Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Dv4FsfNyivr3j3RpU1ePDMls3w.roa
File:                     _Dv4FsfNyivr3j3RpU1ePDMls3w.roa (raw, json)
Hash identifier:          y8prCDRf5yCDelBDmYVFJPErG+naotbsAyqfY8zTlT4=
Subject key identifier:   FC:3B:F8:16:C7:CD:CA:2B:EB:DE:3D:D1:A5:4D:5E:3C:33:25:B3:7C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       159F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Dv4FsfNyivr3j3RpU1ePDMls3w.roa
Signing time:             Tue 31 Mar 2026 08:00:00 +0000
ROA not before:           Tue 31 Mar 2026 08:00:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5535 (0x159f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FC3BF816C7CDCA2BEBDE3DD1A54D5E3C3325B37C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:01:46:ff:fa:e9:4d:a8:42:c0:29:3a:15:
                    2b:03:58:c2:46:3a:b7:cc:91:ae:bb:cf:9e:8e:85:
                    28:fb:87:84:40:84:a2:54:c7:a7:78:ee:1b:ed:fe:
                    6b:24:f3:13:2c:f3:0f:05:d3:b2:00:4d:43:bc:47:
                    26:de:1b:7e:40:25:6e:84:09:de:56:7d:74:56:9c:
                    ba:40:95:a3:3c:dd:d2:66:23:d7:9b:64:59:f2:e3:
                    83:66:fe:9d:88:37:c5:86:35:4b:5c:eb:aa:79:cd:
                    8c:91:48:84:eb:0a:7b:41:57:0f:3e:a6:07:4b:37:
                    4c:1b:ed:05:02:3d:02:cd:c1:95:f6:1a:75:19:85:
                    87:4f:88:dc:9e:9d:66:09:40:14:60:d2:f4:60:20:
                    fc:a8:f6:ae:fa:6e:4b:e6:8a:6c:23:84:13:13:38:
                    b6:fe:ee:78:22:60:dc:a9:ed:f7:71:04:c3:8f:d3:
                    e7:c1:87:88:d8:33:fa:ac:25:10:25:34:a2:87:ea:
                    b8:94:cb:3a:34:5c:95:3e:8f:bb:3c:f1:f0:e7:5b:
                    2c:53:1a:56:23:78:c2:63:34:17:42:f4:58:7a:a9:
                    6a:d0:34:fa:8b:6f:0c:c6:11:48:1a:d9:c1:48:15:
                    03:56:52:72:19:0a:75:88:23:92:12:d4:7b:eb:c1:
                    0b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3B:F8:16:C7:CD:CA:2B:EB:DE:3D:D1:A5:4D:5E:3C:33:25:B3:7C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Dv4FsfNyivr3j3RpU1ePDMls3w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:56:b7:bd:e6:2c:de:6d:d6:89:88:86:3c:16:07:24:aa:
         fc:2c:ca:59:54:3d:c6:0f:ff:bf:bd:59:38:ce:3c:44:e4:05:
         8c:58:3c:7e:03:2a:1f:15:35:37:da:d8:de:aa:28:9b:eb:48:
         84:c7:73:fe:5d:28:7f:52:ac:16:58:67:07:e5:96:fe:8d:71:
         02:ac:d2:57:35:a1:e7:9c:28:f2:cc:20:54:4a:e0:ee:89:6f:
         cb:5f:cc:4e:a1:1b:23:66:56:2c:11:de:b8:36:35:71:1b:ab:
         e6:e8:2a:c3:40:49:56:0c:93:b1:84:13:36:ed:d9:cf:ca:55:
         dd:04:d6:a1:9b:1e:4d:5f:42:b2:af:bd:78:e8:9f:59:35:49:
         f1:02:56:ca:76:de:8c:7d:72:59:3b:db:3b:c4:bb:34:85:5a:
         47:49:b7:cd:74:53:f0:de:8a:63:d0:f2:ff:fe:34:ad:d4:c2:
         fb:8a:40:eb:cf:f6:e7:eb:ec:bb:38:67:1a:e9:d9:14:c8:f3:
         38:0e:24:ec:d9:2b:d0:a8:b9:c9:eb:bf:35:d1:b1:70:51:04:
         94:8b:ba:8e:22:bc:d1:b6:ee:7e:00:58:6e:b1:e4:e8:5f:73:
         81:26:7f:24:a4:50:be:3c:8b:9f:ce:3f:d8:53:c8:2e:49:92:
         2f:9d:79:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:41 2026 by rpki-client