Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KE6AOZBSdOrtvFllzodfpPphBrk.roa
File:                     KE6AOZBSdOrtvFllzodfpPphBrk.roa (raw, json)
Hash identifier:          2Pc4YkjNMq8ow0jqEpuJK4TYY3Hq5OBzXUEXYHsP/us=
Subject key identifier:   28:4E:80:39:90:52:74:EA:ED:BC:59:65:CE:87:5F:A4:FA:61:06:B9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1806
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KE6AOZBSdOrtvFllzodfpPphBrk.roa
Signing time:             Tue 31 Mar 2026 08:05:02 +0000
ROA not before:           Tue 31 Mar 2026 08:05:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.74.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6150 (0x1806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=284E8039905274EAEDBC5965CE875FA4FA6106B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:51:61:ab:92:cc:74:15:4e:e7:ac:5d:39:54:
                    e9:49:13:57:ca:64:dc:55:21:30:e7:47:50:9f:41:
                    9c:7d:ba:0b:c3:a6:c8:95:fb:3e:cb:99:55:f8:91:
                    c3:18:6f:49:a7:b7:e0:49:bb:6a:cb:a8:28:1b:07:
                    1e:d3:fb:91:0d:a5:8d:bf:24:e5:16:7a:d7:8e:0a:
                    6e:5e:7d:af:41:d9:2f:6f:49:fb:d9:6a:ac:a7:24:
                    5f:42:00:61:68:56:8d:25:73:04:60:d9:22:e3:90:
                    16:81:b8:ac:e2:41:dc:d2:f4:56:70:b0:20:f2:06:
                    43:2a:e7:06:be:b8:40:99:c9:21:3b:19:6b:7f:f3:
                    91:28:52:aa:c8:0d:ea:3c:38:f8:a5:76:1a:c7:20:
                    3c:9f:95:a1:e2:12:4a:ca:fc:9b:fb:a8:88:e5:89:
                    fe:1e:a0:c3:0e:0c:fb:f8:6d:0a:eb:45:02:4c:99:
                    e1:3e:22:65:75:19:e2:5f:f8:25:34:28:c3:50:0b:
                    8c:eb:6e:0b:b7:45:3c:4b:14:2f:f4:7d:11:18:a9:
                    66:34:46:45:95:fe:7a:3e:23:c9:f3:f3:b8:93:f8:
                    14:18:d1:fc:ab:a1:29:90:91:32:55:b1:f4:a5:0e:
                    40:80:c9:23:d0:38:10:0e:48:4d:09:0b:49:96:1c:
                    da:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4E:80:39:90:52:74:EA:ED:BC:59:65:CE:87:5F:A4:FA:61:06:B9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KE6AOZBSdOrtvFllzodfpPphBrk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:94:4c:ea:1e:ca:32:68:a9:4c:13:41:b1:aa:48:3b:30:
         96:7c:3a:02:f8:ea:48:01:f8:2e:96:fb:67:89:80:b7:02:25:
         c1:61:8d:bf:73:34:f3:39:b6:96:d0:cb:00:35:c0:af:08:7c:
         29:43:38:43:ac:c4:2e:ea:de:03:8b:07:74:cc:61:45:6b:79:
         fe:d8:8b:2b:12:9f:f3:46:d8:c6:e4:99:62:a2:b4:20:04:6d:
         82:73:7a:2a:85:42:1b:64:3c:95:e9:34:d5:5d:c4:35:c7:96:
         98:17:6f:07:25:e8:06:1d:7b:eb:28:b4:38:3a:6c:5c:4a:80:
         ad:1c:03:06:22:97:40:08:a4:fe:cc:c8:e3:46:7c:18:3f:66:
         fa:65:29:88:67:cc:f9:7e:1c:cf:91:4a:8f:c0:e2:46:4d:0f:
         f7:8f:b3:b8:51:75:aa:1b:84:ce:5e:68:a5:07:49:3f:ff:72:
         20:95:7c:23:a5:51:0d:9c:23:bc:0a:48:32:fe:85:7b:6c:7d:
         ba:65:2b:86:ba:28:8a:60:3a:af:6d:22:40:d3:d4:fd:27:6f:
         ae:88:91:ad:6c:c1:37:ab:5b:3d:89:d0:f4:16:6b:32:8f:40:
         14:5c:58:1d:3c:e6:5d:62:f5:69:b6:65:33:b7:5e:7d:35:dd:
         46:81:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:51 2026 by rpki-client