Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mU-leoXeMd5K5Zo3y68hUPIi77o.roa
File:                     mU-leoXeMd5K5Zo3y68hUPIi77o.roa (raw, json)
Hash identifier:          Ym1R/YsedWfI9CZrRut03rvAZGpUzRjBuzGdyRtiaPc=
Subject key identifier:   99:4F:A5:7A:85:DE:31:DE:4A:E5:9A:37:CB:AF:21:50:F2:22:EF:BA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       146D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mU-leoXeMd5K5Zo3y68hUPIi77o.roa
Signing time:             Tue 31 Mar 2026 07:57:31 +0000
ROA not before:           Tue 31 Mar 2026 07:57:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5229 (0x146d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=994FA57A85DE31DE4AE59A37CBAF2150F222EFBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f1:59:ea:53:02:b6:70:aa:de:1a:be:fb:0d:
                    0a:56:0a:24:bb:ba:7d:7f:05:2a:33:75:02:8f:be:
                    b6:e0:c2:a6:99:95:f1:8d:9e:ce:5b:15:4a:bd:d7:
                    7c:d2:7f:77:0b:c4:b8:12:72:38:07:c5:32:bd:c9:
                    a9:ed:03:dd:74:d0:2c:b4:e5:ca:92:6a:0e:31:41:
                    28:52:6d:25:a2:af:85:21:05:ee:5b:31:ef:e0:f7:
                    2b:7e:e3:2c:f8:1c:52:bb:44:b8:bd:00:37:a3:2d:
                    a0:74:b4:ec:30:ef:24:96:28:c1:41:d0:44:90:99:
                    36:87:8d:9f:ad:ab:87:3b:6d:9a:d1:d6:0e:a1:2b:
                    54:bf:c8:4e:2f:66:11:d8:41:27:43:90:63:e9:2c:
                    0e:3c:ca:63:f5:c9:a1:f1:84:6f:95:07:44:8a:64:
                    d2:61:07:8a:b5:bf:a0:b0:1b:8f:9b:4a:ba:51:3a:
                    14:68:bc:38:44:e2:61:05:f8:95:b9:33:5f:be:15:
                    39:da:1a:f0:08:f3:ef:eb:1d:f0:98:bd:d3:85:d4:
                    98:82:98:d8:1d:fb:7b:e7:f4:f0:b6:d3:b3:e6:59:
                    71:e9:cb:f6:f9:cb:00:33:56:a9:45:34:5a:17:e8:
                    81:67:c9:5b:d0:95:42:3b:e1:78:91:d4:98:f7:12:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4F:A5:7A:85:DE:31:DE:4A:E5:9A:37:CB:AF:21:50:F2:22:EF:BA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mU-leoXeMd5K5Zo3y68hUPIi77o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:a4:7d:f6:ed:e5:a6:83:6c:88:ce:c7:ce:6f:bc:db:b5:0f:
         b2:f2:28:c3:64:b1:40:be:fb:70:6f:78:96:34:59:02:8d:af:
         ce:66:4e:54:1a:a2:ad:7a:2a:fc:f3:b5:f7:99:dc:6d:00:de:
         09:50:99:22:70:f7:db:23:11:30:b3:db:78:60:f8:e4:22:a9:
         cc:3b:08:61:0b:aa:0a:ba:67:17:2c:0e:8e:25:53:f5:aa:03:
         2e:75:f0:e8:e8:7b:0e:b2:1f:73:9c:3f:cc:86:e0:5f:e4:93:
         04:c9:4a:41:b5:b6:bf:62:a9:e4:39:85:fe:58:fc:ae:0e:e9:
         59:4c:a1:12:42:9e:fb:a0:e6:0f:fb:1a:2e:7c:34:86:67:a0:
         96:52:ab:8d:49:07:41:5d:44:37:e1:b5:54:3b:ef:7a:06:7a:
         77:3c:cf:c9:08:58:3f:89:9e:84:37:13:4f:fc:24:36:d3:5e:
         64:5f:f5:a0:ad:3a:ab:81:d4:30:c1:72:01:d2:b2:f9:5a:eb:
         a9:d8:6a:22:c8:35:d2:3b:35:9c:1d:fd:14:26:71:af:b4:fe:
         a8:52:fb:eb:eb:66:c1:ef:1a:80:57:ad:b8:91:d3:ff:02:ea:
         7a:1a:6a:3c:ec:aa:39:a2:d2:96:89:b1:58:be:d2:da:39:d0:
         d0:ac:26:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:10 2026 by rpki-client