Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mm68WV3nYfuNEmK-Nd2sgDbAdBw.roa
File:                     Mm68WV3nYfuNEmK-Nd2sgDbAdBw.roa (raw, json)
Hash identifier:          l0NwuxYK6IHuDua50gE0UkjOpokhEOZQVL777jY0/PA=
Subject key identifier:   32:6E:BC:59:5D:E7:61:FB:8D:12:62:BE:35:DD:AC:80:36:C0:74:1C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1780
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mm68WV3nYfuNEmK-Nd2sgDbAdBw.roa
Signing time:             Tue 31 Mar 2026 08:03:57 +0000
ROA not before:           Tue 31 Mar 2026 08:03:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        61.195.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6016 (0x1780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=326EBC595DE761FB8D1262BE35DDAC8036C0741C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:de:e7:1c:da:de:00:3e:79:b6:9a:4e:81:29:
                    ba:35:c4:6f:43:eb:69:6c:f1:34:4a:ce:c9:56:5c:
                    80:1b:36:fd:af:5d:f4:97:53:e5:2d:76:70:8e:0b:
                    39:fa:8f:85:02:9a:13:f0:2f:cc:5e:0e:dd:49:96:
                    02:f4:b6:1d:64:c3:60:2a:36:2d:ab:ed:9b:7b:7b:
                    21:4c:e8:19:c4:ae:4a:2b:f7:7a:80:74:bb:c9:ba:
                    7f:78:5a:3a:77:fb:99:b2:39:88:e9:bc:02:7a:41:
                    b5:d7:18:e2:40:7e:05:61:47:f9:b2:6b:48:28:70:
                    da:5e:b2:17:fe:22:22:d6:2a:7b:7f:f3:d7:a4:1f:
                    d5:98:b0:6c:29:59:a8:06:0e:2d:0d:cd:f0:76:4e:
                    e7:76:73:3b:da:22:8e:c9:49:88:40:7a:80:96:f7:
                    89:b6:62:39:97:f4:96:df:13:f6:cd:c1:68:98:5a:
                    73:6b:56:f3:85:3d:5c:0b:60:6f:c4:07:e1:63:e7:
                    d0:16:5a:00:7b:87:fa:0c:ee:24:93:90:c6:f0:63:
                    94:1c:b1:fe:61:86:a7:0a:92:6f:d4:17:02:70:98:
                    14:5b:04:11:ec:c2:00:4c:75:b8:2e:aa:81:c7:6a:
                    9b:d8:b1:7c:67:32:d2:96:d4:77:40:9c:e7:fa:a6:
                    af:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6E:BC:59:5D:E7:61:FB:8D:12:62:BE:35:DD:AC:80:36:C0:74:1C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mm68WV3nYfuNEmK-Nd2sgDbAdBw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:e4:33:5d:53:d9:2b:a6:13:a5:86:46:cb:b7:90:3c:3a:87:
         b1:ea:dd:9d:92:c2:61:1b:18:2a:0b:ac:3f:3b:f8:95:6d:c1:
         70:17:bc:5b:bf:ef:a0:5d:06:1a:04:98:87:d0:33:1b:2d:6c:
         82:2d:bd:e5:f8:3a:0c:e8:15:91:81:dc:6b:b7:28:76:ec:64:
         e8:fc:9c:e7:1f:7d:4c:82:7b:c8:94:2b:62:77:c5:e8:1e:83:
         30:f2:9f:21:fd:11:8f:c1:9b:3f:41:f0:ea:1d:70:24:fa:89:
         4a:6d:df:2b:70:7d:2e:4c:ae:f2:82:9c:42:92:e8:88:c1:3f:
         2a:45:d7:4f:e8:25:b1:74:ff:0c:36:2f:da:b2:14:54:ba:26:
         20:5f:1a:6f:f6:7c:0a:25:51:25:bb:ad:69:2b:3a:93:cc:b1:
         2c:a1:7f:1d:65:54:80:c8:fa:99:85:16:07:62:c1:70:86:18:
         74:e9:0b:95:56:ee:c7:eb:41:10:f2:f5:07:07:f7:80:a4:6d:
         59:c9:b5:50:fc:cb:ed:a9:6f:52:91:9a:65:01:e0:ef:f0:a2:
         d8:e1:1f:4a:c9:1a:a7:ab:69:da:f1:f2:2c:bd:cf:3d:a8:63:
         72:17:b9:fc:de:bd:90:cf:8b:b3:3b:e5:cd:b5:0a:96:91:6d:
         47:9a:21:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:36 2026 by rpki-client