Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/z6QSdeoDXFc8Es5gNrugX6MMobI.roa
File:                     z6QSdeoDXFc8Es5gNrugX6MMobI.roa (raw, json)
Hash identifier:          Q5xKnZjhR1zdAuvzBjJdPDU/CHYpxxJ5o8YOWJMG3lw=
Subject key identifier:   CF:A4:12:75:EA:03:5C:57:3C:12:CE:60:36:BB:A0:5F:A3:0C:A1:B2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13A3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z6QSdeoDXFc8Es5gNrugX6MMobI.roa
Signing time:             Tue 31 Mar 2026 07:55:59 +0000
ROA not before:           Tue 31 Mar 2026 07:55:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5027 (0x13a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CFA41275EA035C573C12CE6036BBA05FA30CA1B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:ba:d8:81:a8:07:be:77:36:42:c2:e9:c6:
                    b7:da:cb:0b:8b:40:d5:5f:cc:f2:51:3f:f5:ac:0e:
                    ba:26:4c:30:f9:16:c4:c2:f1:6a:19:c7:76:69:5c:
                    d8:fc:ff:14:ac:6f:bf:e5:79:b1:f3:77:d6:d4:fe:
                    f9:26:74:74:95:ef:83:2a:2d:8f:64:5a:da:1e:80:
                    4a:75:6f:ca:61:3f:bd:04:8b:25:06:c3:00:a1:f7:
                    4d:39:7c:b0:0e:9c:53:7a:6d:59:48:8d:31:b5:fc:
                    ae:bc:c8:0a:fc:ab:1b:e3:73:62:2e:dc:e6:6e:65:
                    7e:f7:f3:ed:c0:f9:24:10:26:09:ed:99:b0:ad:be:
                    65:8b:04:b0:e4:eb:ad:47:4c:65:c6:e2:0b:f8:5e:
                    67:e6:cd:48:8e:85:50:b8:bc:82:be:f9:52:a4:49:
                    a8:22:cf:7c:0f:d4:1f:c5:a3:dc:f2:24:fc:30:07:
                    e8:46:ee:61:69:38:4c:f0:81:12:e3:69:21:b9:65:
                    8a:87:bd:40:86:36:cb:04:0a:6d:2a:83:ed:f5:0b:
                    cb:15:f2:98:6a:7f:72:1a:37:00:4a:1a:65:f1:2c:
                    18:f4:55:e6:2b:4a:d7:13:bc:9d:98:5e:ba:34:d4:
                    20:34:86:ab:96:76:e3:d1:74:8a:9e:0e:b2:3c:c1:
                    77:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A4:12:75:EA:03:5C:57:3C:12:CE:60:36:BB:A0:5F:A3:0C:A1:B2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z6QSdeoDXFc8Es5gNrugX6MMobI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:c8:de:e0:31:97:86:d2:a2:bb:41:11:dd:36:36:03:2b:90:
         1a:83:ed:50:51:f1:35:28:3b:61:3a:87:5b:3d:f3:1e:d2:b3:
         74:d2:90:d0:16:8a:98:52:59:9f:b2:95:c4:58:6a:5a:9d:5f:
         b0:89:12:ec:27:9e:31:a7:f7:45:13:4d:b3:a0:1c:75:47:60:
         a5:88:03:2c:5d:c9:a6:4a:12:c9:8d:de:ef:e4:ee:8e:bb:dd:
         6f:6b:bd:f6:03:43:01:ce:b4:c9:0b:3f:2b:77:f4:c8:f5:e1:
         8a:07:dd:a7:a8:9b:d4:6b:d6:4e:47:da:58:80:8c:98:18:86:
         03:d7:ed:8d:f5:25:1c:26:9a:6f:55:9f:23:84:bd:5d:20:88:
         78:94:3a:56:1c:74:f1:f8:8d:e0:2b:ee:43:8a:2f:4f:2b:d3:
         c1:59:54:86:a7:56:77:c0:9d:b0:b7:9b:19:03:d3:21:fd:70:
         12:81:ee:41:aa:77:d4:3f:0e:06:f0:ae:d8:60:72:62:a3:7f:
         70:f1:d5:45:32:81:be:72:41:84:0b:52:ed:9e:c8:ec:0a:4d:
         e7:e1:31:56:47:7f:ee:c4:d3:b4:68:59:9d:96:48:d0:7b:54:
         52:f7:46:65:7f:9e:1b:a6:67:79:3d:fb:2d:6f:68:5a:98:bc:
         46:4b:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:54 2026 by rpki-client