Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/divqpjkUP2EmGla5sZ_Gz1jRqZM.roa
File:                     divqpjkUP2EmGla5sZ_Gz1jRqZM.roa (raw, json)
Hash identifier:          bdjDqeiL6zdlmP0tSVXhLR6B/iU9K4ku3aW73lWbFjY=
Subject key identifier:   76:2B:EA:A6:39:14:3F:61:26:1A:56:B9:B1:9F:C6:CF:58:D1:A9:93
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1755
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/divqpjkUP2EmGla5sZ_Gz1jRqZM.roa
Signing time:             Tue 31 Mar 2026 08:03:36 +0000
ROA not before:           Tue 31 Mar 2026 08:03:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5973 (0x1755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=762BEAA639143F61261A56B9B19FC6CF58D1A993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:c8:23:ba:43:1e:3b:00:ae:d0:8b:a2:99:
                    b7:af:df:0c:6e:be:e9:f5:43:6d:d1:2b:f9:a8:02:
                    68:a8:2b:e1:27:35:14:e2:2d:82:bc:13:83:53:54:
                    4e:9a:05:f8:1a:c9:4d:59:17:63:ce:ff:06:64:a2:
                    aa:c9:b4:40:7b:12:ac:ed:89:81:2a:a0:4d:fc:8e:
                    dc:69:f7:4f:19:ff:ea:32:94:14:25:b4:de:7a:4f:
                    98:5e:ff:4d:6c:2c:e0:35:bb:46:92:01:a7:be:6d:
                    dc:dd:2c:98:28:a0:2d:db:3c:cf:54:5f:32:59:1f:
                    2a:19:5e:b7:62:52:c2:88:a9:4a:ac:db:7a:4c:69:
                    9e:68:7a:5f:ca:77:0f:25:e3:6a:8f:8e:eb:76:e3:
                    7e:2e:74:3b:48:79:45:8a:c3:a8:43:1e:e0:ee:2d:
                    e9:e6:74:ee:7b:d7:e6:1d:7c:2d:de:54:2b:2d:b7:
                    7d:7a:de:5c:f4:87:e0:36:a2:80:e3:24:b8:dd:d2:
                    84:e9:c1:1c:cb:7f:1e:e0:44:b1:05:a6:0a:52:20:
                    b0:ba:72:f1:44:89:46:1a:e9:b9:33:f1:25:7f:9e:
                    b0:41:41:00:28:7e:72:53:62:20:e3:00:96:bc:39:
                    35:54:82:f6:49:14:6c:65:a2:99:c4:57:17:df:a4:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2B:EA:A6:39:14:3F:61:26:1A:56:B9:B1:9F:C6:CF:58:D1:A9:93
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/divqpjkUP2EmGla5sZ_Gz1jRqZM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:a6:ea:5f:3f:5a:dd:26:01:70:d5:6f:5a:d3:3c:96:19:ef:
         40:e6:34:59:6a:b5:96:58:3c:c7:a7:34:ee:42:bd:8c:3c:25:
         37:d4:04:8d:bd:a5:56:01:2e:6c:d2:2a:d1:68:24:cf:d2:74:
         74:5f:92:e3:91:ac:92:fc:96:69:b3:3d:b0:36:b5:4b:d2:6d:
         21:b4:83:d9:cd:38:f4:f9:44:86:c5:cd:62:82:72:ad:4e:0f:
         3b:dd:f1:65:a8:2f:d3:a4:ed:67:4a:2a:ea:d4:4c:e9:28:0c:
         f4:76:81:74:34:9e:c1:7c:35:18:df:ae:f0:9c:24:9e:51:b8:
         39:af:cb:53:50:47:3d:de:46:f6:25:5f:c9:1a:1b:05:aa:92:
         cc:a9:d4:89:1d:d2:62:21:e3:56:e8:f7:43:17:ff:29:41:74:
         80:ac:31:44:6d:5d:b5:9e:6f:db:35:79:4a:e1:59:9f:69:95:
         8c:8e:25:f4:b2:9c:e3:59:25:34:f6:b7:84:38:2f:a6:0b:ba:
         57:a0:3c:87:73:a8:5c:4b:d1:a4:ce:ae:21:38:da:4b:bf:7a:
         11:79:b9:8a:80:83:33:56:76:e4:f2:6a:35:56:ab:4f:43:19:
         a9:0f:3d:9b:28:d0:77:d9:25:77:53:62:91:cf:16:8b:a1:9f:
         5c:6a:3a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:34 2026 by rpki-client