Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/juLE7BxPgmsA2RfXkG7ZwGYKSbE.roa
File:                     juLE7BxPgmsA2RfXkG7ZwGYKSbE.roa (raw, json)
Hash identifier:          DKYhdPrYAt08fWPlBjlqd1DKcI0qUqY01cU5VZi36Ik=
Subject key identifier:   8E:E2:C4:EC:1C:4F:82:6B:00:D9:17:D7:90:6E:D9:C0:66:0A:49:B1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1839
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/juLE7BxPgmsA2RfXkG7ZwGYKSbE.roa
Signing time:             Tue 31 Mar 2026 08:05:31 +0000
ROA not before:           Tue 31 Mar 2026 08:05:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6201 (0x1839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8EE2C4EC1C4F826B00D917D7906ED9C0660A49B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:7f:86:2e:c2:ce:89:ca:7b:62:85:f8:25:
                    68:a0:69:65:02:92:32:b7:3a:ee:ff:98:55:cf:f0:
                    8f:b8:6d:fd:35:cd:89:48:eb:e3:fe:ec:59:47:af:
                    92:7a:87:3c:63:f3:ea:32:80:f7:43:26:fb:64:89:
                    80:ac:ce:4e:62:1c:f3:ab:9e:ec:33:d0:d2:41:31:
                    e2:d8:d5:cd:15:15:5b:f3:0c:33:96:ac:1f:68:80:
                    6d:95:b3:cd:79:68:11:14:6c:ed:3c:02:e0:54:42:
                    af:a9:45:13:83:4d:7b:9f:e1:8a:f6:68:53:b0:b7:
                    b7:d2:76:24:52:4c:da:4d:f4:fa:00:1e:8f:8a:34:
                    28:3b:8c:d9:00:2b:a7:94:df:48:18:25:1e:2f:33:
                    da:97:24:c1:37:d2:c5:d2:10:87:1e:92:c5:0d:8d:
                    b3:84:d2:ab:a8:dd:cc:cf:6f:8a:8f:91:51:5c:14:
                    ad:b4:51:da:30:2f:32:1a:f8:69:ef:00:07:30:40:
                    ea:02:c4:2f:4d:fc:8e:ea:68:76:1f:d3:25:3e:af:
                    a2:48:48:5e:9d:53:64:04:e6:a2:c0:22:e8:cb:c4:
                    b1:67:a2:c5:d2:0b:56:0e:d9:b1:b3:89:a3:df:a6:
                    ab:1f:88:c3:ca:7e:03:ac:5e:c1:cc:cf:4c:3f:63:
                    15:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E2:C4:EC:1C:4F:82:6B:00:D9:17:D7:90:6E:D9:C0:66:0A:49:B1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/juLE7BxPgmsA2RfXkG7ZwGYKSbE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:61:1b:cc:1d:c1:78:1e:b3:eb:3c:aa:57:5b:a0:c3:ea:93:
         c0:65:69:b5:97:5b:83:b8:ae:c8:5a:03:94:61:1e:a9:d5:80:
         01:1d:23:5a:ab:38:dd:0a:50:ed:0b:25:d8:57:4a:5e:27:ea:
         e0:d7:fa:3f:64:75:ed:7b:51:2e:4f:84:96:be:a5:e0:bf:b5:
         25:24:2c:11:ff:89:81:f6:9d:61:bb:3a:c8:e3:cc:81:fb:bf:
         71:38:4a:eb:83:68:6f:44:55:b4:ad:b9:4b:c8:6e:5e:21:a5:
         c9:e6:b9:dd:e1:54:fa:91:1f:80:2b:36:51:07:a7:eb:b0:cb:
         09:a5:e3:cd:19:09:8d:8c:05:9a:4c:10:b1:b7:6d:ae:dc:95:
         9a:4e:55:c6:c5:7c:16:ed:f2:fc:38:d3:3d:73:79:68:0d:7f:
         c9:9b:b6:08:18:4a:7c:a1:b1:be:bd:39:88:b5:91:3a:0d:dc:
         7d:e0:51:ae:64:28:90:79:e6:f8:c5:30:2e:c1:32:b7:2f:38:
         c1:f0:01:1d:ee:87:6b:38:7e:13:e3:38:35:36:7e:15:db:22:
         55:3b:e2:1a:a3:0a:3a:5f:f3:bd:90:3d:33:56:91:ce:1c:c9:
         0e:02:8b:40:1d:84:32:8e:d3:63:97:f9:8f:e7:a8:ff:6a:f2:
         c0:8c:82:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:02 2026 by rpki-client