Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qAKqyJTpG_C7nBP3BAcA6eNkwl4.roa
File:                     qAKqyJTpG_C7nBP3BAcA6eNkwl4.roa (raw, json)
Hash identifier:          i/eQcGyql1iNGvkgGS0p4teNdl1jpGoATm5YIyRLLJU=
Subject key identifier:   A8:02:AA:C8:94:E9:1B:F0:BB:9C:13:F7:04:07:00:E9:E3:64:C2:5E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1431
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qAKqyJTpG_C7nBP3BAcA6eNkwl4.roa
Signing time:             Tue 31 Mar 2026 07:57:02 +0000
ROA not before:           Tue 31 Mar 2026 07:57:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5169 (0x1431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A802AAC894E91BF0BB9C13F7040700E9E364C25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fb:c2:14:2f:85:12:d8:e6:b9:21:cd:de:a4:
                    2e:26:3a:f7:ed:c1:a4:a1:d2:d3:23:b8:0b:ba:c5:
                    18:bd:24:6f:e2:8b:a3:26:e1:18:4d:62:0e:97:48:
                    be:de:f0:eb:ec:29:0f:9f:e8:25:ce:ce:0f:b0:8f:
                    55:3e:cf:b3:f2:ba:9d:25:f8:45:44:1f:ad:73:8b:
                    54:05:eb:7e:98:24:1a:54:5c:63:cc:1e:7a:40:e7:
                    63:f1:2c:8b:8d:42:e2:49:b5:53:24:71:59:89:08:
                    e0:38:9e:2f:44:61:56:91:fb:d5:26:06:5b:c4:e2:
                    c1:73:ab:f6:d6:1f:55:31:2b:c8:38:7f:12:51:0a:
                    13:7c:12:3b:7c:1e:d9:66:33:43:92:87:93:a0:98:
                    6d:f9:50:89:10:41:21:75:76:0c:1d:e4:c8:05:2b:
                    34:ef:8d:19:56:7f:81:67:79:34:a1:21:92:b6:dc:
                    ac:6b:da:f4:fd:45:3b:45:5a:5d:47:91:5c:d9:fe:
                    e9:12:7c:2f:43:7d:90:e4:4a:96:43:77:93:3b:45:
                    ff:60:2d:5c:35:17:4d:b7:c8:c6:12:e5:4d:30:8e:
                    ab:d3:d8:5f:1a:47:27:b0:9a:25:12:b5:b6:fd:d3:
                    33:ef:14:aa:66:13:6b:e6:ea:91:9a:06:50:77:1b:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:02:AA:C8:94:E9:1B:F0:BB:9C:13:F7:04:07:00:E9:E3:64:C2:5E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qAKqyJTpG_C7nBP3BAcA6eNkwl4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:4a:c7:7a:b6:67:c4:26:be:27:18:90:46:67:c0:c0:f0:51:
         e2:06:08:3a:b9:52:95:8a:be:2d:ba:53:f7:01:7d:dc:1d:d2:
         fb:5c:f1:88:c5:75:b2:2d:38:2d:b0:3c:e4:cd:02:1c:a9:e1:
         87:83:a7:8f:90:da:75:63:58:c8:3d:09:88:d4:4c:42:5b:3a:
         73:19:b6:69:c3:01:fe:e6:85:2f:e1:10:83:4b:9d:37:e5:be:
         78:ad:8c:2e:51:61:4b:d4:62:c9:e5:96:02:88:fd:43:70:68:
         ba:a4:85:ab:2b:bd:a9:ce:d2:3c:a5:09:d8:5c:f2:50:40:ea:
         3d:a9:84:c2:52:cc:d1:89:fe:67:63:21:dc:79:dc:79:ac:82:
         6e:82:18:9c:78:e4:0f:3f:f6:95:3a:c3:b1:78:10:00:c6:5c:
         c3:1b:44:cf:2b:06:52:b4:6d:a5:20:c0:22:7e:00:47:fb:e9:
         62:78:6c:99:31:e7:e0:f0:7f:3f:d2:d5:3c:05:89:cd:fa:b6:
         73:e0:60:05:35:37:90:fb:98:5f:44:d8:6f:88:93:44:ee:25:
         87:78:ed:b7:4a:87:0b:fe:6d:df:a1:ca:9e:20:f1:c5:c7:f4:
         94:3d:02:68:5b:b6:93:05:a9:e7:75:0e:30:4d:ac:03:91:71:
         ab:03:2f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:09 2026 by rpki-client