Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zSvVp01FYWrYrXnLTKJSVz13GhQ.roa
File:                     zSvVp01FYWrYrXnLTKJSVz13GhQ.roa (raw, json)
Hash identifier:          1s2P8CQDAxNuSfY/rd6v7wCd272FwmSRYbNFOdX+wNY=
Subject key identifier:   CD:2B:D5:A7:4D:45:61:6A:D8:AD:79:CB:4C:A2:52:57:3D:77:1A:14
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       175D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zSvVp01FYWrYrXnLTKJSVz13GhQ.roa
Signing time:             Tue 31 Mar 2026 08:03:40 +0000
ROA not before:           Tue 31 Mar 2026 08:03:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5981 (0x175d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CD2BD5A74D45616AD8AD79CB4CA252573D771A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:f7:54:89:e5:8d:d0:33:71:8a:03:db:08:
                    ab:3a:1d:6a:ea:c9:01:7e:de:df:63:bb:cb:3c:82:
                    36:36:14:d3:59:cc:52:9c:33:a9:ef:b2:91:77:1e:
                    c8:76:d4:6b:12:dc:db:56:1d:18:0e:6f:bd:8b:83:
                    26:21:70:4b:8c:5d:a3:92:a4:eb:68:1b:dd:a7:5f:
                    ef:b5:79:b4:0d:1e:f7:9a:d8:68:31:7f:49:5d:41:
                    18:85:d7:d7:17:aa:8b:2a:f6:24:7d:5d:88:4a:aa:
                    0f:cc:2a:90:f1:b6:92:bc:35:ae:84:cf:ec:30:8f:
                    e3:32:ee:94:5c:c9:74:12:46:bf:6e:03:08:26:a8:
                    ff:80:36:c3:06:b3:e6:21:0c:07:5c:bd:80:a8:12:
                    e0:0c:6e:e3:bf:7c:51:80:d8:cc:b7:c8:c2:34:fd:
                    a9:0a:ab:9f:73:25:73:93:4e:45:16:5c:21:a1:84:
                    d7:2f:c6:38:02:b6:a1:c9:25:e6:dc:02:ae:a4:9d:
                    4e:03:1d:de:58:83:52:f1:1c:21:56:19:f0:2e:5a:
                    c3:7b:6b:7c:5d:fc:f8:01:d3:2a:ad:aa:1b:29:33:
                    01:b9:ff:65:51:9a:cd:f2:c1:25:f4:35:7f:08:56:
                    32:75:b3:04:f2:9b:b5:8e:c9:f5:47:ea:42:d2:66:
                    b1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2B:D5:A7:4D:45:61:6A:D8:AD:79:CB:4C:A2:52:57:3D:77:1A:14
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zSvVp01FYWrYrXnLTKJSVz13GhQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:8b:80:e6:c6:5e:2f:98:a8:bb:8c:9d:8c:f5:4f:2d:99:27:
         67:61:34:87:27:2a:67:64:96:42:63:06:af:54:c3:5f:e4:fe:
         12:5f:f8:d4:cf:8a:6c:64:42:95:9e:29:e3:4f:d9:0e:55:4d:
         4d:b4:9c:98:17:7c:0a:1c:47:d0:3d:d6:46:c4:31:2a:74:85:
         18:4a:e0:3b:a5:42:3b:66:bd:30:42:fa:a7:a5:90:02:b9:9e:
         23:52:d7:21:14:4e:d3:1f:42:71:1c:a4:26:be:ca:67:9f:55:
         94:a9:74:1d:7d:fd:db:90:78:1f:34:69:5e:ea:b0:01:49:aa:
         5d:5e:36:80:e9:81:7b:66:a0:69:d9:cf:b4:ac:ee:ba:a2:14:
         1d:52:4e:cc:72:b5:56:1b:2b:7c:2c:de:e3:7c:8e:98:3b:04:
         41:37:5e:9e:fa:a2:3b:17:ae:46:53:6b:2a:07:d1:b8:62:7e:
         32:e9:9a:54:35:10:a3:0c:87:10:41:6c:68:09:23:31:0c:06:
         1e:1f:c9:5c:6f:78:6e:ba:2d:63:ec:61:bc:18:17:b6:91:81:
         27:cc:36:ee:3d:39:37:fd:a8:63:f1:05:0a:02:cb:8c:fd:05:
         3e:ae:23:58:d2:20:6f:22:26:17:56:37:29:59:59:62:ef:9d:
         5c:88:87:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:59 2026 by rpki-client