Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/V88J6vrltvdusUCV7whCJg6JW7k.roa
File:                     V88J6vrltvdusUCV7whCJg6JW7k.roa (raw, json)
Hash identifier:          SxDW5gwkmDnfrQSuXINCTVgU9yskoFBI7R5UiWBMPSM=
Subject key identifier:   57:CF:09:EA:FA:E5:B6:F7:6E:B1:40:95:EF:08:42:26:0E:89:5B:B9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16AA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V88J6vrltvdusUCV7whCJg6JW7k.roa
Signing time:             Tue 31 Mar 2026 08:02:15 +0000
ROA not before:           Tue 31 Mar 2026 08:02:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5802 (0x16aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=57CF09EAFAE5B6F76EB14095EF0842260E895BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:1b:51:0b:7f:5a:54:c1:7a:46:be:1b:48:
                    40:25:47:02:40:d5:86:d0:31:42:63:06:83:12:1b:
                    be:f7:44:b6:78:4d:87:80:9b:1f:55:3c:7d:e1:08:
                    73:6c:43:04:dd:7c:b8:26:cc:0c:b0:5a:4e:64:6b:
                    6a:b5:e4:da:70:d8:75:6f:d1:1f:6d:b8:cb:6f:6c:
                    e7:e0:8f:b0:98:ad:01:4a:d1:ca:6b:48:a2:3d:fb:
                    16:08:26:bd:5d:7d:c8:af:e6:ea:1b:b4:c6:67:94:
                    20:f6:ee:6b:43:82:97:1d:74:2a:36:dc:09:12:71:
                    5b:0e:31:27:06:53:97:14:55:7a:3c:b5:d1:78:b9:
                    64:4e:0a:96:47:c1:df:25:e7:de:08:e7:4a:20:65:
                    99:2c:3b:5a:a7:b1:84:f9:66:37:34:b5:0f:5e:a0:
                    f3:81:6a:1e:d4:f1:34:36:96:03:48:f7:95:13:ca:
                    a1:36:6b:29:21:c4:0d:e8:1c:51:45:8e:55:85:9f:
                    0d:12:e8:19:ba:eb:4e:ae:4e:5b:b1:5d:98:1c:56:
                    20:78:10:0a:1e:8c:e5:d5:fe:b9:77:cd:ad:f1:6d:
                    8b:6c:36:55:ad:e3:84:fd:53:b2:1c:3d:b2:30:32:
                    60:38:d0:37:38:d9:c4:b2:6d:93:1a:93:8d:3a:f4:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CF:09:EA:FA:E5:B6:F7:6E:B1:40:95:EF:08:42:26:0E:89:5B:B9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V88J6vrltvdusUCV7whCJg6JW7k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:30:6e:c7:23:3a:7b:38:88:cb:0e:67:bc:ba:1d:ed:f2:b8:
         74:9e:d6:bc:85:57:52:04:bc:cd:64:63:24:02:43:be:06:7f:
         d6:a0:53:68:7f:f9:a5:2e:49:ae:b2:5f:94:19:99:bf:14:8e:
         a7:75:45:66:d7:bd:e5:7d:60:89:d6:0b:d6:f9:82:1f:19:58:
         ac:87:07:da:8e:1c:5e:d5:c9:95:df:92:f8:67:f6:a7:69:93:
         a5:6d:c6:d0:77:bd:5e:75:87:e5:4a:b6:3b:c5:5d:7e:a6:4c:
         b8:c7:cb:96:2c:93:8a:1d:b3:be:58:3d:99:b8:0f:29:a6:03:
         42:8c:5d:85:5d:64:e5:0e:93:09:a9:08:ee:df:ec:5d:e3:06:
         9b:bd:f8:46:b1:00:54:27:0b:4b:db:ab:57:f3:9d:91:ae:4a:
         78:c5:ed:fb:22:65:db:7a:f4:44:ef:5a:04:cd:83:da:82:0a:
         d1:ff:de:96:83:bf:52:b8:69:f0:26:12:54:26:3d:5c:a4:c9:
         f3:29:15:a1:50:3a:2b:b9:79:51:2b:87:55:81:67:66:00:14:
         9d:27:fd:8a:9f:1e:28:22:19:c2:0e:d7:27:0f:b9:8b:82:b8:
         fc:5b:9a:b5:99:f7:c8:c2:ca:cf:33:15:88:09:f8:34:12:56:
         66:52:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:17 2026 by rpki-client