Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pMfg_r0fmb8gymc_Oo8r5umNBG8.roa
File:                     pMfg_r0fmb8gymc_Oo8r5umNBG8.roa (raw, json)
Hash identifier:          kT/e/MqHMfA+z6WGXrfK3++Sa/Da5Cup+BqU/MPK+FA=
Subject key identifier:   A4:C7:E0:FE:BD:1F:99:BF:20:CA:67:3F:3A:8F:2B:E6:E9:8D:04:6F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1472
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pMfg_r0fmb8gymc_Oo8r5umNBG8.roa
Signing time:             Tue 31 Mar 2026 07:57:33 +0000
ROA not before:           Tue 31 Mar 2026 07:57:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5234 (0x1472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A4C7E0FEBD1F99BF20CA673F3A8F2BE6E98D046F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:9b:7b:23:91:bd:ef:ce:9f:8c:a0:ae:32:
                    ca:22:88:fc:12:87:3d:79:7c:08:2e:bf:42:fa:c0:
                    aa:18:53:a1:46:7a:b9:43:f6:80:fa:df:ee:b7:23:
                    80:83:33:6e:22:cf:d8:2b:55:52:8f:81:80:f8:60:
                    21:fc:bb:76:6d:9f:ea:9d:ce:95:9a:64:8e:65:3c:
                    01:28:5b:97:0e:56:e7:b2:cd:35:d3:be:d2:71:93:
                    cd:d0:da:98:30:24:74:48:2c:e7:8e:ec:73:03:35:
                    aa:5b:c6:15:21:28:9a:1c:16:c0:69:ff:be:57:d5:
                    34:58:5d:97:f5:b4:1c:d3:ba:21:42:3b:65:f8:31:
                    10:02:a5:f5:5d:ad:aa:be:2c:8f:96:a5:0f:2b:fa:
                    be:40:57:a2:b8:93:a2:eb:85:3c:70:7b:a8:14:36:
                    83:fc:4c:bf:be:22:fb:0b:55:a0:ca:33:ab:c1:82:
                    39:78:52:28:80:25:82:9b:3d:76:ee:bb:9d:96:2c:
                    f6:41:a0:8a:77:df:37:c7:10:74:42:61:63:e2:dc:
                    39:5a:4f:86:b1:7b:c5:c0:ac:bf:c5:e1:d6:e5:cb:
                    55:ca:0c:73:4e:db:4a:f3:ab:2b:bd:a5:d5:b8:b4:
                    68:3b:b1:ef:e9:06:69:c0:64:b0:35:5a:84:30:c6:
                    29:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C7:E0:FE:BD:1F:99:BF:20:CA:67:3F:3A:8F:2B:E6:E9:8D:04:6F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pMfg_r0fmb8gymc_Oo8r5umNBG8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:94:24:ed:73:66:c4:20:b6:ac:39:6a:fe:61:70:ed:23:13:
         98:fc:cf:01:59:1a:2b:15:33:30:f7:e4:1f:aa:20:ed:f7:a3:
         66:fd:00:bd:10:67:70:c0:5a:2c:0d:4a:38:b1:d3:3f:a5:c0:
         fa:14:29:6f:11:c8:9f:8e:5c:82:d2:a6:42:6e:09:c0:71:48:
         f2:75:95:27:23:c3:c3:ad:4d:23:74:b1:a9:43:d0:28:7c:c6:
         95:88:91:bd:f6:2f:a0:7a:02:88:a3:97:f6:3b:77:1c:ab:f7:
         46:f1:60:d5:d3:22:94:c6:77:eb:3f:38:1e:66:2f:b9:47:94:
         9a:5d:16:e2:9c:2e:d2:20:72:eb:0b:40:fc:a5:e5:4f:85:cb:
         83:1a:30:ee:71:f2:89:8b:c9:7b:01:0b:9c:07:3d:99:9e:33:
         62:6e:04:4c:42:67:37:eb:4c:c1:6e:78:a1:7b:36:b7:15:60:
         be:b7:3d:1e:bf:1e:17:34:f3:97:f8:f5:8c:cb:bb:c5:f5:08:
         96:85:a8:54:1d:c7:f5:dd:09:0f:76:72:04:e5:94:87:4a:3a:
         f1:59:f2:ec:c1:e8:25:fd:e4:ca:9d:44:57:50:18:13:df:cd:
         f6:c8:99:62:e3:94:a2:99:af:2c:01:44:47:c1:4a:64:a9:21:
         a2:32:67:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:10 2026 by rpki-client