Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JixpAa-HN70Q2MZWQReXqIlwpzE.roa
File:                     JixpAa-HN70Q2MZWQReXqIlwpzE.roa (raw, json)
Hash identifier:          PZEWNZrR4grCT1MzqqNnk8MD+nh35XSI+Li3mmh/bjo=
Subject key identifier:   26:2C:69:01:AF:87:37:BD:10:D8:C6:56:41:17:97:A8:89:70:A7:31
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13AD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JixpAa-HN70Q2MZWQReXqIlwpzE.roa
Signing time:             Tue 31 Mar 2026 07:56:04 +0000
ROA not before:           Tue 31 Mar 2026 07:56:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5037 (0x13ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=262C6901AF8737BD10D8C656411797A88970A731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:6e:fb:9b:d1:4f:70:15:8b:89:ac:f0:0e:
                    17:bc:ab:8f:b4:ff:32:0c:f9:49:28:80:84:12:2b:
                    3b:40:b2:72:de:33:99:eb:d9:2e:05:3d:14:45:92:
                    23:ad:77:ea:4d:42:08:ea:16:1a:73:11:34:e4:f1:
                    6c:52:00:d2:bb:32:6b:3e:2c:88:3c:d1:f5:b7:f4:
                    ef:7a:18:f3:ab:46:89:3d:f5:ac:89:40:39:ac:5b:
                    de:bc:a8:ce:9a:90:fe:3b:c8:7e:26:64:d6:c7:51:
                    c7:8b:1c:b6:4d:5b:39:cb:10:48:90:35:33:fa:b7:
                    21:23:81:02:c0:c0:88:21:a9:f6:1d:3d:56:fd:e7:
                    19:5b:51:23:aa:8b:bd:ff:c3:e8:76:7e:df:25:97:
                    1b:7d:1d:33:68:e0:8c:25:55:8b:1a:5e:eb:38:db:
                    ec:0e:fd:27:33:81:33:e1:eb:89:ca:a7:29:24:72:
                    61:33:d4:36:37:d8:21:e4:ce:d3:bb:1a:f7:fc:77:
                    a1:f1:0d:4d:2a:36:79:86:8b:e2:71:e2:c9:26:f0:
                    f0:82:b5:93:6b:13:2d:35:25:ad:6d:1a:cc:df:ec:
                    f9:cb:dc:86:66:c2:39:aa:dd:db:4e:8a:ee:18:da:
                    42:0b:fd:d6:46:d0:01:d5:a6:b0:72:0d:e9:a4:be:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2C:69:01:AF:87:37:BD:10:D8:C6:56:41:17:97:A8:89:70:A7:31
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JixpAa-HN70Q2MZWQReXqIlwpzE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:41:bc:86:be:ec:78:0d:04:7f:30:c7:8d:cf:80:16:76:a6:
         99:92:83:d1:cd:4f:c4:83:96:27:6a:55:f9:46:cd:b4:c8:5a:
         e0:85:93:b1:2a:d8:37:07:ce:85:bf:c7:91:e9:79:dd:74:a0:
         40:7b:a6:5b:63:84:3b:c0:2e:69:6f:4f:dd:e1:82:ed:19:a3:
         b8:05:ca:aa:20:b6:88:25:6e:ab:e1:d4:96:d4:c2:46:2a:48:
         1d:cc:22:83:af:32:26:a7:95:b8:8a:ec:97:eb:29:90:2e:83:
         89:45:08:60:ef:b5:a7:c0:03:ad:df:2a:0a:00:37:80:26:2d:
         a2:ec:ac:9e:88:ef:08:76:b6:00:79:55:44:05:e6:66:03:b8:
         21:78:0f:2a:e2:54:83:cf:a0:2b:1c:e1:24:e1:a4:1f:b9:fe:
         bb:b3:f9:63:ef:cb:ac:46:c5:56:9b:d9:dd:ee:55:ca:8c:8c:
         af:32:77:c1:35:f6:2c:41:85:b1:bc:e3:ab:8c:ef:28:fd:9b:
         7a:8e:a3:32:ea:69:91:66:a6:f2:74:fe:02:a7:7d:05:18:39:
         cc:ae:9c:f0:92:12:1f:e3:c6:a5:b2:c5:60:40:f1:83:54:9b:
         af:04:20:d1:e2:c2:64:fd:2b:83:1b:fd:a2:81:81:05:ca:d3:
         cc:41:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:51 2026 by rpki-client