Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dfSdzB_up11_7pXphpQL5DqmRc4.roa
File:                     dfSdzB_up11_7pXphpQL5DqmRc4.roa (raw, json)
Hash identifier:          aQ6fsD0j9AnSs/GYCQ5e9yOeT/QUlNPtYCgWcOiTJrQ=
Subject key identifier:   75:F4:9D:CC:1F:EE:A7:5D:7F:EE:95:E9:86:94:0B:E4:3A:A6:45:CE
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       AA
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dfSdzB_up11_7pXphpQL5DqmRc4.roa
Signing time:             Tue 31 Mar 2026 07:55:17 +0000
ROA not before:           Tue 31 Mar 2026 07:55:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        157.112.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Mar 31 07:55:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=75F49DCC1FEEA75D7FEE95E986940BE43AA645CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:f8:97:4c:a5:ab:6a:84:e0:99:fb:77:9e:
                    45:2e:37:43:71:f0:19:66:a7:96:1c:36:c6:e4:0b:
                    03:bd:d0:bf:77:a0:8b:7a:f0:12:62:da:83:0a:cb:
                    8a:70:92:14:29:b3:e8:c7:ae:f0:d0:72:6f:1d:af:
                    7b:32:a2:82:60:56:8a:27:38:87:f6:0d:60:9c:40:
                    46:2a:22:aa:b9:5e:78:c1:a7:b8:f9:30:5b:64:32:
                    42:fd:a8:f2:09:7c:b3:a6:55:c4:26:c5:4f:32:48:
                    66:42:a6:15:e6:a9:77:43:7c:d3:37:92:46:3e:19:
                    0e:0e:77:d9:ce:66:3a:50:a1:d9:a1:5a:e9:30:5a:
                    fc:21:e5:7a:72:81:9b:d9:58:0c:fc:c9:ab:ec:6e:
                    57:a1:bf:fe:07:57:b2:86:22:af:c9:46:59:22:f6:
                    80:70:f6:bd:8f:54:19:5c:e3:68:b3:1d:1e:cd:b3:
                    67:b3:88:e6:04:b4:79:a3:22:2c:2e:41:67:68:3b:
                    9d:8d:89:20:c5:73:92:51:80:d5:e0:f0:31:d3:f1:
                    ba:98:45:59:35:63:36:65:8c:dc:f7:c0:56:8d:e6:
                    de:43:f4:54:1b:09:d9:c4:33:d1:7a:a9:70:91:66:
                    fe:c6:6e:10:0c:c6:57:39:13:ab:44:ef:47:97:4f:
                    7a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F4:9D:CC:1F:EE:A7:5D:7F:EE:95:E9:86:94:0B:E4:3A:A6:45:CE
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dfSdzB_up11_7pXphpQL5DqmRc4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.112.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:95:53:ae:d3:e9:38:9f:f2:7c:8c:f2:8a:37:40:79:f9:c1:
         c1:f4:0c:7c:52:52:52:cd:42:8b:b9:a3:af:2f:80:cc:74:59:
         a4:f3:1c:02:5d:79:86:a4:56:33:25:61:d0:49:8c:b0:00:a4:
         58:16:41:10:63:a2:71:9a:26:05:d5:8f:d5:cc:5a:23:85:62:
         46:9a:f7:29:df:a0:ef:ba:e4:43:66:a4:6a:f6:dc:72:69:07:
         f2:58:65:57:05:0f:ca:4f:ab:28:e6:08:08:9d:ae:5a:c9:dd:
         d7:1c:a1:74:2c:4b:14:10:72:b2:d3:43:a6:88:a1:96:5e:a8:
         d8:c4:c2:69:71:a9:a8:8a:06:41:2a:87:bd:1d:2f:99:42:49:
         0a:85:9e:83:17:de:a2:ee:b9:84:38:6b:c2:00:4f:72:6d:70:
         a9:2a:71:c0:2f:98:7d:9b:86:31:df:a8:23:81:11:df:86:e7:
         94:48:ac:56:8f:d0:a6:06:f5:82:1b:1e:a2:54:60:03:7a:7c:
         78:d4:2f:81:b0:b1:ca:cd:a0:30:5e:71:b0:6b:6c:35:4a:98:
         a8:4f:1e:57:b8:c3:90:17:26:f4:b5:a4:67:51:ef:a1:e8:c5:
         43:1d:6c:24:89:47:e0:e9:23:1e:b5:d8:2d:6e:b9:f2:7a:a7:
         8a:be:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:42 2026 by rpki-client