Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_7RH80opOf1Bvua-g7ZDYf-vXq8.roa
File:                     _7RH80opOf1Bvua-g7ZDYf-vXq8.roa (raw, json)
Hash identifier:          FAyo2wDvBkKIu0UWdYEdyTRK1XvvLaXXeFcccZnHSEs=
Subject key identifier:   FF:B4:47:F3:4A:29:39:FD:41:BE:E6:BE:83:B6:43:61:FF:AF:5E:AF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       184A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_7RH80opOf1Bvua-g7ZDYf-vXq8.roa
Signing time:             Tue 31 Mar 2026 08:05:40 +0000
ROA not before:           Tue 31 Mar 2026 08:05:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6218 (0x184a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FFB447F34A2939FD41BEE6BE83B64361FFAF5EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:01:13:92:fb:94:b0:e6:77:c4:b1:9c:68:c3:
                    d2:57:44:d5:b7:96:12:f2:15:99:ba:d6:e8:e4:30:
                    6a:29:6a:57:f4:94:7c:6e:56:43:11:c3:32:5d:d4:
                    bb:c4:37:23:dc:ae:fc:1f:48:2d:c0:07:d1:64:47:
                    a6:5f:97:b1:d8:5b:a8:b7:02:f5:71:61:b0:91:c2:
                    be:72:f4:a7:aa:cb:fd:16:4c:32:99:24:e4:f2:b0:
                    cb:53:08:fd:25:48:ae:6d:9a:f7:a5:f3:89:92:d1:
                    2b:44:2b:34:75:ce:04:50:0d:46:fe:85:eb:90:e5:
                    40:f8:67:c5:05:d6:26:67:1f:a3:6b:ce:24:97:b7:
                    13:8f:b9:06:83:5d:1a:50:cd:d2:09:e1:5e:c4:ed:
                    00:d0:5f:c8:ed:7f:85:8b:55:8d:ee:ef:d0:70:ad:
                    6f:a7:fc:28:49:45:b0:e9:f0:56:6c:d4:ea:45:1b:
                    34:4c:97:97:bf:b7:9b:41:98:43:91:99:3b:80:0e:
                    60:a3:d1:ed:45:2c:e1:3f:79:6b:41:80:c8:33:b9:
                    ba:93:06:09:a1:0b:02:18:9d:f4:fc:4b:ec:f3:b5:
                    d5:7f:5d:75:d4:6c:92:61:1c:10:93:28:9b:4c:35:
                    7f:bb:31:f5:7c:9a:f2:a1:3b:5c:62:e9:c4:8a:67:
                    a0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B4:47:F3:4A:29:39:FD:41:BE:E6:BE:83:B6:43:61:FF:AF:5E:AF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_7RH80opOf1Bvua-g7ZDYf-vXq8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:b9:f6:d2:86:09:a1:b1:48:63:90:23:99:b6:2b:1d:78:20:
         0a:06:21:cc:3f:ff:1f:ca:45:f0:97:f3:61:17:e1:df:12:ce:
         25:da:09:1c:9f:e4:cd:01:a6:2f:7c:15:da:a0:36:67:41:88:
         5a:bf:bb:1e:38:94:3c:6a:4d:df:4d:13:0f:56:e6:d3:cc:e6:
         36:2c:03:b6:72:8e:32:12:c2:43:2a:67:86:e7:3a:8f:1d:3c:
         1a:c8:5c:5b:0c:d5:02:1f:01:07:62:a3:06:59:68:12:20:db:
         20:66:88:a5:97:66:20:a4:26:a4:0d:6f:3d:48:9a:77:90:b8:
         3f:ff:b9:5c:d5:44:c3:ed:a0:db:43:bb:38:4c:fb:5b:c6:16:
         65:a6:82:97:7e:be:76:b7:b1:32:8c:c9:49:d5:10:c9:4c:d6:
         af:16:71:b1:f3:b4:c4:5c:8c:bc:49:a7:d7:5f:45:c0:6c:7d:
         6f:a9:3e:8c:e1:3e:da:62:1b:2a:49:fe:9f:b7:0b:e4:91:8c:
         29:b0:51:db:86:94:34:14:40:24:ee:6e:ad:c7:37:1c:38:20:
         86:59:0c:ab:3e:01:7d:57:ac:5c:1e:dc:19:25:7d:90:f1:a1:
         91:0a:48:e6:e0:49:d3:dd:64:66:ff:1a:f4:35:3c:e1:a8:bf:
         bb:19:97:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:00 2026 by rpki-client