Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qdnX2t0h160xWbWF6wUINDgUnHo.roa
File:                     qdnX2t0h160xWbWF6wUINDgUnHo.roa (raw, json)
Hash identifier:          5E3ZHhW5W+iR/vLb1JrAyuNxgdg/2JDjUV07Xv12vEM=
Subject key identifier:   A9:D9:D7:DA:DD:21:D7:AD:31:59:B5:85:EB:05:08:34:38:14:9C:7A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16AF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qdnX2t0h160xWbWF6wUINDgUnHo.roa
Signing time:             Tue 31 Mar 2026 08:02:18 +0000
ROA not before:           Tue 31 Mar 2026 08:02:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.73.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5807 (0x16af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A9D9D7DADD21D7AD3159B585EB05083438149C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:2a:d1:8c:c7:87:e5:55:9e:8f:61:7e:74:
                    e2:6d:a4:3e:85:e6:c0:26:b3:60:5a:ce:23:6a:34:
                    d1:b8:93:60:bf:c7:8a:93:06:bb:71:f4:1a:4e:c2:
                    41:a8:be:84:9d:d0:53:1c:7a:c1:d2:38:c0:b9:41:
                    36:6e:70:d6:cc:34:b9:2f:17:55:1a:cb:68:02:41:
                    2a:7e:a8:24:d7:3d:2b:f9:b9:ee:26:d1:e6:de:44:
                    8d:49:e2:41:80:80:59:ff:4e:24:e8:0a:be:ce:cd:
                    4c:e8:91:76:b8:de:ab:41:54:14:fa:15:95:9b:c0:
                    e2:72:b6:7c:7e:33:c3:f5:15:24:75:f8:7b:ff:59:
                    79:14:a8:8c:4e:68:4b:98:bd:e2:6b:d1:93:97:08:
                    1a:92:bc:55:1f:23:a0:f1:2a:3d:e6:26:15:f4:3a:
                    12:52:b9:59:80:c7:6e:67:a0:6b:3b:89:2e:a7:26:
                    b7:3b:0c:2d:5c:64:86:6e:bd:7f:70:36:c1:90:79:
                    c3:cb:1e:7c:f5:28:1e:3b:75:06:a5:ef:13:b8:cd:
                    3b:bf:8f:88:83:a5:ae:fe:c0:b7:f4:ee:df:2c:d8:
                    bd:37:8a:6a:a4:6a:d7:3a:be:84:9e:9a:b3:20:82:
                    d7:25:5f:0c:24:5c:9b:5a:5b:dc:8e:55:14:a2:66:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D9:D7:DA:DD:21:D7:AD:31:59:B5:85:EB:05:08:34:38:14:9C:7A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qdnX2t0h160xWbWF6wUINDgUnHo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:e3:49:a9:40:7e:b6:f5:d2:a6:39:1a:35:2f:f0:e8:9b:60:
         02:2c:c6:aa:79:78:c3:82:a5:a8:a5:4b:5b:30:08:f2:62:13:
         67:67:ab:fa:d3:93:19:5a:5d:19:2e:22:f5:51:63:61:62:0e:
         f1:c4:c6:a5:44:c5:54:94:66:1d:51:ca:81:5f:c2:1e:4b:82:
         1a:59:9f:54:d7:da:f7:39:90:bd:2f:57:b7:b3:67:88:0e:c0:
         43:f9:84:03:f1:4f:78:a6:f3:01:c6:f8:d3:65:9c:86:33:f3:
         75:9a:9b:9d:23:0b:7b:83:1e:ab:82:4d:c6:68:51:86:b3:0b:
         b2:cb:79:23:f6:05:25:b5:22:7b:83:21:11:ff:a9:0a:65:af:
         28:9d:ee:6a:d3:5c:e7:73:eb:18:3c:b3:d6:a4:60:d1:a0:a2:
         c9:0e:4b:d3:74:16:20:80:9b:cd:be:46:3d:b3:94:b8:85:2e:
         3e:59:9c:c8:b8:49:78:9e:63:a1:31:c4:7f:99:3c:28:4d:95:
         7a:31:2d:d6:2a:e3:3c:9c:2b:4f:a6:fa:59:be:80:c1:50:13:
         91:66:25:35:84:be:b2:78:28:4b:59:4b:c1:e6:e7:08:60:bf:
         25:d1:7b:9b:73:c9:90:1f:b7:be:e6:95:da:58:d8:07:98:5b:
         f9:e8:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:03 2026 by rpki-client