Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xLV1lQj5GbkKGVDszuKy7LHIcu4.roa
File:                     xLV1lQj5GbkKGVDszuKy7LHIcu4.roa (raw, json)
Hash identifier:          xMckueHIFe1FhwBfMvW8SHRqYCL8dHUn/ge2Yll5pqU=
Subject key identifier:   C4:B5:75:95:08:F9:19:B9:0A:19:50:EC:CE:E2:B2:EC:B1:C8:72:EE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1743
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xLV1lQj5GbkKGVDszuKy7LHIcu4.roa
Signing time:             Tue 31 Mar 2026 08:03:27 +0000
ROA not before:           Tue 31 Mar 2026 08:03:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5955 (0x1743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C4B5759508F919B90A1950ECCEE2B2ECB1C872EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fa:35:4d:d6:df:c8:94:44:69:e5:70:cb:fb:
                    51:35:02:6f:29:7c:4a:22:1c:12:56:08:13:28:a9:
                    34:7f:cc:f9:04:90:7c:cc:d2:6f:7f:97:60:db:e4:
                    86:d6:1e:15:5b:69:db:14:bb:5d:1c:7d:a5:a3:08:
                    19:e4:42:6c:8e:38:95:3c:d6:c2:d9:28:b9:95:d8:
                    12:ba:e5:f9:2c:02:7f:b8:74:04:f0:fa:35:b1:49:
                    f8:85:29:2c:37:bd:cd:46:ba:31:1d:91:bb:46:0f:
                    11:7b:2e:32:83:30:6b:b6:45:98:4a:8e:20:8e:57:
                    bc:84:4f:1a:fc:d3:ad:a9:ac:2c:5f:db:13:13:96:
                    0f:e6:61:37:83:b7:9a:d8:d9:45:e0:b6:e8:dd:d5:
                    6e:af:b1:2f:f6:91:3c:31:38:75:56:37:12:16:7b:
                    85:00:20:85:0b:73:e9:5d:19:cd:ef:9b:78:89:db:
                    0c:3d:f8:11:06:02:c2:84:69:b8:6d:3a:92:2b:81:
                    a5:4c:2c:bb:d5:d7:0a:37:79:98:82:f0:9b:50:b4:
                    a0:66:be:bd:8a:e4:2d:58:cc:a1:cd:2d:48:c4:84:
                    c0:6d:7e:a1:09:dc:47:1d:81:9e:66:39:92:5e:11:
                    33:aa:3e:71:77:9b:3b:9c:78:f6:99:ac:d9:0e:87:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B5:75:95:08:F9:19:B9:0A:19:50:EC:CE:E2:B2:EC:B1:C8:72:EE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xLV1lQj5GbkKGVDszuKy7LHIcu4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:b2:c9:8b:ba:6f:e7:48:e3:4b:b3:42:1f:b7:06:71:15:be:
         aa:ce:39:f6:43:f4:56:23:b2:e4:a3:1a:05:79:3b:34:85:a4:
         3c:a5:5d:42:0a:93:63:ca:33:82:3a:06:32:9e:99:2a:0f:37:
         c0:39:f9:f2:ed:6e:c2:0a:62:8c:73:33:b9:99:ad:9d:49:45:
         91:25:0e:a0:85:e5:f0:82:2d:55:7e:c4:e9:39:b8:e0:7d:57:
         20:cd:e5:67:0e:5e:da:08:0f:55:7b:fb:45:60:1c:6d:dc:5a:
         bf:18:7a:4c:12:00:e7:70:46:b7:97:35:89:dd:d2:ce:d6:15:
         84:b1:14:a6:32:62:bf:56:29:4d:e5:36:d9:d4:79:00:51:82:
         0e:00:86:43:e9:c5:0c:ca:1e:c5:b4:94:70:4d:04:66:37:44:
         38:db:a9:50:04:ba:1d:3b:78:0a:ee:0a:aa:c5:9c:a8:e3:9c:
         4b:01:cd:0d:cd:f1:e9:ae:71:66:1f:6a:ec:18:2a:d4:dc:2f:
         7e:18:5f:a8:3c:5d:d0:6b:29:88:19:5f:d3:c1:24:27:51:1f:
         a7:fb:33:06:d9:12:51:1d:71:50:b8:49:6a:94:1e:6f:17:d9:
         23:c0:2c:c8:20:3b:13:0d:b3:5c:91:10:db:83:82:80:60:b5:
         dd:cf:95:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:27:11 2026 by rpki-client