Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XMKmy_c3WC-VdLTSTiry4gsJ7HU.roa
File:                     XMKmy_c3WC-VdLTSTiry4gsJ7HU.roa (raw, json)
Hash identifier:          T+v5I1mkeV1wqEhSwIrV2JxBf/Y8AoOxeLRF6EGggM0=
Subject key identifier:   5C:C2:A6:CB:F7:37:58:2F:95:74:B4:D2:4E:2A:F2:E2:0B:09:EC:75
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1758
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XMKmy_c3WC-VdLTSTiry4gsJ7HU.roa
Signing time:             Tue 31 Mar 2026 08:03:37 +0000
ROA not before:           Tue 31 Mar 2026 08:03:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5976 (0x1758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5CC2A6CBF737582F9574B4D24E2AF2E20B09EC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d3:1e:33:2e:2f:e3:4e:92:22:9a:a3:2c:6f:
                    2d:0f:eb:c4:24:10:56:72:d4:9d:86:0f:ea:69:b5:
                    a3:5a:1a:24:22:36:65:64:91:51:70:2f:b5:c7:7e:
                    0d:56:6a:af:d5:ff:6d:81:06:1e:b2:89:07:ba:33:
                    94:16:a5:ee:73:84:5d:1e:5c:17:30:90:e1:cf:40:
                    8e:06:14:54:86:c7:78:bf:3d:25:8d:5d:a4:80:df:
                    0e:9c:9c:75:69:5b:30:3c:3a:4d:9f:0f:49:11:66:
                    f9:16:0f:02:6b:5e:3d:1e:66:4d:c2:b6:32:d4:50:
                    0b:83:4d:92:84:77:68:9d:35:8f:2e:77:90:5b:ce:
                    6a:ea:ad:eb:1f:cf:60:4b:e8:7c:85:a4:3a:c3:65:
                    88:05:bd:25:c3:58:ef:96:ef:02:40:97:93:6b:8d:
                    bd:bb:ef:fa:c8:09:b9:35:57:2f:64:a8:20:30:0a:
                    29:72:66:2b:83:40:0a:17:bd:15:ce:88:cf:06:66:
                    d2:f4:1b:1e:a0:e7:78:0d:ec:b4:fd:83:d5:02:6b:
                    ca:69:fb:3d:70:9e:f8:38:31:9d:07:d5:e6:2d:92:
                    e7:d4:48:01:92:bc:ff:8e:d6:39:84:c0:53:c5:0a:
                    ca:32:c5:50:1d:d9:65:9d:09:7c:23:db:25:fb:5f:
                    6f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C2:A6:CB:F7:37:58:2F:95:74:B4:D2:4E:2A:F2:E2:0B:09:EC:75
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XMKmy_c3WC-VdLTSTiry4gsJ7HU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:b4:a5:e1:b8:d7:d1:33:8a:ea:f4:cc:cc:9c:75:db:7a:
         76:9a:00:96:6a:03:83:49:05:3e:94:25:c9:83:ce:7e:ec:df:
         ce:91:58:ab:38:3b:31:b2:de:b0:7e:8e:32:99:4e:d9:e9:7f:
         d3:f3:bb:77:81:76:d1:57:b3:48:26:c1:ec:62:97:f3:d7:4b:
         29:7a:ff:30:ac:cb:45:72:4e:09:7e:fa:a3:0c:e2:89:4a:24:
         99:3e:ce:a8:80:69:09:7e:21:6b:0c:71:2c:06:e3:ef:6a:f3:
         a6:03:43:d0:ae:e8:aa:82:fd:77:56:23:f0:3c:23:7e:40:50:
         47:92:5d:c7:23:06:34:e4:60:ec:55:b5:3e:38:f0:ee:0d:b4:
         25:5a:55:c3:2a:10:80:9b:e2:d2:65:33:43:40:87:d2:bc:0d:
         4b:33:c1:64:c0:90:ed:53:95:67:59:87:4a:c3:6a:02:1b:20:
         73:41:fb:39:55:ff:ae:6f:a7:fe:46:cc:ca:13:78:d4:c1:bf:
         08:76:85:25:18:8b:4c:15:27:52:03:7e:72:12:78:a6:95:24:
         53:04:4f:9d:92:80:15:d3:77:4c:90:b0:55:82:09:9a:f5:0a:
         56:c9:8d:a8:54:e5:d9:5a:27:33:7c:3f:a6:f7:60:89:ed:4b:
         78:6d:7d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:38 2026 by rpki-client