Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RQ9cHqSh2MuehWqXtDp-QYl-QUk.roa
File:                     RQ9cHqSh2MuehWqXtDp-QYl-QUk.roa (raw, json)
Hash identifier:          CmOOLaPStVA7IbKI7pAmStt6WlaGm76Ps8rBW2ORow0=
Subject key identifier:   45:0F:5C:1E:A4:A1:D8:CB:9E:85:6A:97:B4:3A:7E:41:89:7E:41:49
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       182D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RQ9cHqSh2MuehWqXtDp-QYl-QUk.roa
Signing time:             Tue 31 Mar 2026 08:05:25 +0000
ROA not before:           Tue 31 Mar 2026 08:05:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6189 (0x182d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=450F5C1EA4A1D8CB9E856A97B43A7E41897E4149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:69:6f:58:9b:da:d7:13:df:9d:76:9a:b2:
                    99:c9:71:b9:9e:8d:5f:33:00:ba:fa:9a:98:2f:f8:
                    47:88:95:31:db:cd:65:ff:f6:83:ea:82:35:00:72:
                    56:8a:60:69:fc:ab:b9:e1:fc:d3:f1:02:37:e9:11:
                    fd:56:79:c5:ae:5e:d2:a3:96:a9:ac:c8:37:46:eb:
                    0d:51:ec:be:33:62:fd:db:32:d7:f9:3c:17:a4:f8:
                    ba:cf:e9:67:bf:89:da:0f:0d:5d:f0:56:26:3d:d7:
                    02:66:5e:b0:39:4b:19:cd:e2:b2:05:b2:1c:4e:12:
                    8a:76:92:00:ab:13:e1:e9:24:c4:10:63:7b:b1:3f:
                    f3:79:b3:88:da:1d:a4:23:10:1f:84:87:69:62:b2:
                    a1:20:66:c6:b7:16:50:11:7c:be:87:03:28:a1:b9:
                    a9:cb:43:c7:37:42:ce:6c:7f:9f:79:35:20:d6:d7:
                    74:35:9e:4f:24:0e:ac:dd:2d:96:e7:34:24:d3:5a:
                    12:da:d9:a5:88:be:49:68:63:d9:1d:8c:2e:06:ad:
                    c7:a0:e1:8e:d7:5c:6a:b9:ab:88:94:9e:d6:89:00:
                    89:33:62:21:fe:05:a2:9f:ea:b6:d7:a2:9c:5d:33:
                    77:bc:bb:ae:c8:e3:33:9a:a9:82:33:78:a8:8e:d2:
                    d8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0F:5C:1E:A4:A1:D8:CB:9E:85:6A:97:B4:3A:7E:41:89:7E:41:49
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RQ9cHqSh2MuehWqXtDp-QYl-QUk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b9:91:bc:12:39:83:5c:a3:e4:4b:90:c9:a0:3a:c9:7e:5b:2a:
         f8:2f:b3:e9:3d:3d:7b:46:eb:1d:8b:c3:50:6b:c5:3b:99:43:
         8b:f6:31:33:65:c7:59:02:76:12:10:ed:0a:38:b9:a8:2e:9e:
         ab:94:c0:23:69:ca:eb:8f:f7:be:67:5e:e6:45:3d:58:83:1c:
         2d:40:d8:0b:f3:e6:96:7b:86:ee:87:2f:d9:cc:44:70:39:0f:
         3d:e3:51:88:63:41:ff:f6:34:86:15:48:1c:b7:e3:65:4f:be:
         39:a8:24:05:eb:6b:03:9b:95:b0:15:b6:a0:a9:3a:20:8a:6a:
         26:50:a9:80:0e:1a:60:74:36:ad:3d:76:0a:c7:d6:ca:a0:c7:
         bc:39:c4:c7:62:1a:da:0c:e2:af:08:27:43:95:15:75:02:56:
         2e:90:32:fd:e1:92:b9:b1:0a:28:67:40:01:24:21:33:b5:b9:
         06:c8:09:a8:ea:7c:3d:44:07:5e:81:c5:d6:a9:6a:8c:82:06:
         5e:93:1e:9e:20:c2:b3:43:7d:d8:af:90:9f:68:15:9e:8a:69:
         57:bb:90:95:31:d2:62:ef:a2:bd:2a:1e:bf:b8:43:8b:0f:68:
         51:5a:72:6b:3e:58:eb:5c:c5:58:3c:2b:a8:4e:98:a3:1b:87:
         ea:31:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:39 2026 by rpki-client