Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/i3sovfpnRk7LKInVmo4IFb0RbAE.roa
File:                     i3sovfpnRk7LKInVmo4IFb0RbAE.roa (raw, json)
Hash identifier:          HMgJa/XjVGAohNfTgf8FqGu9U2rt5+HfqWsMTa9Q+xg=
Subject key identifier:   8B:7B:28:BD:FA:67:46:4E:CB:28:89:D5:9A:8E:08:15:BD:11:6C:01
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1393
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i3sovfpnRk7LKInVmo4IFb0RbAE.roa
Signing time:             Tue 31 Mar 2026 07:55:52 +0000
ROA not before:           Tue 31 Mar 2026 07:55:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5011 (0x1393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8B7B28BDFA67464ECB2889D59A8E0815BD116C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:2f:7c:23:bb:72:3b:b9:e6:fb:fe:d9:6a:
                    80:2f:b3:04:3e:3f:59:2d:07:3d:0e:d7:34:86:60:
                    14:d7:21:0e:47:97:f3:94:6b:3e:6a:94:84:ac:15:
                    74:f6:5f:69:78:9e:50:61:54:27:48:aa:bd:a8:f5:
                    02:12:c9:4c:af:b4:a0:8e:f8:94:dc:7e:d2:60:a8:
                    9d:5e:cf:80:10:ba:25:6e:4c:47:8c:07:c9:1e:d1:
                    d0:69:f0:27:01:d6:e1:6e:f4:98:44:ab:14:ea:d0:
                    07:30:4a:d6:26:09:94:ce:9f:d1:cb:64:af:1f:1c:
                    22:d7:84:c3:55:00:f3:ec:7e:a6:77:5a:1b:69:6e:
                    78:17:a2:16:23:8b:b9:e0:7a:0a:94:d5:91:54:ed:
                    68:7c:fa:dd:ca:eb:6a:76:d1:ad:d9:80:4f:d3:fc:
                    e1:04:e1:d4:9e:85:0b:70:fb:8c:21:73:b0:7c:67:
                    f3:78:16:6d:2b:e3:c2:7d:9b:55:07:01:71:cd:24:
                    6c:2d:5a:58:a1:30:6e:12:56:38:75:3c:e2:05:07:
                    96:df:e2:1f:b6:06:a6:15:cc:d9:a2:67:a5:c6:77:
                    27:1e:84:76:34:b8:75:12:35:34:72:6d:0a:80:77:
                    91:1b:82:13:5b:4e:08:a0:40:08:a2:68:3d:b3:85:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7B:28:BD:FA:67:46:4E:CB:28:89:D5:9A:8E:08:15:BD:11:6C:01
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i3sovfpnRk7LKInVmo4IFb0RbAE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:af:52:c1:5d:a1:1e:73:ee:62:9d:c1:63:ee:53:75:93:
         f3:52:15:ed:77:e0:40:76:f1:ec:c0:a6:68:71:93:59:61:c3:
         23:13:b2:0e:f0:35:d0:fc:a3:7f:65:1e:57:fe:ab:a6:13:8e:
         7d:1c:b4:dc:c7:5e:ea:a1:d6:ef:bc:69:c2:48:21:45:01:c0:
         b4:f4:25:01:a6:2e:35:9d:45:0c:7d:44:e0:5e:da:b2:65:d0:
         32:96:df:56:be:b8:26:f3:3d:23:d9:ef:36:2a:cb:a2:e4:80:
         a7:e9:d6:be:a6:0d:79:64:81:7b:e3:57:9c:1a:33:56:c2:cc:
         69:7b:b4:0d:b3:e0:48:af:67:c3:31:9b:19:1f:b8:76:9d:74:
         66:1b:91:2f:df:8d:4f:87:a6:d7:36:32:02:a3:1a:e5:87:80:
         cc:7c:36:1e:6a:51:d2:aa:f3:fb:0c:95:4c:6c:4d:3a:19:66:
         3d:ca:24:fc:c9:4e:6c:f5:3c:3b:71:3f:29:97:44:9d:a1:e2:
         bb:93:a9:be:0d:0e:83:6d:9e:fb:3c:b8:c6:f7:a1:f0:fa:93:
         4f:6a:c2:e2:7f:84:35:6c:52:d3:c9:02:d7:d8:7c:39:0e:61:
         1c:1c:9b:68:b4:15:43:53:57:1a:85:80:cf:21:97:9f:53:3a:
         72:91:ae:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:06 2026 by rpki-client