Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sMgPkzAk6TYrXJZptlZPQTmoD2E.roa
File:                     sMgPkzAk6TYrXJZptlZPQTmoD2E.roa (raw, json)
Hash identifier:          gdDyjIxmbCzG4JrLkUuSXnF94tWh+B3Sq9jxUtbBJus=
Subject key identifier:   B0:C8:0F:93:30:24:E9:36:2B:5C:96:69:B6:56:4F:41:39:A8:0F:61
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14C2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sMgPkzAk6TYrXJZptlZPQTmoD2E.roa
Signing time:             Tue 31 Mar 2026 07:58:14 +0000
ROA not before:           Tue 31 Mar 2026 07:58:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5314 (0x14c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B0C80F933024E9362B5C9669B6564F4139A80F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:9a:0a:99:cb:ee:90:79:aa:07:82:57:91:
                    24:53:65:06:c5:ab:c4:59:db:c1:48:92:12:5c:4d:
                    61:11:ee:c3:1d:9c:00:c9:b6:99:76:a8:62:5d:15:
                    78:81:0e:f9:18:05:3c:dc:18:96:17:34:9d:34:c6:
                    69:30:19:67:2f:64:a4:83:ed:b5:b9:9c:44:1f:b6:
                    07:37:22:30:1d:a8:21:44:e1:91:b8:c7:a2:63:2c:
                    59:b9:46:52:83:d6:76:8b:46:72:a4:de:81:94:3c:
                    eb:7c:fc:e8:ba:a6:98:74:35:36:b4:50:e5:32:10:
                    e2:82:6e:fc:da:81:d3:6f:4f:ac:b1:09:a5:9f:99:
                    e6:e8:69:73:df:94:ad:18:6e:99:6d:6d:b1:fe:88:
                    e3:f4:ff:99:86:9b:e7:b1:9f:d6:53:95:5a:5c:93:
                    be:66:bf:89:59:ff:33:0b:39:90:f6:7c:a2:3f:ef:
                    56:04:4b:1d:90:8b:dc:29:99:37:d7:01:3e:ea:c5:
                    52:5b:a0:30:b1:7e:8f:c4:10:7a:a3:ee:b3:38:29:
                    9c:21:e9:88:cd:4e:5c:80:7e:36:84:84:fb:81:8b:
                    a0:b6:67:f1:bd:34:ce:d5:9f:7b:05:a2:34:c9:df:
                    ed:69:17:55:80:cc:c8:b1:31:8c:fe:da:0c:cf:e4:
                    be:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C8:0F:93:30:24:E9:36:2B:5C:96:69:B6:56:4F:41:39:A8:0F:61
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sMgPkzAk6TYrXJZptlZPQTmoD2E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:ad:7a:fd:6a:f4:a3:07:c3:1b:48:11:fa:55:c5:a2:1c:5e:
         35:67:66:35:f2:12:30:df:19:5b:72:5c:37:61:8f:e9:6f:a7:
         97:79:ea:a9:94:c7:a7:bd:7e:a9:0a:6a:15:66:9f:ea:4f:82:
         72:d5:75:b9:75:bc:dd:40:6d:af:a7:1b:e9:99:fb:43:df:d7:
         2c:2a:0f:60:6e:64:ca:3c:8f:42:51:ec:ea:a7:bc:7d:d5:74:
         67:1a:fa:72:c2:34:78:d8:01:e3:11:5d:e8:29:66:ee:fc:fe:
         17:ff:a4:f3:2c:61:20:68:e0:ac:17:f2:e7:ae:af:fc:12:3d:
         4b:74:ec:23:5d:7c:79:ea:27:ac:95:d1:6b:26:a6:3d:95:42:
         17:ef:95:52:cf:41:9c:9a:0f:d7:f8:87:0a:08:37:f6:7c:7d:
         35:b7:27:fb:75:37:de:c5:6f:e2:86:e5:54:41:b9:11:5d:fb:
         c3:28:aa:9a:50:e5:f0:79:1a:1a:49:22:61:c1:73:7a:a2:5d:
         e4:e3:bd:2d:4b:2c:bc:c3:be:1c:a8:92:5e:e8:c7:27:f9:50:
         27:cb:c4:9a:07:50:ec:3e:d4:45:c3:79:b0:21:12:a2:52:e1:
         8a:7b:4e:62:bd:7e:ae:ad:58:a4:96:f4:d2:29:04:79:d6:84:
         d3:0c:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:42 2026 by rpki-client