Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NvL062VGNpktA8KBcVq8mJwo2zE.roa
File:                     NvL062VGNpktA8KBcVq8mJwo2zE.roa (raw, json)
Hash identifier:          iNuYJ4qGPqJIEzafoTGfNDyPA++SdMYzkPHcqHt/Pm0=
Subject key identifier:   36:F2:F4:EB:65:46:36:99:2D:03:C2:81:71:5A:BC:98:9C:28:DB:31
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1442
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NvL062VGNpktA8KBcVq8mJwo2zE.roa
Signing time:             Tue 31 Mar 2026 07:57:12 +0000
ROA not before:           Tue 31 Mar 2026 07:57:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5186 (0x1442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=36F2F4EB654636992D03C281715ABC989C28DB31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:df:b7:3c:5e:8e:b7:65:83:98:8a:0e:bd:
                    3d:2d:cc:19:ce:90:74:47:bf:06:16:4d:01:f7:28:
                    56:6e:1f:86:6b:b1:b1:2a:7e:e8:fc:cc:77:59:92:
                    15:4f:70:34:f6:b7:c2:23:fa:82:38:d8:05:6b:d8:
                    20:1f:5a:e5:a9:a2:49:eb:1e:e5:b2:9f:12:f8:b2:
                    75:e2:dc:5c:69:56:54:3d:33:3b:38:9e:6a:1e:66:
                    a0:01:a7:61:25:b3:ce:60:59:33:1a:8d:84:9c:ac:
                    cc:fd:b3:43:30:07:14:88:61:a8:99:3d:53:2e:e1:
                    e5:e4:a0:26:34:dd:ed:34:60:f6:7a:e5:d2:34:9b:
                    2a:6a:10:be:5c:d3:e7:b2:a7:55:4c:e4:6c:29:f0:
                    65:e5:ee:33:6a:16:f1:ae:2e:84:d7:e9:e6:c3:67:
                    cd:cb:52:1e:df:ab:dc:19:ef:e7:9f:c7:3d:d9:65:
                    c2:dc:36:8e:b9:f4:49:01:08:ff:aa:ca:04:9d:11:
                    45:ba:24:b4:cd:a0:71:4a:79:9f:ec:da:90:58:17:
                    46:5a:79:81:f7:8d:64:cb:be:82:f6:90:0e:b0:d2:
                    ee:bc:e7:3f:83:d5:23:f8:28:d7:c0:77:e7:72:9e:
                    78:33:7c:9c:35:fe:06:a3:38:38:a8:c9:bb:a9:a8:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F2:F4:EB:65:46:36:99:2D:03:C2:81:71:5A:BC:98:9C:28:DB:31
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NvL062VGNpktA8KBcVq8mJwo2zE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:6a:3d:46:c4:0e:33:96:7e:65:62:10:ba:82:25:2d:f6:b0:
         fe:d9:f6:ec:a7:f1:98:9c:a7:b1:4b:8b:8f:c6:f4:a0:c4:9d:
         e0:e0:83:20:0a:c7:ac:7d:d8:a1:8a:ce:e0:b8:4e:bf:77:ce:
         86:59:cb:c1:96:58:5f:b9:87:5c:32:f2:ba:b2:aa:75:59:1d:
         26:27:2a:4d:18:31:45:1c:0b:e1:ec:40:02:a1:b7:e7:7e:ba:
         ad:cc:ad:1a:c2:7b:5a:33:35:11:00:63:47:be:6f:e7:df:76:
         a5:5e:30:c0:90:d4:9b:10:9f:9b:64:e2:97:c7:c1:11:64:3d:
         45:e1:e5:85:15:59:ec:a5:28:41:9c:7d:73:4a:19:a1:ad:92:
         36:d7:f9:87:cd:3b:00:2c:4c:38:e2:8d:0c:57:5b:7f:6c:42:
         bd:3c:4b:94:ec:c4:d7:4f:42:c4:8c:44:9f:22:c6:84:8a:23:
         3d:8e:20:28:29:ea:08:86:bf:f0:49:31:d8:56:4f:b9:ee:57:
         ae:12:e4:2f:70:5a:c7:93:d3:65:6e:83:1c:86:fc:b8:15:dd:
         bc:ba:31:e7:28:1b:52:84:e5:41:7c:4b:4b:cc:45:bc:28:ef:
         08:5b:4f:04:6f:62:08:ad:81:89:ad:5d:0c:83:6c:b8:cb:d6:
         0a:d1:ad:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:56 2026 by rpki-client