Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sFNSD-ZYjTr8O7LveJ9O9bmAkPY.roa
File:                     sFNSD-ZYjTr8O7LveJ9O9bmAkPY.roa (raw, json)
Hash identifier:          0/ErxOEq8jTBxLE9j6onjaqNDR/of5Z14oX4gOPMdl4=
Subject key identifier:   B0:53:52:0F:E6:58:8D:3A:FC:3B:B2:EF:78:9F:4E:F5:B9:80:90:F6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14DC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sFNSD-ZYjTr8O7LveJ9O9bmAkPY.roa
Signing time:             Tue 31 Mar 2026 07:58:26 +0000
ROA not before:           Tue 31 Mar 2026 07:58:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.73.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5340 (0x14dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B053520FE6588D3AFC3BB2EF789F4EF5B98090F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:78:4c:1d:5c:33:14:8c:8e:4f:f5:8a:a0:
                    b3:11:6a:b4:ce:b0:24:5b:38:ac:f0:ee:c1:4e:a0:
                    ac:d8:d5:04:12:aa:5e:4c:d3:06:92:4d:db:9c:e8:
                    b1:61:ef:a9:4a:61:7c:76:cb:2d:d1:3c:53:e3:37:
                    51:a9:27:a8:36:56:50:93:c1:4f:34:25:03:77:19:
                    85:79:b7:43:38:f9:18:c5:94:1c:df:30:26:c4:d9:
                    1c:16:13:ce:c2:9f:ef:fa:3f:eb:61:5c:85:39:ee:
                    a1:e5:35:2c:fb:8a:53:df:7b:06:60:31:b0:b6:fa:
                    90:cc:6f:19:6f:38:d0:9b:ba:d5:a0:08:5a:b4:4b:
                    94:64:cc:f9:c9:0d:b5:de:bd:ff:3e:07:f3:ed:16:
                    d0:8c:fb:bb:24:a1:67:39:59:bb:eb:32:c7:6c:68:
                    e9:c3:4e:48:63:cc:0a:96:d3:ba:cd:40:23:fb:a9:
                    5d:ee:19:ed:1d:84:15:73:01:1e:37:01:33:73:bb:
                    16:9a:13:dc:d7:99:93:a4:9d:5e:45:b5:43:6b:0f:
                    2e:1c:1d:04:7e:fc:58:6f:b2:14:8b:64:03:b5:89:
                    9c:72:b6:7c:a5:65:77:a6:6d:a1:62:dd:d8:61:0f:
                    fd:5e:ac:51:e9:45:d9:81:60:ef:b9:14:f1:26:46:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:53:52:0F:E6:58:8D:3A:FC:3B:B2:EF:78:9F:4E:F5:B9:80:90:F6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sFNSD-ZYjTr8O7LveJ9O9bmAkPY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:2b:a7:b4:a5:ee:c1:5e:f2:47:4d:06:b2:89:73:b6:7f:15:
         47:4b:b5:bc:90:ec:3f:a9:3c:ad:9d:2e:b6:64:81:11:46:76:
         95:ea:ec:5b:b4:c2:13:fa:a1:66:7b:df:f8:2a:42:73:92:67:
         2a:10:ad:d7:8e:c3:6d:e8:30:f6:83:10:03:92:e8:ea:84:0e:
         b3:5c:e2:4a:0c:d9:e5:fc:3d:62:c3:14:bb:01:2b:43:92:5f:
         88:0f:76:91:e9:e5:c1:44:d6:ba:89:c5:74:f7:46:22:75:5d:
         b6:4d:00:fc:b7:6a:32:28:7d:f1:b6:69:53:74:fb:55:08:26:
         1e:0e:02:f4:e4:32:d9:aa:55:2b:98:81:7c:b6:54:80:66:7f:
         d8:1a:44:75:08:d2:dd:c3:ac:fe:02:ed:5d:1d:6e:36:f3:46:
         05:f1:ff:31:61:00:9e:1c:17:75:c4:03:f2:e9:d6:9a:2d:ff:
         1b:d2:7f:9b:a4:10:91:d2:19:8f:98:70:9a:2e:9f:9d:1b:55:
         d2:e4:8f:0e:bf:7f:bd:41:82:dd:3c:24:9a:9e:d7:f4:9b:42:
         f8:6b:bd:8f:b3:1e:df:6d:2f:2d:82:12:fd:9f:2a:b2:1f:38:
         3b:3b:ac:82:52:5c:e0:d1:c4:50:de:02:20:8e:21:29:e5:a9:
         63:27:61:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:54 2026 by rpki-client