Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ur14vGUL0faCzk1KJbU2UzTWqyY.roa
File:                     Ur14vGUL0faCzk1KJbU2UzTWqyY.roa (raw, json)
Hash identifier:          ABfw4kcBETnjQL457F43SPgs3EiJ/diuEJhCouYaf8I=
Subject key identifier:   52:BD:78:BC:65:0B:D1:F6:82:CE:4D:4A:25:B5:36:53:34:D6:AB:26
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1704
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ur14vGUL0faCzk1KJbU2UzTWqyY.roa
Signing time:             Tue 31 Mar 2026 08:02:57 +0000
ROA not before:           Tue 31 Mar 2026 08:02:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.76.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5892 (0x1704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=52BD78BC650BD1F682CE4D4A25B5365334D6AB26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1c:97:91:54:fb:df:10:87:68:f3:eb:ef:5c:
                    90:10:9b:4c:ce:86:40:0d:c6:59:d6:74:60:3f:25:
                    53:e0:81:cd:97:95:b6:3d:35:80:0e:65:66:18:2a:
                    b0:02:7a:17:e2:a5:ca:37:ae:9e:22:c4:7d:fc:7e:
                    7c:58:c5:29:75:18:c1:eb:23:80:c7:61:a2:69:8f:
                    89:fb:b8:71:a1:1a:03:32:4c:50:31:b1:ce:b6:65:
                    61:9d:3c:f1:c2:9b:71:c5:e9:19:fd:1e:0f:33:a6:
                    66:49:6d:6d:bb:c8:ed:12:df:b8:77:c6:19:ea:ea:
                    21:d2:5f:e2:0a:6f:30:9e:c6:1d:7a:0c:a3:52:c0:
                    6a:e0:ad:2b:e8:d8:9d:c8:49:ff:d1:87:1d:e0:8b:
                    1f:e5:bb:27:6f:93:4d:a1:78:64:e0:6b:f0:0f:a5:
                    9d:7c:41:5c:a3:28:d7:c5:30:df:82:57:4b:40:76:
                    f8:f1:45:55:e0:a8:f4:05:73:1b:f1:dc:33:a7:78:
                    3b:74:ec:d4:d7:a9:13:93:69:c9:d1:39:47:9a:b1:
                    a6:5e:33:9b:6c:76:ec:7a:7a:c5:32:90:6f:fb:7a:
                    85:50:a5:ee:cb:9d:0b:a2:68:05:d0:31:11:35:a6:
                    a0:14:6e:0f:3f:af:76:ec:84:af:a3:52:17:33:c5:
                    b4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BD:78:BC:65:0B:D1:F6:82:CE:4D:4A:25:B5:36:53:34:D6:AB:26
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ur14vGUL0faCzk1KJbU2UzTWqyY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:8f:d0:b1:70:2d:14:a6:d5:58:94:b0:ef:f4:4a:98:8c:59:
         87:43:5f:82:e7:62:dd:f7:f9:bb:19:2b:4f:ef:27:a4:6d:e7:
         e1:d4:88:d6:d8:12:2b:fe:e8:75:b6:36:32:11:bf:00:de:dd:
         cd:45:4b:8f:b3:2c:51:58:b6:f8:ea:8e:10:41:43:a8:28:c4:
         cd:a2:03:f7:d2:0e:c7:46:60:46:bf:3b:c6:6e:14:a1:15:e8:
         50:5e:07:9e:61:93:5a:dc:4b:78:54:8b:50:f1:91:d4:95:ff:
         86:22:d4:7e:be:a0:1f:a8:a6:0d:f4:b6:5c:4d:77:ab:e1:3c:
         fd:71:88:e6:86:f7:51:72:b2:aa:4f:9a:c5:91:81:f9:e9:80:
         00:aa:2b:dd:85:de:7b:84:e4:a7:ed:8b:b6:a1:36:db:5b:66:
         81:99:82:e0:77:83:46:21:af:1f:6b:14:b1:fd:f5:2c:a5:31:
         46:2f:e2:16:3b:07:1e:c3:ea:3e:f2:e7:80:e0:77:87:c1:db:
         4b:ee:39:0c:10:7f:99:47:48:b6:88:56:d2:b5:40:71:84:c6:
         35:50:9f:3e:a8:b8:7a:3d:90:66:9d:ab:34:96:b7:aa:3e:19:
         86:75:20:1d:d0:f2:56:21:60:63:7c:6d:9b:d2:c9:37:b9:33:
         cc:84:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:27 2026 by rpki-client