Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/p6LF19ssDyjDdhkZVplAlSaXUtU.roa
File:                     p6LF19ssDyjDdhkZVplAlSaXUtU.roa (raw, json)
Hash identifier:          SGa+m+06k23H1vl4VMaPV7NzcEnyo3NQAqVq5ZavDNA=
Subject key identifier:   A7:A2:C5:D7:DB:2C:0F:28:C3:76:19:19:56:99:40:95:26:97:52:D5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14C7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p6LF19ssDyjDdhkZVplAlSaXUtU.roa
Signing time:             Tue 31 Mar 2026 07:58:16 +0000
ROA not before:           Tue 31 Mar 2026 07:58:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5319 (0x14c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A7A2C5D7DB2C0F28C376191956994095269752D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:f4:da:3f:bd:c3:f8:b4:10:6b:9c:d9:1a:
                    cd:c6:3f:00:61:47:ee:2e:31:96:99:6c:d1:f6:e6:
                    77:44:eb:5a:30:22:65:5b:52:bc:29:90:2d:6a:0c:
                    23:90:d4:44:74:e8:5f:eb:47:a0:a4:e7:73:66:57:
                    f1:ad:0e:7d:5a:42:4a:45:b6:b2:18:c5:a9:c7:27:
                    75:ee:b9:55:b1:6e:34:f6:30:7c:27:22:b2:09:52:
                    b3:3a:25:12:7e:f9:af:35:56:b4:1d:c5:61:0d:4e:
                    38:92:49:c4:ea:2c:fa:f4:85:f3:06:be:24:af:35:
                    59:16:8e:70:2d:7d:0c:80:08:07:54:50:b4:0e:2f:
                    6e:4c:e9:5f:bf:1e:3d:08:a2:e2:54:df:c9:67:22:
                    88:6f:30:f7:e6:8c:0e:a7:03:d2:43:da:d2:1b:12:
                    b0:37:f7:d8:40:03:d5:62:3a:29:70:98:ee:99:20:
                    87:46:d8:c0:eb:7d:2c:16:0e:fa:d7:9a:e6:a4:34:
                    69:57:aa:26:b8:41:42:70:01:5b:25:5e:37:47:61:
                    6d:03:4f:cc:dc:e7:ad:74:58:66:c7:f9:92:1d:95:
                    bf:59:41:16:51:d8:01:7f:25:56:4d:ec:b8:f4:b2:
                    d0:9e:c6:68:56:0b:73:01:5a:a7:8d:e1:da:36:c7:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A2:C5:D7:DB:2C:0F:28:C3:76:19:19:56:99:40:95:26:97:52:D5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p6LF19ssDyjDdhkZVplAlSaXUtU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:15:5d:4f:c2:41:26:eb:44:63:29:eb:eb:68:f5:d3:56:
         fc:ad:11:b2:9f:eb:90:84:73:25:89:6c:d9:2a:d6:a2:64:3d:
         0b:f4:94:32:80:91:80:de:96:9a:d4:48:90:02:ea:71:20:05:
         f0:8c:95:d8:be:fd:2e:f5:e4:04:ea:da:99:53:ea:c5:78:59:
         78:0a:d2:b5:fa:7d:6e:00:75:25:e5:4a:13:e1:ee:41:c9:61:
         ca:7f:b8:1a:68:e5:47:b8:fa:9d:e4:6b:39:c9:cc:9c:0c:aa:
         cf:41:7f:c2:7c:f8:af:64:d6:83:97:06:fc:42:2c:76:03:6f:
         89:38:e5:e6:15:56:d3:a8:c1:0a:8f:90:3f:75:99:c5:8e:97:
         cb:57:71:0c:12:a1:63:35:a4:63:2c:ac:3a:43:16:fb:16:30:
         69:c8:0f:31:16:40:34:37:b3:6c:fc:09:ce:22:bd:fd:47:68:
         af:ef:bb:cc:03:18:59:27:48:e8:1e:1c:2a:c1:b6:a9:6a:ed:
         97:74:26:f5:4f:e7:d6:e7:ab:ce:d3:86:7d:68:55:a1:a8:b6:
         27:cf:40:ff:85:0a:06:7e:4e:d2:53:6e:74:31:3e:8d:26:e2:
         28:34:22:d6:c7:35:ff:ef:a5:84:97:fd:45:bc:da:22:fa:53:
         9f:ef:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:01 2026 by rpki-client