Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TLmLZYpjvP_D5fTpVE4ylBZjo5A.roa
File:                     TLmLZYpjvP_D5fTpVE4ylBZjo5A.roa (raw, json)
Hash identifier:          KOfgtaiUcCDzy4B0ZQhLL81aQJJhym2iTbMk+Q93EXM=
Subject key identifier:   4C:B9:8B:65:8A:63:BC:FF:C3:E5:F4:E9:54:4E:32:94:16:63:A3:90
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1403
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TLmLZYpjvP_D5fTpVE4ylBZjo5A.roa
Signing time:             Tue 31 Mar 2026 07:56:42 +0000
ROA not before:           Tue 31 Mar 2026 07:56:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5123 (0x1403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4CB98B658A63BCFFC3E5F4E9544E32941663A390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:25:df:8b:f0:3d:47:85:0c:55:53:72:da:
                    89:2e:17:f4:a4:e8:e9:aa:bb:1b:bf:a2:53:4a:73:
                    d5:da:b6:1b:7c:02:a6:98:2d:59:dd:07:d2:0e:54:
                    51:11:fd:84:48:ab:9f:41:f4:dd:ad:11:14:dd:64:
                    d0:87:fd:44:fe:5b:a0:0b:c1:10:7e:c0:6c:d9:aa:
                    2e:20:31:6f:67:f9:61:9a:91:97:ec:39:13:c2:c2:
                    02:41:04:19:09:ad:63:3f:73:3f:3b:48:8b:fa:85:
                    b4:c5:0c:fe:4d:e8:11:f8:97:fd:89:be:ab:77:bd:
                    36:61:d2:b8:5d:69:ad:39:cf:dd:4a:41:60:50:52:
                    c8:27:1b:b1:24:05:e5:bb:56:c8:bb:0b:21:78:20:
                    5c:7f:09:e4:49:bb:10:a6:b2:e3:5c:6f:10:d7:33:
                    3a:59:5b:95:64:5a:76:07:09:08:7d:d4:15:fd:2f:
                    b0:e6:f3:d0:3f:55:85:60:9a:4a:31:48:dc:02:49:
                    43:af:f2:f9:1d:17:67:49:44:8f:4b:5f:c4:b5:5e:
                    a6:2c:a8:fd:55:47:99:01:27:9c:76:41:97:a3:19:
                    ea:fb:f5:14:65:0c:4d:7f:9e:d5:21:7f:ed:e1:a5:
                    8f:95:60:a1:a2:ba:36:63:7c:a4:c5:c2:c0:72:1b:
                    1c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B9:8B:65:8A:63:BC:FF:C3:E5:F4:E9:54:4E:32:94:16:63:A3:90
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TLmLZYpjvP_D5fTpVE4ylBZjo5A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:17:84:9b:9a:45:0b:28:ca:24:2c:d8:bf:59:04:f8:ac:27:
         6b:14:68:7d:dd:2a:bc:61:1b:b5:9f:af:ce:15:ea:47:cd:a2:
         1b:b9:c6:e9:9d:40:7a:38:2e:9f:fc:b9:bc:d2:9c:fc:fe:bb:
         93:f2:0f:77:3b:90:81:be:e1:0b:55:62:fa:9e:30:23:97:5f:
         24:e6:0e:3a:bd:c8:c2:f5:46:a4:f6:54:2f:b0:49:80:24:2b:
         c6:1f:2c:7e:8c:dd:16:0a:45:86:0a:8d:cd:36:f7:6b:8b:44:
         c5:b1:9a:ae:0c:ea:ed:f1:b1:38:13:88:94:b0:8a:99:6d:b1:
         3d:58:a5:dc:64:ed:cd:44:7e:f5:7f:13:5b:66:bc:4b:b6:76:
         21:d5:fc:fd:8d:8b:13:89:0a:a5:88:65:f0:69:b5:74:54:43:
         0a:8c:8b:60:d3:fe:05:b8:eb:c5:c7:45:98:94:3c:75:aa:9b:
         0d:fc:e7:75:21:04:0c:c1:d5:b9:90:14:c4:73:55:cf:e5:a6:
         db:7c:16:37:1c:52:7f:f6:a7:9f:9c:9c:b3:30:a7:dd:01:07:
         d6:03:d2:15:f1:0d:5b:0f:bb:04:e2:4b:8f:87:c7:e4:ff:60:
         c7:ef:9c:d0:12:e1:b6:c2:a3:98:fb:98:4e:20:53:32:dc:31:
         e1:72:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:36 2026 by rpki-client