Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/o5nu4hAVn2lZU7beMWopzBjjVWw.roa
File:                     o5nu4hAVn2lZU7beMWopzBjjVWw.roa (raw, json)
Hash identifier:          mZXPoKrChyjHHmEpIKbT0ehDV6rrg0aRNmJ1AsqkKh8=
Subject key identifier:   A3:99:EE:E2:10:15:9F:69:59:53:B6:DE:31:6A:29:CC:18:E3:55:6C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       150B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o5nu4hAVn2lZU7beMWopzBjjVWw.roa
Signing time:             Tue 31 Mar 2026 07:58:49 +0000
ROA not before:           Tue 31 Mar 2026 07:58:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5387 (0x150b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A399EEE210159F695953B6DE316A29CC18E3556C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:eb:34:de:bd:1d:60:0a:00:51:3a:95:b8:
                    e8:ef:65:64:b5:04:00:83:50:8f:0f:1c:c8:3b:ad:
                    be:c2:85:12:de:17:9b:e1:3a:c7:2e:cb:9e:d8:d9:
                    ee:78:21:77:3d:d3:11:74:c4:2c:15:4d:33:36:af:
                    d0:98:78:3a:46:96:fc:e2:38:1b:65:96:0b:76:3b:
                    23:94:86:95:77:ec:95:d2:bc:45:c3:09:7d:99:8d:
                    b3:63:0a:b4:86:b8:b1:a6:79:1d:12:c5:f9:a0:c7:
                    40:78:1b:ee:a9:ee:93:b5:02:f7:c5:ea:51:f9:7f:
                    ec:4e:20:72:b4:6e:35:5b:e4:e5:a8:8a:39:89:e3:
                    44:75:94:96:ad:12:65:5d:89:fd:ef:cd:5f:17:b4:
                    1b:58:33:ca:d5:26:f5:30:c9:0d:67:c9:d1:e0:76:
                    00:f1:c0:4d:2d:6c:af:02:22:96:07:d1:06:fc:10:
                    e3:d0:c5:24:9b:a4:6e:97:c6:21:14:8d:67:d7:c5:
                    07:a2:17:da:a0:76:bf:24:bb:ab:45:44:26:a9:f6:
                    f1:8b:df:d2:d2:c5:99:42:cd:2b:5a:ee:c0:22:64:
                    11:17:e6:78:ab:ad:64:55:46:0a:45:11:1e:59:4e:
                    78:a9:f4:c3:b6:b9:02:ba:67:ac:91:f3:6a:6f:5e:
                    a2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:99:EE:E2:10:15:9F:69:59:53:B6:DE:31:6A:29:CC:18:E3:55:6C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o5nu4hAVn2lZU7beMWopzBjjVWw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:5f:bd:bf:b5:9b:82:5a:00:03:b1:bd:4f:25:d7:53:54:0c:
         3a:48:c5:eb:a0:9c:49:c4:d3:aa:90:09:aa:94:16:8f:46:71:
         69:23:96:3f:f2:3d:da:1c:b4:ef:87:21:29:57:88:bd:7e:a2:
         5f:8e:b4:4b:39:15:ae:a0:f3:74:b3:b4:22:c4:8d:1c:71:dc:
         39:b2:39:c4:29:bc:7f:d3:45:d8:7b:45:5c:7f:a1:69:d7:6a:
         b8:1f:92:cb:92:9b:32:13:e5:db:27:b7:f9:f1:b0:17:7d:75:
         b5:2e:fb:8c:1b:4d:e6:00:13:ac:0c:15:ed:7b:41:d6:d5:e3:
         62:8b:5d:1e:b8:22:1e:e1:26:6c:ef:4e:09:8c:5c:48:64:a6:
         e3:db:aa:cf:d3:7c:9c:2d:27:78:93:3c:70:c0:08:b5:5b:3d:
         1e:95:97:71:27:96:e0:21:89:bd:f6:4e:b4:d7:22:0c:3a:20:
         f8:b9:48:a8:20:39:80:cd:5b:84:ce:8f:b1:61:b2:bb:0c:44:
         b8:cc:5b:9a:0b:56:05:57:9c:4b:72:42:56:eb:8c:3a:40:54:
         d2:1a:a7:5a:4a:3d:c0:a2:58:c9:fd:14:89:77:c6:8d:81:af:
         15:db:c5:ed:e9:54:dd:fd:2d:8f:3a:3e:f4:82:7a:76:56:2a:
         03:8a:59:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:55 2026 by rpki-client