Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q5EHvwowEiuj39c7U7Ye4nk0qC0.roa
File:                     Q5EHvwowEiuj39c7U7Ye4nk0qC0.roa (raw, json)
Hash identifier:          TAsa9KHMY49xBrk+zfaBlEvTdbXvGJUVweOgkFLT5Ng=
Subject key identifier:   43:91:07:BF:0A:30:12:2B:A3:DF:D7:3B:53:B6:1E:E2:79:34:A8:2D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1632
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q5EHvwowEiuj39c7U7Ye4nk0qC0.roa
Signing time:             Tue 31 Mar 2026 08:01:20 +0000
ROA not before:           Tue 31 Mar 2026 08:01:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5682 (0x1632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=439107BF0A30122BA3DFD73B53B61EE27934A82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:bc:4c:87:25:54:bb:29:66:c4:7a:a9:5a:
                    53:31:44:f2:cb:72:cc:a3:7f:f2:0a:32:9e:83:7b:
                    8b:54:3c:cc:c8:0f:3b:3e:1c:fb:be:6f:fb:21:57:
                    34:2d:51:2f:c5:16:97:cf:5b:69:62:2b:31:4e:32:
                    72:68:f1:a9:f0:3b:b4:44:b4:d1:c5:51:a0:44:48:
                    c5:75:ec:38:01:78:d6:07:15:58:d1:81:73:44:34:
                    ed:8d:7f:bf:65:7a:57:28:c7:ae:66:2f:03:65:46:
                    24:7a:f8:9c:4b:39:77:b9:7b:b1:65:8a:39:08:62:
                    fe:d8:d7:95:21:41:16:91:97:af:79:4d:be:c8:71:
                    fc:51:0a:f7:9f:4a:b0:20:2d:81:7f:cf:b3:2a:ed:
                    8d:39:8d:51:a6:79:b7:95:13:f0:f2:a8:e9:92:06:
                    f7:cf:ca:9d:25:96:68:2d:85:85:2f:d6:76:bc:c1:
                    3b:10:52:7c:23:d4:b7:ae:01:e1:2b:1b:ed:99:cf:
                    62:e4:59:2d:f3:ca:6f:3c:7e:cf:9d:d3:b2:5a:99:
                    b1:b2:1f:74:d7:4e:84:57:e2:ca:61:2a:24:81:26:
                    f9:35:6f:f5:12:66:51:a4:60:9f:33:77:ed:10:72:
                    09:60:99:da:da:f0:f0:1e:29:35:9a:2b:6f:aa:a2:
                    ac:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:91:07:BF:0A:30:12:2B:A3:DF:D7:3B:53:B6:1E:E2:79:34:A8:2D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q5EHvwowEiuj39c7U7Ye4nk0qC0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:e1:89:1d:03:91:04:10:69:24:f6:8c:43:84:3a:10:28:
         31:ac:8d:a4:bc:33:d9:52:01:4f:fb:1d:93:8e:32:46:a0:8d:
         65:83:88:43:95:51:0d:c1:e9:07:42:f6:3e:41:90:34:86:dc:
         5a:b8:eb:21:69:43:6e:d3:07:ca:d9:4c:86:4d:84:33:a4:16:
         7b:4b:d6:09:b8:f7:e5:76:50:7b:6e:d0:1b:af:ea:28:4b:1e:
         15:17:e8:45:82:17:db:52:5b:33:12:51:4d:4e:22:48:f3:a2:
         d5:c4:d8:9e:c4:f2:90:f1:14:b6:fe:c2:9a:d0:1e:0b:cd:a5:
         98:ac:01:27:ae:a7:b4:c3:52:c2:20:c6:8b:48:7f:c4:4d:df:
         46:83:0d:7f:04:8b:5f:15:c7:ed:85:c7:e8:da:5e:69:78:2d:
         01:df:cf:27:8c:77:2e:43:49:56:a6:98:1b:19:ca:99:9f:2e:
         66:80:04:20:c8:37:62:be:5d:21:9d:e6:26:fe:04:5e:93:cb:
         bc:05:bc:a9:03:c5:dd:c5:12:f6:11:64:22:13:96:99:1a:03:
         65:96:c9:97:1a:e9:33:2b:87:f2:95:7a:3b:ec:37:74:8a:ad:
         54:31:37:de:82:2b:3c:5a:4f:45:f7:dd:f7:95:bf:2c:40:d0:
         a9:c4:de:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:32 2026 by rpki-client