Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/msvkPbZ3R-xD18z3KsbKVMoWnsc.roa
File:                     msvkPbZ3R-xD18z3KsbKVMoWnsc.roa (raw, json)
Hash identifier:          AS8r4PDY4/EbyDH1jGDxuWy/w1JoUSgbQZkuDCUw5Kk=
Subject key identifier:   9A:CB:E4:3D:B6:77:47:EC:43:D7:CC:F7:2A:C6:CA:54:CA:16:9E:C7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16B5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/msvkPbZ3R-xD18z3KsbKVMoWnsc.roa
Signing time:             Tue 31 Mar 2026 08:02:21 +0000
ROA not before:           Tue 31 Mar 2026 08:02:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5813 (0x16b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9ACBE43DB67747EC43D7CCF72AC6CA54CA169EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:36:fc:34:be:31:f6:5c:62:71:a7:50:cd:
                    97:15:0f:e7:13:63:4e:85:93:bc:26:13:1e:df:0f:
                    9f:77:2c:84:e0:72:49:ca:19:ca:7b:44:92:09:1a:
                    fa:d1:53:af:b2:73:c9:3e:f9:b6:37:33:ef:c0:46:
                    26:ee:bb:c9:2a:56:e5:80:2d:6c:54:4c:93:5e:38:
                    68:9f:8a:ab:5e:32:8d:20:c2:dc:e3:9b:42:59:94:
                    d6:ae:00:2a:f1:74:8f:0b:d4:24:b7:5f:a5:2a:5b:
                    58:18:b9:20:5e:dd:94:2e:d0:1b:41:5c:80:4a:b0:
                    ba:17:cf:00:ea:33:75:6a:e8:66:1f:b9:ce:41:9f:
                    0b:84:2d:0e:2e:3e:ea:92:4f:8f:37:14:a8:70:d8:
                    ee:c7:32:5f:a0:93:56:1b:de:83:df:a2:26:0b:84:
                    62:b4:5d:74:96:94:e3:08:e2:4c:16:21:a5:8b:e8:
                    b0:3d:52:73:04:0e:15:39:cf:bd:2b:81:d5:7f:6c:
                    f0:a1:1a:0b:0e:a8:6d:ca:ca:9d:74:c7:29:53:8f:
                    df:67:e2:df:e2:e7:90:e6:27:91:5c:ac:52:ec:20:
                    93:5e:9e:d8:6c:bd:55:77:89:07:af:3e:dd:2d:08:
                    6c:36:61:ce:d0:e7:10:63:c0:00:6b:f0:4e:55:5e:
                    3a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CB:E4:3D:B6:77:47:EC:43:D7:CC:F7:2A:C6:CA:54:CA:16:9E:C7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/msvkPbZ3R-xD18z3KsbKVMoWnsc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:c8:73:84:d4:ca:e3:80:13:3e:d1:93:19:38:e7:97:33:
         dc:f5:dd:6a:af:c2:54:09:94:82:11:1a:03:ab:71:11:4d:ff:
         fb:f3:69:2a:ad:95:fa:45:85:d1:23:66:ba:4e:34:08:96:e5:
         55:83:05:c1:14:5e:c0:15:ec:9c:19:81:80:f3:96:ac:a4:85:
         60:83:d7:d0:fe:6e:46:82:fc:2d:7b:74:82:a8:9a:b9:ce:44:
         5d:18:e2:f4:e9:bc:e1:12:f6:83:8c:17:f9:46:92:0d:f7:50:
         1e:c8:ab:e7:43:0a:41:7b:8d:41:4c:ba:61:1a:f7:f5:1f:97:
         bc:34:be:d3:38:38:a5:fb:bf:8b:fc:a6:9b:94:67:1e:cf:92:
         20:67:c0:14:d4:0d:11:7d:e1:9e:ea:ec:87:ba:7c:0c:8d:9e:
         1b:ee:3c:ed:0d:31:1c:c1:87:84:e7:cd:ea:db:a6:05:a1:1a:
         f2:37:91:72:10:67:1b:13:26:d4:63:2c:9c:be:86:10:0a:6c:
         8b:8b:8c:0d:fb:3d:6e:25:36:e7:bf:59:1a:cc:8e:3d:51:0f:
         5b:6b:74:35:f8:92:46:de:e8:7e:7e:1a:1e:99:3b:6a:7e:81:
         87:a4:0e:90:a9:60:ef:d2:5b:75:0b:1e:bc:ca:4b:e2:ef:09:
         0a:15:76:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:55 2026 by rpki-client