Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/V9Rk734FUzRy5tGk4HENG_p9FVU.roa
File:                     V9Rk734FUzRy5tGk4HENG_p9FVU.roa (raw, json)
Hash identifier:          TjkmDssAjdCTKiF91KtnirI7hL4QtO68dNjG78h5r8U=
Subject key identifier:   57:D4:64:EF:7E:05:53:34:72:E6:D1:A4:E0:71:0D:1B:FA:7D:15:55
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       B8
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/V9Rk734FUzRy5tGk4HENG_p9FVU.roa
Signing time:             Tue 31 Mar 2026 07:33:10 +0000
ROA not before:           Tue 31 Mar 2026 07:33:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18260
IP address blocks:        119.30.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Mar 31 07:33:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=57D464EF7E05533472E6D1A4E0710D1BFA7D1555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:84:4d:01:cf:f8:d3:a0:ad:05:06:c8:6f:
                    20:c4:3c:7a:e5:20:8c:92:35:6d:7e:cd:2f:aa:7b:
                    1d:03:21:98:c5:aa:32:b1:17:47:1e:8d:50:98:42:
                    80:32:81:b4:ed:b3:b7:de:ff:57:3f:44:88:e9:8a:
                    2f:3a:9d:33:7d:14:0e:fd:6a:38:27:ba:6b:4a:19:
                    23:8d:70:b4:29:09:f2:e9:1b:3c:73:f3:64:98:8a:
                    38:fe:b1:a7:d2:e5:6e:ac:54:1b:36:57:39:0b:b9:
                    b2:43:4a:5a:5d:90:12:c5:28:2c:f1:24:e6:ec:01:
                    44:4d:e5:96:1f:49:ff:fa:03:06:88:b5:6c:04:8c:
                    87:4d:92:f0:d3:1d:6e:9f:b3:c1:e5:c0:08:d2:2f:
                    21:8f:b6:f9:b5:0a:bf:49:83:de:96:ee:1a:54:25:
                    58:41:62:f2:27:3b:91:3d:94:e0:67:c7:23:59:35:
                    dc:1f:64:2e:47:7c:f9:b5:ac:d4:a2:88:08:cb:2f:
                    d1:c4:d7:86:be:9a:36:27:44:20:a1:3d:8c:b8:fd:
                    6a:11:dd:e3:90:b9:86:05:9b:77:59:6a:11:ae:3e:
                    4c:42:2b:c9:f3:4c:ab:1b:ee:be:7d:7b:40:37:03:
                    42:13:95:7e:8b:28:3e:4a:d9:d7:ce:9b:b0:6e:f1:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:64:EF:7E:05:53:34:72:E6:D1:A4:E0:71:0D:1B:FA:7D:15:55
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/V9Rk734FUzRy5tGk4HENG_p9FVU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:7f:7d:61:7b:1c:9b:2b:ba:9d:d7:23:96:21:e0:d2:86:
         0a:bd:f0:95:89:bd:97:21:33:1b:2f:11:7e:1e:0d:e9:32:7d:
         45:73:f9:cf:b6:b1:31:58:b4:0a:cd:b9:a4:1a:1d:0e:0e:31:
         68:6a:1b:9f:4c:93:45:f2:62:28:c1:d0:c6:e9:bd:8f:bc:96:
         de:89:af:45:f9:55:2f:c3:71:9e:d6:6c:fe:0d:c4:07:d5:85:
         a2:66:75:19:eb:2e:64:46:89:6c:f9:03:12:ba:32:0e:a2:2f:
         0b:81:a2:fb:c1:92:3f:d1:a5:18:87:ba:06:b6:ae:cb:68:c6:
         3a:b1:d5:95:13:ed:a0:73:9a:75:30:d1:b2:10:8e:32:5a:80:
         55:c7:95:35:29:a6:90:29:9b:e6:4b:f1:5e:50:ba:96:13:4f:
         af:18:f8:c8:92:ad:15:18:86:c8:b2:1a:07:81:1b:ef:97:f8:
         2e:f5:e9:d1:57:2e:de:25:54:00:f2:09:aa:c8:83:12:ed:6b:
         a1:0d:a7:82:85:31:9c:2b:ae:82:82:f4:93:95:53:fc:13:40:
         4d:a2:ee:57:3c:67:e8:1c:d9:36:9f:12:2a:aa:b3:46:b0:f8:
         1a:0b:61:e5:b6:df:a2:61:ba:aa:64:c6:55:d8:aa:10:2e:4e:
         da:ac:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:20 2026 by rpki-client