Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/452A4p3mnSMsK1C12Pm2xAIPoOs.roa
File:                     452A4p3mnSMsK1C12Pm2xAIPoOs.roa (raw, json)
Hash identifier:          4kZtlJaVCAVbyI8n0TNNoNYYHIdFSJ1czNMU3NEk+IM=
Subject key identifier:   E3:9D:80:E2:9D:E6:9D:23:2C:2B:50:B5:D8:F9:B6:C4:02:0F:A0:EB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16E3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/452A4p3mnSMsK1C12Pm2xAIPoOs.roa
Signing time:             Tue 31 Mar 2026 08:02:41 +0000
ROA not before:           Tue 31 Mar 2026 08:02:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5859 (0x16e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E39D80E29DE69D232C2B50B5D8F9B6C4020FA0EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:62:73:37:f6:8c:e5:e7:2d:ad:09:e3:97:
                    05:7b:82:bc:5b:86:42:6a:8c:41:31:21:25:fe:46:
                    7b:b8:34:94:00:13:0f:4e:49:2b:63:e8:b6:47:0e:
                    e1:6f:35:5b:b5:9f:e6:d5:50:27:ba:99:b7:7e:c7:
                    10:19:a8:60:97:c5:d3:25:f1:28:6f:95:7a:87:b7:
                    64:86:f4:c2:60:84:87:ed:ea:7f:e4:cc:c3:3f:e1:
                    34:4e:45:6c:48:2e:26:b7:db:63:7a:9c:02:4d:a1:
                    95:86:cb:8e:1e:cd:4d:3e:3f:60:cd:9b:eb:81:57:
                    b0:d7:e9:54:65:94:ba:8d:50:de:bf:cb:20:f3:4a:
                    7d:b0:00:ac:6f:d2:de:f8:a6:e3:5f:eb:ec:05:1f:
                    3b:29:8a:32:b5:23:f4:af:e8:4b:63:54:8d:32:e2:
                    ca:5f:1d:a6:f2:1a:e7:25:34:8b:78:af:a6:cc:b9:
                    c5:5b:5d:dc:f4:d4:ef:98:fc:80:0d:69:59:53:5d:
                    a5:6f:d9:39:4f:e1:1b:23:f5:72:0a:45:22:8c:d2:
                    2a:30:35:d4:2a:59:90:86:fd:20:c0:90:23:6c:e7:
                    65:49:65:f5:00:91:cf:f0:cc:a6:50:c1:f3:23:48:
                    cf:0c:08:1a:53:4f:78:30:0e:f1:e6:49:3a:a2:0e:
                    9a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9D:80:E2:9D:E6:9D:23:2C:2B:50:B5:D8:F9:B6:C4:02:0F:A0:EB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/452A4p3mnSMsK1C12Pm2xAIPoOs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c6:b5:01:ca:b2:ce:3a:ed:50:a7:05:a8:72:22:4d:26:b9:84:
         e0:0e:ec:64:01:80:91:3a:4f:9a:96:bd:59:d7:bd:73:cc:a1:
         87:9a:23:3e:69:24:ae:1f:d0:63:56:9e:d2:0f:0c:04:f3:8f:
         e8:9f:16:d0:59:c9:88:94:cc:7b:19:18:a8:aa:c0:d0:83:fb:
         2e:8c:71:ef:5f:5b:07:d6:d3:66:3a:fc:79:84:51:59:8e:47:
         44:93:83:d6:0a:12:00:77:8d:b0:a3:ff:6e:30:e6:08:ea:cd:
         01:1b:38:23:57:6f:28:ab:49:14:69:a4:66:b7:c6:aa:4c:f1:
         8d:73:19:55:37:39:fb:f3:f1:47:ed:fa:02:e2:2c:9a:51:a9:
         52:01:6d:3f:d0:d7:60:ea:8a:8a:2d:8e:84:91:6d:f5:5b:38:
         90:6a:90:71:18:df:b0:0e:9e:f0:da:d2:da:e6:da:f9:8a:25:
         0f:33:99:cc:50:9a:db:53:85:33:82:b7:b9:44:66:e3:ca:23:
         53:f3:1b:fb:06:28:ed:45:2c:4e:56:8d:a9:1c:f3:64:7f:5c:
         e0:ee:ec:29:b9:8a:a6:37:e2:c4:e9:f0:df:8c:5a:08:56:c7:
         0b:f6:fd:48:92:5a:b8:29:7a:ca:1e:55:26:db:ce:4b:7d:bf:
         32:07:5b:e1
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFuMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAyNDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUzOUQ4MEUyOURFNjlE
MjMyQzJCNTBCNUQ4RjlCNkM0MDIwRkEwRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBgWJzN/aM5ectrQnjlwV7grxbhkJqjEExISX+Rnu4NJQAEw9O
SStj6LZHDuFvNVu1n+bVUCe6mbd+xxAZqGCXxdMl8ShvlXqHt2SG9MJghIft6n/k
zMM/4TRORWxILia322N6nAJNoZWGy44ezU0+P2DNm+uBV7DX6VRllLqNUN6/yyDz
Sn2wAKxv0t74puNf6+wFHzspijK1I/Sv6EtjVI0y4spfHabyGuclNIt4r6bMucVb
Xdz01O+Y/IANaVlTXaVv2TlP4Rsj9XIKRSKM0iowNdQqWZCG/SDAkCNs52VJZfUA
kc/wzKZQwfMjSM8MCBpTT3gwDvHmSTqiDpqVAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU452A4p3mnSMsK1C12Pm2xAIPoOswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzQ1MkE0cDNtblNNc0sxQzEyUG0yeEFJUG9Pcy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUb5sAwDQYJKoZIhvcNAQELBQADggEB
AMa1AcqyzjrtUKcFqHIiTSa5hOAO7GQBgJE6T5qWvVnXvXPMoYeaIz5pJK4f0GNW
ntIPDATzj+ifFtBZyYiUzHsZGKiqwNCD+y6Mce9fWwfW02Y6/HmEUVmOR0STg9YK
EgB3jbCj/24w5gjqzQEbOCNXbyirSRRppGa3xqpM8Y1zGVU3Ofvz8Uft+gLiLJpR
qVIBbT/Q12DqiootjoSRbfVbOJBqkHEY37AOnvDa0trm2vmKJQ8zmcxQmttThTOC
t7lEZuPKI1PzG/sGKO1FLE5Wjakc82R/XODu7Cm5iqY34sTp8N+MWghWxwv2/UiS
WrgpesoeVSbbzkt9vzIHW+E=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:03 2026 by rpki-client