Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kjdMtodtcIfg8o-3cUJ0c2-OPCM.roa
File:                     kjdMtodtcIfg8o-3cUJ0c2-OPCM.roa (raw, json)
Hash identifier:          2lB7uaP97X/FkhQFlVGbRAqx+9eCXe5xkfT6C6gScpg=
Subject key identifier:   92:37:4C:B6:87:6D:70:87:E0:F2:8F:B7:71:42:74:73:6F:8E:3C:23
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       139C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kjdMtodtcIfg8o-3cUJ0c2-OPCM.roa
Signing time:             Tue 31 Mar 2026 07:55:56 +0000
ROA not before:           Tue 31 Mar 2026 07:55:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5020 (0x139c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=92374CB6876D7087E0F28FB7714274736F8E3C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:21:82:5f:34:71:6d:a5:fe:d3:7c:dd:c2:
                    04:e6:e1:a0:9f:86:bb:3d:be:96:a9:53:82:30:1a:
                    25:f6:2c:f8:c7:67:e4:3f:de:32:b4:7f:0c:2e:ed:
                    f0:1c:7d:90:05:d0:0c:09:a6:f8:5a:31:07:7d:38:
                    3a:22:f1:c6:63:8c:72:f7:f0:f4:ae:ab:5a:15:9c:
                    c9:fd:af:7e:d7:bf:4e:ab:49:b0:5e:e2:ba:95:c3:
                    71:51:40:da:bb:7c:c2:ac:d5:6a:4f:61:7b:a0:b1:
                    05:76:8d:3f:e1:b8:08:ac:c8:c7:f8:41:60:c1:3c:
                    24:57:7a:4a:27:98:84:a0:3d:9e:ba:85:7f:0c:00:
                    47:ed:46:f1:2c:91:70:6d:b4:f5:3c:e7:01:71:60:
                    a0:2a:b6:99:b0:2f:ec:32:c4:15:06:5e:a5:c1:56:
                    c1:1c:4e:b2:e8:ea:df:7a:49:dd:32:4c:48:8a:ba:
                    1d:f5:71:bf:d5:be:4a:05:cf:5b:f5:ca:ac:24:f7:
                    ab:3b:8d:6f:91:b4:e5:e3:e4:d8:14:35:c5:5d:c6:
                    39:37:97:ab:f9:75:1a:a1:00:b0:c0:3f:3f:c3:75:
                    01:e7:91:e9:a3:ee:c1:03:7d:1b:f7:4a:69:ef:c5:
                    90:8e:95:98:64:f9:20:9d:d2:45:36:3d:e1:c5:6d:
                    62:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:37:4C:B6:87:6D:70:87:E0:F2:8F:B7:71:42:74:73:6F:8E:3C:23
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kjdMtodtcIfg8o-3cUJ0c2-OPCM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:13:a3:49:98:a0:77:8d:e4:66:70:90:e7:2f:7a:09:88:40:
         41:19:12:61:fd:4a:ea:e1:31:c0:d4:db:f0:1d:5c:e4:e2:fc:
         e1:4f:77:89:ae:33:d2:92:d6:05:42:bd:6b:b8:a4:c0:b8:aa:
         42:d1:97:2d:ad:27:1b:d0:04:72:f7:93:25:e6:11:e7:9f:85:
         78:0f:d9:6e:57:a2:49:4c:ba:ce:b2:d0:af:d0:d6:bf:e9:e9:
         9d:7d:75:56:2a:0a:55:b1:13:87:11:43:8c:ed:da:47:29:c6:
         1d:9d:4a:1d:41:4f:27:73:3a:f2:ba:c3:24:9a:8e:cc:fc:4a:
         12:45:5e:8c:aa:8b:31:df:01:56:d5:92:32:46:5b:23:65:41:
         05:79:04:d1:5b:27:5c:e0:ca:41:74:39:ba:cd:4e:1a:bd:8c:
         32:8c:ff:7f:2f:c7:77:16:d9:5b:f3:8d:8b:b0:ec:61:03:67:
         e9:c8:b9:26:fc:2a:02:72:05:fb:c5:f9:c5:1d:56:ec:d9:0f:
         ec:88:eb:7f:9a:29:e8:32:b2:7d:57:df:03:7c:e0:0f:09:f5:
         5b:ec:81:be:83:95:14:4d:fd:d1:30:80:9d:f4:1f:25:7d:12:
         2f:86:0c:8a:b9:b3:83:d3:30:6d:37:e4:97:47:19:c4:db:82:
         48:db:ec:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:34 2026 by rpki-client