Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RkII5dBOuxPLPSiRd7YawNP1kWY.roa
File:                     RkII5dBOuxPLPSiRd7YawNP1kWY.roa (raw, json)
Hash identifier:          ZzkDyMU5BfPECoWEouISOedTEXrDEqxZNgkD+VqBjms=
Subject key identifier:   46:42:08:E5:D0:4E:BB:13:CB:3D:28:91:77:B6:1A:C0:D3:F5:91:66
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16C7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RkII5dBOuxPLPSiRd7YawNP1kWY.roa
Signing time:             Tue 31 Mar 2026 08:02:29 +0000
ROA not before:           Tue 31 Mar 2026 08:02:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5831 (0x16c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=464208E5D04EBB13CB3D289177B61AC0D3F59166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:87:0d:fe:17:a7:42:ae:41:f6:9c:95:cd:
                    fa:96:60:90:e4:f9:46:2c:79:12:e9:7e:bb:22:ab:
                    92:cc:6d:35:3e:89:e1:f0:00:3a:86:28:26:c9:0d:
                    39:90:1f:2d:6c:5e:74:7c:d1:c7:16:65:7c:31:57:
                    37:a3:34:7f:1c:d2:56:8d:ce:cb:c7:7b:54:21:b0:
                    fb:fc:8d:4d:c0:a1:3b:e9:83:fc:8b:1a:ac:2f:1f:
                    bd:0d:55:bd:dd:c8:7f:e3:d3:4e:98:78:7d:cc:b0:
                    18:f2:82:9f:84:d5:11:80:e5:a0:21:05:c7:d8:63:
                    99:fc:8c:c8:f3:02:63:ad:20:2c:86:85:50:82:a8:
                    ba:9f:02:f7:f8:63:fb:f1:f0:3f:76:c5:96:ff:5e:
                    c8:7f:2a:e9:18:38:6b:3b:a6:53:7a:f6:c0:9d:0b:
                    95:72:4b:ad:41:13:16:c5:d3:9a:a7:fd:3c:86:08:
                    1e:2c:d1:9b:3d:ed:75:f3:e2:24:e5:40:81:3d:8f:
                    46:6d:09:6d:d6:7e:62:fb:cb:54:65:4e:d5:60:60:
                    a3:5f:c9:33:48:20:ff:26:58:f6:e4:25:f3:1c:62:
                    72:31:51:d3:1e:ef:65:12:54:49:9a:b0:d3:69:48:
                    67:50:49:4c:e3:62:75:aa:00:26:9c:65:5f:d6:dc:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:42:08:E5:D0:4E:BB:13:CB:3D:28:91:77:B6:1A:C0:D3:F5:91:66
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RkII5dBOuxPLPSiRd7YawNP1kWY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:09:68:62:62:78:ef:42:05:f5:83:63:e9:d3:3e:89:11:be:
         34:44:38:6a:51:b4:09:69:4c:5a:2b:b4:28:1c:7e:60:91:4e:
         ec:94:d7:04:e3:72:35:3b:8e:69:32:dc:9c:a1:4c:6a:04:91:
         1f:2e:22:60:8f:4e:65:d5:43:ac:e2:3b:77:e1:4c:09:25:53:
         fd:c3:cf:62:dc:d7:dc:d4:6f:9e:5b:f1:d5:7d:a9:9f:69:1f:
         39:fa:89:fb:0b:b4:ed:c1:48:7a:fc:55:e0:af:8b:a7:f5:41:
         25:1b:31:75:fe:b5:cf:48:32:ec:08:67:24:d0:eb:76:ee:4a:
         ca:a6:b3:c5:16:f0:43:a6:86:a6:d7:bd:f9:6b:d4:c3:64:ce:
         67:98:da:0a:71:bb:af:26:a7:e9:28:17:af:e3:05:66:8f:ce:
         86:79:f2:30:4b:22:77:e7:06:bc:bd:ae:f4:5c:80:50:d1:3d:
         40:d1:f4:4f:29:c2:d8:60:8a:08:07:aa:b6:6e:87:a2:7f:ec:
         8c:af:26:7e:de:c0:30:69:24:41:0f:92:17:d7:22:cb:40:e5:
         80:d5:ba:4d:09:77:30:9a:67:ba:86:5a:a8:c1:1f:c4:bf:41:
         09:87:cb:61:d4:22:f9:e6:52:f4:fd:a2:cb:53:9d:5d:55:f8:
         68:d9:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:52 2026 by rpki-client