6b:f5:97:25:f7:61:2b:8a:1c:b2:80:fb:42:62:
         74:08:c7:8f:54:2a:cc:9f:97:aa:58:e1:ee:c8:04:bf:60:bf:
         f9:88:70:89:50:c7:27:45:fe:08:77:9b:56:a5:1f:1b:04:aa:
         d5:a6:aa:f0:56:2e:6d:c3:da:0d:6c:f8:ad:6a:08:3a:8e:cc:
         df:67:42:23:ea:28:09:48:a0:21:eb:82:2f:88:28:1c:ad:c1:
         54:31:c7:26:21:2f:43:34:6e:3f:d6:d9:97:de:36:4c:87:42:
         a7:f7:fb:f1:d5:37:d5:e1:b4:5a:14:07:42:2c:ef:e2:1a:24:
         04:4c:a3:f9:b5:87:80:8f:98:19:48:43:41:f7:4c:92:b8:02:
         c2:d2:3e:65:23:8e:70:0b:d2:52:48:44:91:b8:36:16:8c:dc:
         38:e9:f8:0a:3a:dc:25:d4:7c:13:cd:c4:6b:08:ef:e4:b7:28:
         6b:59:b3:63:fe:41:72:a7:5c:2d:a1:b8:a1:ba:1a:05:ee:ba:
         c8:e0:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:28 2026 by rpki-client