Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QQYdb9s_4dr3zuqGvj9hfvFBla8.roa
File:                     QQYdb9s_4dr3zuqGvj9hfvFBla8.roa (raw, json)
Hash identifier:          lqeQ1h9oEz/zTGDUczg4PCqsssw6ziCTN8PlGD/uAoo=
Subject key identifier:   41:06:1D:6F:DB:3F:E1:DA:F7:CE:EA:86:BE:3F:61:7E:F1:41:95:AF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1855
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QQYdb9s_4dr3zuqGvj9hfvFBla8.roa
Signing time:             Tue 31 Mar 2026 08:05:47 +0000
ROA not before:           Tue 31 Mar 2026 08:05:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6229 (0x1855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=41061D6FDB3FE1DAF7CEEA86BE3F617EF14195AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:f4:5d:30:ba:7a:d1:8b:1f:11:ad:5d:a7:
                    23:99:b7:df:ba:15:13:11:4a:93:60:71:4a:18:bc:
                    12:ae:2a:d6:c7:63:1b:ef:9a:4c:5f:e2:d2:30:8a:
                    bb:d1:86:09:15:39:ed:a3:b0:6f:50:e2:3a:0e:3c:
                    f4:35:1b:62:c6:bf:2b:99:cf:b4:92:91:ea:5e:d2:
                    8c:15:17:7d:de:11:b9:30:93:2a:ea:7a:27:63:71:
                    1d:1b:90:4c:71:6d:97:16:7c:8d:26:5a:43:08:9b:
                    37:aa:f5:9e:3d:f4:52:b6:8f:e8:fc:ca:b2:5b:b1:
                    31:5e:54:fd:e9:e0:9b:a1:ca:ef:65:40:81:9c:bc:
                    38:53:6b:c9:61:ec:ec:63:3b:7c:d8:43:1d:3e:e8:
                    d7:f3:40:e0:d6:28:67:50:25:83:e5:1b:fd:b9:4e:
                    e0:b6:9e:87:29:bf:fd:63:fc:4f:56:55:b2:86:8f:
                    aa:23:7a:07:32:12:1e:78:6e:b8:5b:33:6e:32:16:
                    ff:0c:20:a6:bd:5e:62:d4:0d:e2:c4:c8:c4:a9:28:
                    9b:4a:9e:a4:d9:bb:02:48:22:6f:33:33:f0:3a:cc:
                    72:78:37:0e:8b:3e:05:99:b2:e0:d0:dc:b2:23:d4:
                    fb:b3:eb:88:9c:72:1c:59:0b:b4:84:31:42:78:02:
                    a9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:06:1D:6F:DB:3F:E1:DA:F7:CE:EA:86:BE:3F:61:7E:F1:41:95:AF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QQYdb9s_4dr3zuqGvj9hfvFBla8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:ba:82:e8:76:68:db:84:ca:a8:99:95:57:be:ad:99:da:c2:
         76:d9:f6:2f:4f:bc:ee:ee:9d:f7:31:5d:cd:42:70:3f:e0:88:
         d9:66:5c:9e:41:bc:b4:d0:3d:41:04:99:7f:4c:8d:b1:cb:ec:
         ca:c0:29:d0:7b:fe:93:6b:61:85:7a:fe:fb:ec:91:97:20:33:
         c1:08:1c:eb:15:28:f6:09:da:bc:dd:37:56:5f:45:3b:10:cc:
         b4:5d:68:44:e7:04:65:6b:80:5a:e7:2c:1e:eb:d7:c8:6f:a8:
         41:d5:2c:9b:91:9b:fb:cf:fd:43:54:ee:1b:b4:6f:18:c9:5e:
         d4:b6:5e:a4:22:db:3a:19:ac:b6:19:cf:1b:6c:33:e7:dd:30:
         f2:09:17:4f:df:c1:85:13:80:8e:06:3e:20:9b:1c:74:50:9c:
         3c:0a:0c:06:48:df:b2:bf:cc:4f:78:93:ba:04:0f:cd:83:aa:
         b5:0e:9b:4a:10:4b:0f:d8:b7:16:09:a8:e0:c7:21:33:fa:96:
         5b:5e:46:c0:89:c0:90:da:9a:8d:a3:06:15:a4:0a:54:e6:2f:
         9f:8e:eb:14:21:00:29:7d:ac:40:77:d9:2e:b5:74:bc:da:b5:
         8e:e9:ea:63:00:94:83:2d:68:a8:f2:77:89:31:cc:38:82:6c:
         13:88:69:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:03 2026 by rpki-client