Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mKbtDg34fLt9ETQXVF0iYS3naxU.roa
File:                     mKbtDg34fLt9ETQXVF0iYS3naxU.roa (raw, json)
Hash identifier:          janXlG9W4CRLGHV3knNQXfOACr0h0XCC/wekCw72EXE=
Subject key identifier:   98:A6:ED:0E:0D:F8:7C:BB:7D:11:34:17:54:5D:22:61:2D:E7:6B:15
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1368
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mKbtDg34fLt9ETQXVF0iYS3naxU.roa
Signing time:             Tue 31 Mar 2026 07:55:30 +0000
ROA not before:           Tue 31 Mar 2026 07:55:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4968 (0x1368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=98A6ED0E0DF87CBB7D113417545D22612DE76B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:6d:fb:9e:1b:71:c8:76:2e:f4:9a:b5:2a:
                    19:ba:ab:aa:6c:cf:c5:5b:02:a3:fc:4a:0c:55:f3:
                    14:5d:ee:e3:58:37:92:c6:64:99:94:3f:69:2d:8d:
                    29:14:49:b9:57:b3:40:b4:b4:7f:35:93:4b:3a:54:
                    fd:b2:dd:3d:b0:ad:73:cb:1a:ef:5f:1a:f7:fd:18:
                    4e:24:20:d4:61:b5:15:01:de:92:af:4a:44:62:bd:
                    1d:71:06:70:ae:91:8a:af:57:32:7e:34:a5:25:c9:
                    af:37:8f:21:8b:a9:14:2e:0d:a6:a2:4b:25:79:8d:
                    5a:72:8a:c0:76:ba:df:8e:3a:2a:ac:51:95:95:d7:
                    22:3b:19:0a:4a:2f:19:1e:07:89:0c:dd:72:03:19:
                    db:2e:b1:f0:c7:32:4b:be:a4:9b:36:7f:e0:0e:13:
                    6d:18:36:49:a8:1b:b9:cd:f4:43:2e:e6:49:02:f5:
                    60:c6:c4:5e:4b:2f:6d:d2:5c:b4:4b:70:38:fb:c8:
                    34:2b:83:12:2c:b5:97:9b:df:0f:3d:24:bf:ba:ff:
                    8b:d6:fc:fa:54:37:bc:0e:8a:e0:b3:ee:58:df:2f:
                    33:18:02:e4:7c:7b:79:ee:8b:19:b7:f3:da:0c:d0:
                    91:da:55:43:81:e6:86:ff:78:19:55:a7:19:a7:db:
                    de:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A6:ED:0E:0D:F8:7C:BB:7D:11:34:17:54:5D:22:61:2D:E7:6B:15
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mKbtDg34fLt9ETQXVF0iYS3naxU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d0:a8:55:cf:87:3b:a0:bc:4d:2b:60:bf:c0:16:48:5f:54:ba:
         40:61:07:31:83:a4:96:d3:1e:ea:d0:50:f6:dd:b0:89:62:3c:
         70:10:f8:c4:6a:cf:eb:9d:bc:28:df:27:c6:b9:0b:eb:aa:42:
         cc:48:b0:4f:04:dc:26:91:f4:96:bc:a2:0e:cc:da:ca:9d:0e:
         df:d4:cb:a1:7c:fc:a8:cc:c6:b1:e4:58:df:15:d1:22:10:84:
         15:d5:fd:94:a3:59:a0:30:66:d6:de:c6:2f:c2:a8:c4:90:0e:
         15:4c:35:c5:af:fa:47:2e:b0:05:06:e2:76:a7:29:34:89:d7:
         72:e2:41:da:c2:75:fe:c9:3a:0a:58:5c:c5:0e:b3:cb:ae:6d:
         5e:c7:4a:89:c4:4a:eb:29:e1:ff:fc:5a:19:5a:1b:d4:e4:cd:
         40:13:f5:e0:a0:87:3e:9e:68:3a:9e:5c:9a:15:32:c4:78:8b:
         77:c9:3e:dc:fe:3b:14:9b:41:f4:6b:ce:3c:a9:26:23:80:ff:
         0f:ee:df:df:9d:ec:58:05:b4:c1:79:6f:99:66:17:f4:1e:5f:
         58:a5:58:fd:db:58:bf:c8:84:02:6a:04:27:bb:33:dd:e5:c2:
         b4:46:50:38:15:16:45:e7:02:8b:74:88:21:ef:09:e4:98:d4:
         ed:37:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:37 2026 by rpki-client