Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZxnXTaNT9Yp-ynZzIIbLzERt75E.roa
File:                     ZxnXTaNT9Yp-ynZzIIbLzERt75E.roa (raw, json)
Hash identifier:          T6Jeppnhr6PQBVX7xT6rkUW0MyzZkdjRAV01V7Ri/EI=
Subject key identifier:   67:19:D7:4D:A3:53:F5:8A:7E:CA:76:73:20:86:CB:CC:44:6D:EF:91
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       A8
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZxnXTaNT9Yp-ynZzIIbLzERt75E.roa
Signing time:             Tue 31 Mar 2026 07:55:17 +0000
ROA not before:           Tue 31 Mar 2026 07:55:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        146.99.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Mar 31 07:55:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6719D74DA353F58A7ECA76732086CBCC446DEF91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:26:69:4b:63:4d:05:e1:25:69:c2:10:7b:
                    f5:6d:3d:2c:cf:4e:2d:64:73:75:89:8c:68:6f:b8:
                    a9:28:1f:b9:2d:83:a9:2a:69:e8:91:f3:af:7c:28:
                    07:88:fd:03:5a:e5:44:62:33:40:8f:53:01:3e:a8:
                    ad:30:c4:c2:0a:82:c2:d4:a6:0f:2e:b3:95:69:b8:
                    93:d9:5b:f3:bf:77:99:df:6a:a3:78:20:4d:df:49:
                    8d:f5:4b:39:a9:79:ae:f5:e7:34:fa:b4:85:83:56:
                    f5:d8:d4:74:18:d9:07:64:8d:a5:56:95:83:b1:56:
                    d2:f5:39:dd:3f:d9:98:43:40:cd:47:a1:f4:77:12:
                    9f:c9:ff:97:19:7d:86:9c:ce:76:ad:75:4a:50:2e:
                    22:6a:e2:4c:18:52:f2:84:d2:1f:d8:73:17:3d:11:
                    4c:bd:2b:8c:02:02:e2:75:13:4b:73:37:cf:6d:c7:
                    d2:0e:28:f2:21:da:07:64:14:4e:26:fd:09:ba:c3:
                    91:7e:c0:7e:d3:74:7e:c3:0e:51:47:b0:21:7d:4b:
                    d6:0b:c1:4f:94:64:6d:f4:ef:60:7f:af:33:a6:e4:
                    34:d1:7d:d0:bb:34:df:db:fa:16:b6:f1:39:db:9f:
                    34:a1:01:13:98:f2:fa:17:a8:23:74:29:1e:5a:79:
                    eb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:19:D7:4D:A3:53:F5:8A:7E:CA:76:73:20:86:CB:CC:44:6D:EF:91
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZxnXTaNT9Yp-ynZzIIbLzERt75E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.99.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         17:7e:eb:1a:9f:e9:22:d7:02:02:d0:f8:2a:72:dd:49:11:ee:
         a9:0c:c7:31:c3:a0:c6:30:7e:84:d2:2c:81:02:cc:1d:a7:86:
         18:33:4a:90:2b:8d:d1:bc:64:d9:e5:bc:f9:5d:92:e6:53:41:
         2e:4e:62:e8:06:43:b4:80:ee:63:c6:e9:72:16:98:b8:91:09:
         94:4c:23:dd:c5:05:b1:1a:78:dd:2b:ff:64:44:4a:d8:0a:e2:
         32:75:54:e8:94:13:d0:92:7d:46:96:b0:2f:b6:cc:12:e3:b4:
         da:bf:e3:63:cb:17:be:84:3e:aa:42:3f:4b:3b:3e:a7:e5:00:
         76:57:d7:91:af:1f:b0:72:18:2d:09:1e:4d:c6:8b:e4:bd:01:
         7f:35:73:d2:f4:76:e2:7f:4a:b5:02:58:ae:45:77:73:57:17:
         48:cf:fa:2d:6d:a4:b1:85:5f:af:59:2e:d9:a6:4e:58:42:aa:
         9b:d4:9f:1f:a9:fe:06:0a:00:3f:12:f7:48:6b:25:ee:c3:f5:
         89:bd:16:ff:44:5b:96:90:e1:11:f8:51:e6:83:74:dd:a7:01:
         cd:46:5e:31:99:2b:a8:4c:e8:f2:46:5b:de:ad:07:24:8a:65:
         4e:f7:1b:45:11:ae:e0:ca:4e:da:16:22:8e:ad:60:93:ce:a4:
         35:41:5c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:08 2026 by rpki-client