Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vDTM_Cj5-fk-VNCyW70gRKBZoik.roa
File:                     vDTM_Cj5-fk-VNCyW70gRKBZoik.roa (raw, json)
Hash identifier:          XU0DUlK+N7hBAU4152HSn0WCOXbTnsMcG1+/4SzwkDk=
Subject key identifier:   BC:34:CC:FC:28:F9:F9:F9:3E:54:D0:B2:5B:BD:20:44:A0:59:A2:29
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       182E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vDTM_Cj5-fk-VNCyW70gRKBZoik.roa
Signing time:             Tue 31 Mar 2026 08:05:26 +0000
ROA not before:           Tue 31 Mar 2026 08:05:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6190 (0x182e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BC34CCFC28F9F9F93E54D0B25BBD2044A059A229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:52:ab:98:ac:c2:e3:0e:4b:23:fc:98:f3:
                    90:e9:62:9b:24:02:42:71:02:42:81:c4:d0:76:09:
                    2a:63:ca:ea:53:d4:2f:d6:d9:7a:d2:27:82:0e:c2:
                    e3:19:99:ad:79:9d:b6:b7:ac:e0:17:73:23:b5:1b:
                    58:24:06:d4:56:71:b8:7b:ce:bf:93:29:a4:3b:f0:
                    88:42:1d:4e:55:47:71:52:85:fa:97:b5:d9:81:ce:
                    15:45:22:1f:06:fe:84:23:b2:dc:9c:42:03:52:58:
                    2b:f3:9a:3f:51:36:34:34:67:7a:02:60:e9:5c:e8:
                    05:8e:54:58:2c:eb:53:f5:3c:6a:50:eb:68:e5:ec:
                    8d:09:c2:d0:94:b4:61:8c:df:2f:d5:d4:d6:c5:ed:
                    31:fd:85:0f:f7:f6:a2:b4:ac:1d:2d:71:46:bb:2d:
                    11:e5:72:d9:0a:b7:c0:a2:6d:fe:b7:e2:27:83:b9:
                    a0:7b:99:4c:4a:1b:92:b5:6f:8b:a0:f7:fe:08:7c:
                    91:5f:71:c7:11:d0:39:0b:ab:c6:69:93:12:b9:79:
                    51:10:0a:69:8b:1b:a2:37:bd:fa:36:73:90:2a:76:
                    07:04:7a:78:20:c0:14:d1:ec:51:2b:38:31:83:aa:
                    a6:07:0d:bf:f9:94:0f:01:56:0c:63:d1:bb:09:78:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:34:CC:FC:28:F9:F9:F9:3E:54:D0:B2:5B:BD:20:44:A0:59:A2:29
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vDTM_Cj5-fk-VNCyW70gRKBZoik.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:de:15:15:80:93:b9:38:69:7c:72:0b:92:29:0e:35:da:83:
         0f:4d:e5:f4:b4:9b:23:c4:7d:0e:a3:b4:b1:c5:b9:30:a9:d3:
         e0:49:62:ed:90:e5:01:4c:79:35:8b:42:25:0a:f4:59:7c:eb:
         14:b3:23:ce:e4:57:c0:80:f9:47:e0:15:5f:6c:84:5f:1d:61:
         ea:87:d5:8d:ef:2f:eb:bf:6b:08:46:e3:00:23:71:4e:2c:f8:
         a7:ae:24:11:6e:85:59:25:2f:f7:8e:55:50:82:13:67:e8:97:
         e0:7a:3d:9c:28:e4:0e:3c:f3:41:75:19:59:57:06:ee:54:46:
         48:20:62:00:c5:69:7a:23:a0:88:bf:eb:5b:bd:8b:47:cf:9f:
         46:27:ec:54:74:a4:51:f8:9e:00:72:13:a0:3a:62:e2:62:d3:
         a5:32:1b:19:7d:ce:e2:c4:72:aa:f9:ae:46:7f:21:3b:49:56:
         18:26:64:f4:7d:62:19:33:69:83:3b:2b:51:8a:89:ac:6a:54:
         ed:c9:d7:52:05:59:5d:3e:c2:55:0f:77:45:0d:44:3c:af:ef:
         12:ab:88:b4:6a:b9:04:0a:12:9a:f6:e1:86:e5:1c:76:19:e8:
         64:e3:8b:a2:91:4c:ed:58:fe:12:7b:ad:d6:95:5f:b1:69:3a:
         cb:b7:c1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:03 2026 by rpki-client