Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fUHxKuS_FkthLNNlu_9tmpLsSOo.roa
File:                     fUHxKuS_FkthLNNlu_9tmpLsSOo.roa (raw, json)
Hash identifier:          rpam6uctbCvV8xMYqdgYQGeSdtck38M6Tn/ZvtoHdQI=
Subject key identifier:   7D:41:F1:2A:E4:BF:16:4B:61:2C:D3:65:BB:FF:6D:9A:92:EC:48:EA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16B9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fUHxKuS_FkthLNNlu_9tmpLsSOo.roa
Signing time:             Tue 31 Mar 2026 08:02:23 +0000
ROA not before:           Tue 31 Mar 2026 08:02:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5817 (0x16b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7D41F12AE4BF164B612CD365BBFF6D9A92EC48EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:93:72:7f:1e:59:fe:a6:52:d8:68:c0:17:c5:
                    ba:3d:29:f8:58:cd:be:fd:69:b4:96:68:6e:52:0a:
                    2e:b3:3e:44:f2:3f:4c:aa:59:e1:06:5b:aa:99:7d:
                    e5:af:9d:54:04:7f:48:f5:f7:14:e7:86:d9:f9:7a:
                    f7:f9:b9:be:08:1a:b0:ca:f8:c7:51:32:3d:fd:a3:
                    32:7d:22:7d:d5:1a:84:fc:c6:e5:5f:62:4c:37:51:
                    d0:0d:30:92:93:88:56:2a:00:4e:ed:90:e2:d2:58:
                    28:3c:bc:8d:6f:e4:99:26:e0:18:d8:a7:e0:34:ee:
                    9f:2d:67:2f:fe:0b:db:8b:f2:d7:f4:10:03:be:43:
                    6d:cc:22:90:30:66:11:da:79:a5:63:76:63:1d:6c:
                    d0:df:4e:e8:c5:b2:38:54:ef:9b:4e:a7:5a:ff:e4:
                    51:2b:09:e2:74:51:3b:94:0d:45:d1:33:44:51:18:
                    56:1f:1d:af:34:43:8c:ed:af:19:f2:e4:0a:24:5e:
                    95:19:8a:ed:2d:b8:6d:50:96:18:3e:98:cb:ee:d4:
                    e8:74:b8:7a:d4:7a:22:a6:d8:66:31:da:b1:9b:d7:
                    85:8f:e6:2d:0d:54:45:ab:bf:fa:7e:69:32:c7:04:
                    12:f7:18:ed:c5:3b:da:b5:ad:8f:84:ee:9d:99:dd:
                    3b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:41:F1:2A:E4:BF:16:4B:61:2C:D3:65:BB:FF:6D:9A:92:EC:48:EA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fUHxKuS_FkthLNNlu_9tmpLsSOo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:93:f6:1d:ed:1d:fc:89:01:4d:e3:1c:d4:c2:8c:5e:e1:f6:
         72:3b:87:ed:61:be:3f:21:53:93:57:89:30:bf:a1:16:e2:c5:
         20:1d:42:b2:e1:bc:e4:66:5e:dc:d0:50:0f:e3:78:3c:4f:16:
         1f:13:f0:15:c8:c9:39:87:7f:10:89:1c:46:68:66:73:a3:5b:
         1a:f1:74:60:85:71:4c:bf:06:5c:45:56:fe:fd:36:00:af:88:
         08:7e:09:04:ef:55:23:d0:16:b5:30:5e:d0:2f:c1:d4:20:1d:
         4c:7e:51:b4:5d:7f:83:fa:25:e5:e8:23:06:32:41:75:c3:6b:
         38:e5:70:6b:ab:8b:cc:b3:2f:a3:61:c9:c0:f0:9e:5e:8f:6d:
         2c:a6:e1:e0:ed:94:c7:83:65:b6:f4:86:90:9e:c5:0b:1c:b0:
         6f:6e:2a:45:9d:52:5d:9e:76:75:6d:c1:4d:cb:87:3b:da:b2:
         eb:10:43:63:53:16:20:f5:f8:1e:87:10:55:fa:1c:a1:ea:cc:
         09:ce:fa:62:c4:7c:a1:fa:64:4b:29:a1:4f:e7:2c:bb:7a:89:
         ae:39:73:e4:31:75:4a:9a:ce:29:d0:a7:49:6d:ed:64:4d:1e:
         b1:be:4f:4d:23:dc:81:44:b5:5e:5a:2f:db:49:bf:6e:1b:33:
         82:85:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:05 2026 by rpki-client