Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_DKy6eiBktU4c2K72SdOTwA4kRA.roa
File:                     _DKy6eiBktU4c2K72SdOTwA4kRA.roa (raw, json)
Hash identifier:          pBfb5g6+ii94FOr8q/ko5CI6zFcSta/fV18Mp7XtWZ0=
Subject key identifier:   FC:32:B2:E9:E8:81:92:D5:38:73:62:BB:D9:27:4E:4F:00:38:91:10
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1558
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_DKy6eiBktU4c2K72SdOTwA4kRA.roa
Signing time:             Tue 31 Mar 2026 07:59:28 +0000
ROA not before:           Tue 31 Mar 2026 07:59:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5464 (0x1558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FC32B2E9E88192D5387362BBD9274E4F00389110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:a7:7e:8c:59:25:3e:28:fa:27:9c:56:c2:
                    a9:9a:a1:6c:9d:0e:bd:29:36:d5:e3:3b:7d:23:83:
                    2f:3d:dd:d9:47:02:ef:ef:d8:e1:98:9f:d5:83:22:
                    ac:5c:fc:84:39:2e:4f:c1:24:99:e9:8d:52:75:f1:
                    6d:31:3d:40:d0:79:86:20:2d:96:8d:96:7c:52:86:
                    42:ea:06:d7:55:05:b5:7e:84:f2:39:87:d8:d8:83:
                    55:ac:95:f5:8d:74:ec:71:a2:72:6f:83:38:b1:23:
                    bd:9a:6d:da:0c:01:54:7f:d6:0c:5f:66:dc:a1:ca:
                    d2:19:d0:72:8c:65:ab:75:5e:76:e4:1e:1c:16:4e:
                    78:ee:9c:e2:46:6f:0c:26:80:6e:06:e8:ad:a2:b0:
                    35:82:f0:62:74:27:e2:c5:96:d3:dd:f2:a3:e2:f4:
                    fc:f7:e4:5e:69:a7:97:1c:4c:ef:87:7c:02:54:ab:
                    3b:bb:93:1a:7d:70:60:ab:53:ad:82:92:92:50:12:
                    f9:1b:58:e8:d7:40:a1:d8:0d:4a:4d:5a:02:37:9f:
                    9b:e9:03:e0:b1:07:56:22:44:eb:7f:38:e6:da:cd:
                    f7:c4:22:70:2d:3e:52:ca:9e:ef:69:e6:3e:11:95:
                    33:50:7e:71:2e:57:99:4a:53:a7:20:37:4e:41:d3:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:32:B2:E9:E8:81:92:D5:38:73:62:BB:D9:27:4E:4F:00:38:91:10
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_DKy6eiBktU4c2K72SdOTwA4kRA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:56:71:b7:af:a7:13:8d:84:85:c5:bb:42:02:b4:23:20:d3:
         ba:de:03:19:94:95:fa:04:1d:cb:e4:48:6b:23:03:32:a6:32:
         e2:df:1a:f9:a5:32:5f:91:14:d8:86:0f:d2:be:de:d1:22:ef:
         1a:5c:04:40:e4:08:17:b3:74:54:37:77:3b:42:c4:dd:83:3e:
         b8:c2:e8:e9:7f:4f:5e:10:43:38:dc:75:b3:5a:55:26:c7:1d:
         15:e1:9e:cc:cf:0c:66:d2:18:20:11:b8:71:fd:01:34:7b:e3:
         c6:e1:00:dd:f0:a9:f6:d3:ef:f4:ac:61:9b:f3:5c:a0:ff:ad:
         58:ed:24:70:e2:8b:a6:1d:43:a1:8a:c0:e5:3e:a2:1e:86:b9:
         d2:02:5b:e6:f1:d2:51:71:fd:cb:98:1a:47:62:49:29:d6:99:
         73:99:9b:b1:00:c0:d3:18:dc:bf:78:2f:3d:47:43:7a:8e:ee:
         2d:0e:89:5b:af:0f:aa:ce:15:6c:55:5c:2e:e4:7b:83:7b:83:
         e1:87:5b:04:d4:79:d0:62:6d:7a:97:65:1e:3c:ef:b9:9c:0e:
         6b:8b:7d:d2:6a:99:e9:91:13:e0:d3:98:d1:1b:67:fd:5c:10:
         93:eb:22:7d:53:cb:5f:57:96:0a:34:6a:71:23:ef:6d:43:ff:
         48:77:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:02 2026 by rpki-client