Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/htaYAiZ99NcFcBuxR4Pos3zYZfg.roa
File:                     htaYAiZ99NcFcBuxR4Pos3zYZfg.roa (raw, json)
Hash identifier:          K//AzcvfLLYGUQJWc0Z/ubMwQ4GHq6uXXKYMqtbeaY8=
Subject key identifier:   86:D6:98:02:26:7D:F4:D7:05:70:1B:B1:47:83:E8:B3:7C:D8:65:F8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14E0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/htaYAiZ99NcFcBuxR4Pos3zYZfg.roa
Signing time:             Tue 31 Mar 2026 07:58:28 +0000
ROA not before:           Tue 31 Mar 2026 07:58:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5344 (0x14e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=86D69802267DF4D705701BB14783E8B37CD865F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:9f:fa:26:d3:20:54:a0:9f:c2:a1:a9:0f:
                    81:eb:08:d9:58:bc:f7:6e:2b:be:37:ef:5e:9a:63:
                    68:c5:8e:42:b6:c9:58:23:31:2c:f1:73:6f:13:7b:
                    67:c4:32:ba:cb:3e:aa:56:72:a0:d4:3b:5b:10:6f:
                    86:35:ea:17:cd:e1:c7:7f:b2:c4:c8:10:15:22:01:
                    71:7c:08:cf:56:b7:7d:6a:d2:18:23:86:b3:1e:b5:
                    b9:10:ee:b4:5c:f1:bc:bd:c5:8f:ed:19:77:17:00:
                    c4:07:48:ec:29:f3:4d:3a:b0:07:b4:e3:87:cf:45:
                    36:9d:bc:db:f7:e8:eb:7b:ff:d7:71:59:bd:d7:ac:
                    2a:09:e2:5d:4c:77:69:4e:c1:43:9b:b9:6c:83:32:
                    a5:a2:e9:4c:2a:18:88:f2:8e:75:75:51:77:a6:83:
                    f9:46:2d:4c:41:d6:1f:a9:49:b1:8a:fa:25:f4:82:
                    6c:a1:e1:7f:12:71:37:10:c4:4e:ae:07:5b:ea:c3:
                    94:0a:9a:99:e7:6b:ab:2d:b6:9f:34:1b:ea:78:f6:
                    83:73:a3:99:50:90:51:93:fd:af:ef:ad:d8:80:e5:
                    90:71:ac:fc:86:8a:f5:cf:ea:55:b5:81:9b:64:7c:
                    7c:c1:25:c7:03:a0:e5:44:c5:02:17:f5:4a:63:6e:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D6:98:02:26:7D:F4:D7:05:70:1B:B1:47:83:E8:B3:7C:D8:65:F8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/htaYAiZ99NcFcBuxR4Pos3zYZfg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:36:b9:15:8d:8c:e1:31:a9:f7:4f:61:4e:10:83:e8:00:67:
         23:5a:15:89:75:cf:23:ee:c7:97:fd:e4:59:4e:97:60:a0:6c:
         65:5a:00:1d:33:23:f7:65:0a:0d:cb:c5:ba:5c:04:27:4d:49:
         12:66:05:08:c1:6c:fb:9b:ab:a2:dd:21:06:40:b0:58:b4:5e:
         21:d9:ba:1c:95:7f:36:16:50:9c:63:a1:d8:14:b0:e4:60:f1:
         b1:bf:d7:d4:44:04:26:7d:3d:2e:21:33:c5:9f:2f:7c:62:5e:
         21:6a:a6:b3:a8:d0:38:a4:9e:7f:7a:84:24:68:63:f4:5e:0d:
         fd:b8:b4:ca:87:bb:7b:9b:32:37:f0:40:dd:e2:eb:82:d1:8c:
         d9:0f:41:73:15:a8:70:8d:f9:7f:ec:be:76:00:be:54:60:29:
         a2:d6:dc:71:77:3b:e9:c2:18:35:dd:2a:d5:e7:1b:ee:f2:6f:
         14:69:0d:37:42:19:55:b8:c3:07:2b:a7:fe:79:0e:0c:14:31:
         c0:f7:0b:ab:66:0e:22:7d:82:e1:71:23:0c:04:48:6b:c8:29:
         b3:11:df:8b:3c:fb:5c:1a:34:b1:f1:9d:17:50:9a:e4:27:41:
         fa:ce:85:bd:b7:e2:c2:a0:d1:7a:c2:bc:45:d5:1d:99:5d:da:
         9a:8f:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:34 2026 by rpki-client