Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gqAjjfJlKwpD3xnkbYVnX6k2jzs.roa
File:                     gqAjjfJlKwpD3xnkbYVnX6k2jzs.roa (raw, json)
Hash identifier:          6tYUNaBrhygBDxwwXoksyavfCgxFVzwjU9qviqnp/Qo=
Subject key identifier:   82:A0:23:8D:F2:65:2B:0A:43:DF:19:E4:6D:85:67:5F:A9:36:8F:3B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1837
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gqAjjfJlKwpD3xnkbYVnX6k2jzs.roa
Signing time:             Tue 31 Mar 2026 08:05:30 +0000
ROA not before:           Tue 31 Mar 2026 08:05:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6199 (0x1837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=82A0238DF2652B0A43DF19E46D85675FA9368F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:c3:33:bc:9d:68:6d:99:dc:8d:97:58:1e:
                    3e:a3:4e:ce:2a:e2:e6:a5:fb:69:4f:b7:5b:b3:1a:
                    b7:66:a2:7d:4d:ef:bb:9d:ba:f1:4b:8c:bc:b2:d9:
                    67:dd:aa:5a:fd:60:91:ed:ed:45:cc:44:52:d5:b6:
                    e5:0c:ad:10:9e:56:cf:16:04:eb:3e:d6:c0:aa:24:
                    a8:f5:7b:ce:8a:cd:16:f1:bc:b1:bc:59:3a:a6:7c:
                    8a:06:c2:3b:7d:c5:df:58:9d:7e:95:fc:47:2c:f9:
                    12:37:a6:71:04:67:00:75:da:3e:d5:b2:c5:c1:6b:
                    e4:45:08:cd:2a:6e:f6:2b:21:7d:b0:88:e8:1a:99:
                    b3:5b:84:be:8e:dc:84:7c:26:5a:ac:00:66:3c:1d:
                    9b:c6:8c:f9:f9:ab:0b:73:b7:41:89:22:85:89:d5:
                    0c:71:90:f7:79:a7:02:41:7b:10:f0:72:e3:95:13:
                    50:e0:dc:cd:af:00:d0:4d:9d:f6:6d:9d:5d:e7:ff:
                    08:7a:cf:a2:7a:19:1e:07:cf:7b:c6:9d:9a:9a:c6:
                    b4:c1:f8:03:7d:8b:08:22:46:4e:c6:88:03:10:10:
                    11:e4:7d:ac:ab:b3:1f:75:6a:1e:a3:96:20:2f:f0:
                    e3:e7:69:11:cf:fe:df:4a:61:53:f7:4e:f4:63:c8:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A0:23:8D:F2:65:2B:0A:43:DF:19:E4:6D:85:67:5F:A9:36:8F:3B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gqAjjfJlKwpD3xnkbYVnX6k2jzs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:bd:2b:96:0d:c8:87:1e:c1:bb:d7:73:09:a1:58:1e:14:a0:
         a2:d8:fc:f5:30:12:3b:96:e4:88:79:e5:97:af:7d:b2:d2:83:
         ed:74:cb:0e:29:89:9a:02:07:fa:82:f4:98:e4:1d:ad:3a:e5:
         84:69:de:91:ef:43:df:89:de:6e:22:21:48:2c:e2:72:32:af:
         10:f8:b1:ba:a2:be:8b:64:ac:4a:65:11:f7:1a:13:1b:34:87:
         4b:c8:a6:04:74:40:d3:ef:49:59:81:1b:ee:e2:68:29:e3:c6:
         09:5e:b8:d8:3c:75:43:38:8a:96:cc:54:dd:e5:76:66:5b:a8:
         90:0f:f1:0b:04:1b:a1:da:65:9c:5f:d7:c9:46:b7:33:88:6e:
         87:b6:06:38:b4:7a:78:63:3a:f0:f3:8b:d6:64:53:fa:de:96:
         c8:da:74:48:07:87:21:64:fe:88:f6:b9:c3:25:03:6b:b4:00:
         f5:03:dd:53:56:b7:cb:50:a4:0d:77:c7:83:eb:90:ee:c9:cc:
         34:49:56:ad:bc:b6:20:b0:e9:77:9f:df:ec:20:10:6a:fe:87:
         77:27:40:38:76:3f:c0:9f:cc:35:1c:0c:c1:d8:c3:8f:d6:85:
         34:02:e6:34:e3:5f:e9:d8:34:b8:f9:e5:9b:1e:e4:12:b2:c9:
         1d:3b:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:42 2026 by rpki-client