Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ynNyNxi8ZMBOtgKU-NPR7gCXsdw.roa
File:                     ynNyNxi8ZMBOtgKU-NPR7gCXsdw.roa (raw, json)
Hash identifier:          gqWmCjsyivjX2PAIiG39Jc2bZWlX+rGltBrhtQMGJzs=
Subject key identifier:   CA:73:72:37:18:BC:64:C0:4E:B6:02:94:F8:D3:D1:EE:00:97:B1:DC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1719
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ynNyNxi8ZMBOtgKU-NPR7gCXsdw.roa
Signing time:             Tue 31 Mar 2026 08:03:09 +0000
ROA not before:           Tue 31 Mar 2026 08:03:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.122.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5913 (0x1719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CA73723718BC64C04EB60294F8D3D1EE0097B1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1d:a2:80:e3:15:27:8b:2a:21:df:46:68:e1:
                    d5:0b:65:c6:28:2f:65:8d:72:18:d5:53:1d:e7:ff:
                    b4:f3:1c:05:ec:2f:e4:7f:f1:15:77:f8:d4:c2:00:
                    28:3e:82:b8:e9:9b:b0:1b:5d:a3:32:dc:41:ff:7a:
                    b5:78:ee:b4:fa:ca:d5:13:e4:ca:0e:7b:de:dc:2e:
                    b3:85:a5:2e:49:bc:f3:c7:e0:ee:e3:c5:cc:b9:ab:
                    24:53:47:b8:af:e7:f2:25:ef:96:46:77:c9:83:07:
                    3b:c7:5f:24:2e:03:de:77:27:e4:86:d8:0b:d1:26:
                    6e:9b:23:53:25:16:32:99:40:d7:e2:99:75:02:25:
                    31:18:81:94:e7:3b:7c:6e:d5:8e:b6:7d:20:96:48:
                    53:b3:30:07:72:15:6b:33:0c:bc:83:4e:43:cf:33:
                    dd:60:20:45:d6:f3:ba:c5:b3:8c:35:72:9d:2b:c5:
                    50:eb:94:73:b7:6b:2a:12:fb:9a:83:dc:63:7e:2c:
                    01:d0:85:6c:b1:1e:c4:ed:e6:58:a0:79:e2:5c:2d:
                    47:98:58:a9:37:6e:f7:1a:2d:20:b7:ef:d3:16:59:
                    c0:47:8b:82:9e:41:cc:75:92:e7:0d:3a:bf:7f:c6:
                    c1:fb:99:1e:17:0f:ca:ce:41:27:e2:77:96:43:a9:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:73:72:37:18:BC:64:C0:4E:B6:02:94:F8:D3:D1:EE:00:97:B1:DC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ynNyNxi8ZMBOtgKU-NPR7gCXsdw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:5e:e2:14:f3:1e:68:74:6e:9e:af:47:09:60:dc:53:6d:7a:
         87:94:14:7b:18:ea:3e:0a:67:59:6f:5a:82:b5:db:3b:d5:f3:
         2a:48:1d:db:ff:02:50:92:59:5c:f4:a0:64:df:26:ba:c8:26:
         9b:7b:ed:90:ce:42:fc:96:21:13:ed:76:63:62:fe:ac:31:de:
         89:43:e6:9a:f8:79:02:aa:19:69:b6:a6:1e:12:fc:fd:8f:26:
         4a:f3:e7:9d:7a:6c:42:54:18:c9:31:7a:77:fe:34:a3:bf:97:
         5d:2d:6c:7a:85:c4:16:87:ff:fb:7b:25:26:27:c5:bc:60:4e:
         8f:f2:dd:ee:2b:ba:3f:3b:51:2a:51:be:db:42:de:3c:db:0b:
         d8:bd:c6:87:e9:a9:97:d8:5a:27:32:c1:7e:8c:c0:24:24:f1:
         b4:01:47:9d:e0:10:9c:c7:42:6c:fb:fc:29:ec:b3:41:1f:bb:
         c0:c2:7b:15:9d:5d:55:7a:17:f9:4c:84:ec:13:45:d3:c8:e5:
         7c:2e:73:84:43:4a:57:31:11:2c:61:59:2f:4b:f5:59:55:ea:
         12:b0:4d:fe:55:5a:98:f9:79:5b:0b:5f:40:0c:95:87:f0:22:
         05:7b:e3:83:52:d5:b3:fd:83:f2:87:84:6f:94:ac:49:a5:fe:
         1c:03:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:41 2026 by rpki-client