Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/W4AehZgVmnvYHFsECbxXDzZAM7w.roa
File:                     W4AehZgVmnvYHFsECbxXDzZAM7w.roa (raw, json)
Hash identifier:          h1HGmI2qBWYHslbSigk4tn3w5ST5kVBcc5tFzJ1Fv00=
Subject key identifier:   5B:80:1E:85:98:15:9A:7B:D8:1C:5B:04:09:BC:57:0F:36:40:33:BC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17C6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/W4AehZgVmnvYHFsECbxXDzZAM7w.roa
Signing time:             Tue 31 Mar 2026 08:04:32 +0000
ROA not before:           Tue 31 Mar 2026 08:04:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6086 (0x17c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5B801E8598159A7BD81C5B0409BC570F364033BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f5:7c:10:14:d5:4f:6d:61:81:3f:5c:20:48:
                    e2:63:be:b9:ea:a5:17:e1:a2:1d:a3:4c:b9:aa:92:
                    36:26:73:82:ae:14:f6:02:83:b3:13:15:43:06:7f:
                    f4:4b:db:e3:0b:33:03:21:08:7e:04:36:d4:3c:54:
                    48:aa:66:c3:59:8e:70:83:39:57:2b:2b:cc:5c:cd:
                    3b:a9:ff:63:5d:92:98:a0:ed:c1:eb:22:e7:c7:8c:
                    59:30:31:b6:a7:14:59:4f:2d:46:07:60:c7:c0:5b:
                    76:82:b4:72:78:af:9a:ea:20:f7:4d:4c:bd:68:16:
                    13:98:04:e9:d8:8c:12:a7:72:b9:72:63:70:46:a8:
                    18:67:5a:78:17:78:cd:5f:19:04:03:eb:20:7b:75:
                    69:fc:6e:9f:3a:a7:cb:1d:11:a0:12:ec:ae:8c:cf:
                    53:2d:bc:02:43:45:24:26:4b:29:55:6e:2b:3b:82:
                    83:b8:41:92:a4:9c:31:c1:f5:65:b6:25:63:f5:2c:
                    2d:51:6f:8f:9d:be:d9:59:ec:d1:0c:12:3a:e7:8c:
                    cc:9e:d2:7f:f6:f4:6f:09:c5:45:e3:85:d3:03:55:
                    c4:97:3f:36:4c:44:08:ab:92:c6:ba:e6:30:ee:fa:
                    5f:ec:c8:5a:e5:e1:35:44:da:d6:b8:5a:56:9f:aa:
                    f3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:80:1E:85:98:15:9A:7B:D8:1C:5B:04:09:BC:57:0F:36:40:33:BC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/W4AehZgVmnvYHFsECbxXDzZAM7w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:77:f9:db:27:58:c0:c1:49:6f:a9:97:45:02:c8:17:de:b0:
         9a:f3:71:25:8d:d3:c7:36:0a:36:ad:23:24:ba:2b:d9:a5:6b:
         c9:19:d2:2e:cc:f2:8a:63:51:7b:f6:80:24:75:9a:fc:ae:28:
         04:e2:e0:0d:db:3c:65:c1:db:56:2f:53:63:87:20:c0:45:9c:
         1b:3b:ce:8f:1f:ab:ae:20:71:0d:0e:5b:94:7d:5f:e2:76:fc:
         2e:af:85:32:13:e0:4f:76:0c:dc:2e:74:e8:3a:1b:df:af:b5:
         d6:67:9f:c4:6e:c2:c0:0e:ed:9d:06:16:42:12:90:f1:a9:eb:
         1b:5c:7c:56:44:0e:a7:a5:a0:1c:a6:86:dd:18:5f:5c:b5:bb:
         f7:4d:5e:19:5f:2c:9d:6c:4c:a5:2e:6c:9d:84:8b:05:9c:50:
         65:54:73:bd:5d:b2:ce:29:9f:43:6d:fa:20:6c:3f:30:b1:2b:
         26:a0:36:7c:2e:a7:a0:eb:bc:c4:11:ae:c8:ad:25:d1:42:34:
         02:4c:76:a3:32:c6:e3:01:e8:4e:8a:bc:ed:5d:68:21:95:a2:
         3f:fc:c4:e4:79:be:4a:d1:83:a8:44:c4:e0:9a:a9:f8:7b:c9:
         50:fa:8a:c5:d6:53:79:7d:4f:01:60:b9:55:0b:79:34:be:0c:
         f2:17:64:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:56 2026 by rpki-client