Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-YJjcovcVCduCdvNguhlPDdvtY.roa
File:                     p-YJjcovcVCduCdvNguhlPDdvtY.roa (raw, json)
Hash identifier:          SWV7hamuFcBCG8/X4xbpBpzWtAR8qqmFHL3vlKbGQCU=
Subject key identifier:   A7:E6:09:8D:CA:2F:71:50:9D:B8:27:6F:36:0B:A1:94:F0:DD:BE:D6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       146A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-YJjcovcVCduCdvNguhlPDdvtY.roa
Signing time:             Tue 31 Mar 2026 07:57:30 +0000
ROA not before:           Tue 31 Mar 2026 07:57:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5226 (0x146a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A7E6098DCA2F71509DB8276F360BA194F0DDBED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:e9:73:b7:50:11:b5:30:72:79:6f:e3:e1:
                    09:d1:c9:cc:43:90:74:90:72:0c:b1:01:58:c6:eb:
                    c7:0b:99:01:0a:72:d1:b6:b3:2a:04:89:7a:e9:74:
                    73:80:24:a2:9e:cb:ed:53:c4:b1:b0:b9:29:1b:f9:
                    24:52:e1:64:e2:63:a7:10:3f:a2:ad:a4:ca:1f:d6:
                    71:83:fd:b1:f0:cd:79:ae:cd:a8:90:b7:7c:0f:dc:
                    30:a3:52:bb:27:63:e9:4b:45:27:c5:3a:43:31:70:
                    ef:b6:a8:c8:b4:71:93:55:63:76:3e:5c:92:ca:a0:
                    48:55:90:f9:e9:e2:8c:5b:ab:8c:db:fe:83:df:a5:
                    ec:bb:14:25:a8:4a:61:e3:30:d4:37:6c:65:a8:6e:
                    28:e0:66:19:1a:26:68:c6:7e:02:34:1c:72:b5:f4:
                    c6:27:86:04:8c:d7:65:18:b7:64:d4:ad:48:de:67:
                    cc:c1:29:cc:59:63:db:bb:5a:ff:a6:bd:0b:49:e6:
                    ca:d3:b3:84:42:4f:3f:49:8d:40:45:e3:94:86:aa:
                    f8:c5:91:16:95:00:08:14:a3:6d:d7:99:00:c5:37:
                    59:47:63:68:0e:6b:9f:05:c2:80:60:69:c5:40:c6:
                    1e:7c:82:9d:68:e7:6c:d6:71:32:f8:3b:71:b8:bb:
                    ab:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E6:09:8D:CA:2F:71:50:9D:B8:27:6F:36:0B:A1:94:F0:DD:BE:D6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-YJjcovcVCduCdvNguhlPDdvtY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:46:35:a2:bc:07:2d:cf:17:ea:fe:fa:d3:d9:ae:c5:3c:93:
         61:ae:29:f5:1e:ff:2b:7a:b0:47:70:cf:db:aa:20:e0:68:47:
         f6:53:c4:46:55:11:5d:0d:c5:73:15:06:5a:56:79:a3:df:9d:
         54:07:5f:eb:0f:99:87:a5:ef:62:33:a9:04:da:11:95:cb:35:
         7c:d7:a9:65:bc:76:66:fa:a8:b5:a4:bd:93:ca:83:9c:76:09:
         c5:80:d4:e6:34:bd:50:51:e2:ac:3d:e7:30:6e:a8:6e:53:79:
         a3:eb:a3:a3:ff:f9:44:9c:09:2f:2b:14:92:78:d6:d9:45:28:
         30:d5:99:ab:4a:f5:5c:be:a9:f0:78:79:c1:3e:1e:ea:83:84:
         c9:2a:1b:44:07:98:e5:e7:b7:7c:7c:0a:d2:a0:04:d4:8c:bb:
         9a:2c:fc:dd:ab:39:ad:f4:79:d4:9c:a2:42:16:f0:b6:57:7c:
         93:57:fb:56:89:cf:b8:b5:92:44:40:db:13:2b:42:15:f4:73:
         ad:66:45:bd:da:58:83:e9:9b:ee:e3:3f:f4:80:2b:93:a0:d8:
         26:78:5d:47:21:ab:4c:da:a2:f3:36:81:56:94:a6:18:ca:9d:
         2e:df:18:85:a4:9a:97:d4:c9:0b:3c:f9:cd:10:a7:4c:e8:5c:
         f9:80:32:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:38 2026 by rpki-client