Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7sUBv2j-1h72sCCaRmU_Vh25mk4.roa
File:                     7sUBv2j-1h72sCCaRmU_Vh25mk4.roa (raw, json)
Hash identifier:          xCthnqYxzoKZAKT8fS5zRee/9LQRRpFePU37ca7lbgk=
Subject key identifier:   EE:C5:01:BF:68:FE:D6:1E:F6:B0:20:9A:46:65:3F:56:1D:B9:9A:4E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15A9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7sUBv2j-1h72sCCaRmU_Vh25mk4.roa
Signing time:             Tue 31 Mar 2026 08:00:05 +0000
ROA not before:           Tue 31 Mar 2026 08:00:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.122.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5545 (0x15a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EEC501BF68FED61EF6B0209A46653F561DB99A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:a1:bb:b2:77:aa:a5:a1:47:52:e6:f4:1f:
                    ad:cd:e4:a9:dd:72:d3:53:99:20:8c:29:9d:8f:29:
                    2d:b6:8c:c6:9e:9b:10:f7:55:16:b0:53:bf:bd:f8:
                    13:4e:33:48:9e:c0:20:fa:5c:c3:f9:d4:dd:99:6d:
                    db:92:c0:4e:8a:f6:81:f2:91:b2:0d:c8:1a:a8:37:
                    73:ec:51:a2:89:02:23:e0:69:4a:12:30:4d:1a:60:
                    db:ab:b7:1a:cd:e5:91:f5:20:3e:c3:fd:92:02:df:
                    9b:eb:3b:a7:89:36:de:29:ca:55:3f:16:63:3e:29:
                    4e:dd:91:3c:07:4f:16:85:d8:68:f2:ae:5b:09:7a:
                    55:10:d7:06:8c:41:f2:3a:90:97:a7:fd:44:02:33:
                    17:24:c1:98:e7:a9:2f:9b:7c:a5:7e:ff:fb:8a:12:
                    a8:50:58:b9:cb:18:5f:aa:b7:d3:20:8c:3d:fc:ff:
                    86:22:e2:f7:fd:11:56:23:80:28:4e:db:65:ea:f4:
                    12:66:12:af:a2:24:49:0c:31:4a:b6:42:7a:b7:84:
                    d7:30:65:6b:90:85:7b:92:05:59:d3:af:20:33:ac:
                    c9:cf:d0:6e:dc:2a:3a:dd:0d:c3:f7:dd:2f:43:f5:
                    9c:16:df:91:54:7a:0a:25:ea:77:53:5c:a2:97:90:
                    a4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C5:01:BF:68:FE:D6:1E:F6:B0:20:9A:46:65:3F:56:1D:B9:9A:4E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7sUBv2j-1h72sCCaRmU_Vh25mk4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:54:f8:39:e7:4c:ba:4e:a6:1f:ad:18:b7:21:1a:00:d2:49:
         87:75:5f:30:2c:7d:18:de:96:4c:48:80:ee:5a:e8:89:b5:0b:
         dc:97:79:e3:90:88:2b:6f:66:0b:17:f0:77:c7:0d:5a:5a:da:
         a7:63:ef:85:2a:20:04:5e:73:83:ad:54:65:92:46:11:bb:4f:
         da:aa:28:fc:4a:8c:42:ed:5a:4d:b7:5f:4f:ca:44:e3:27:04:
         f8:04:5b:7c:32:06:5d:c5:6e:ae:ed:d7:d5:80:9a:bc:a4:73:
         77:b6:12:40:ff:c4:4a:b2:43:54:be:be:00:90:06:35:e9:37:
         cf:b3:fe:ba:83:53:d3:c0:fb:bf:af:b2:a3:fd:c6:83:e0:f2:
         1d:aa:6e:38:fb:41:8c:a0:32:ee:00:26:16:d8:42:a3:32:db:
         1a:9d:ce:40:c4:eb:cd:f0:06:b1:ab:0b:3e:f3:f8:0b:19:6b:
         d2:90:22:5f:ce:52:ed:94:53:04:a1:b5:36:ac:d7:01:8b:44:
         06:c2:1b:fb:d3:b2:e7:7f:ad:cd:e7:1e:a6:95:db:f7:9e:8d:
         68:81:40:61:c4:32:2b:b0:06:e7:9d:88:c3:00:67:9e:79:a9:
         3e:93:dc:93:30:e0:e2:d5:ce:0b:22:ba:20:1f:1e:ff:2e:20:
         17:cf:fc:80
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAwMDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVFQzUwMUJGNjhGRUQ2
MUVGNkIwMjA5QTQ2NjUzRjU2MURCOTlBNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1faG7sneqpaFHUub0H63N5KndctNTmSCMKZ2PKS22jMaemxD3
VRawU7+9+BNOM0iewCD6XMP51N2ZbduSwE6K9oHykbINyBqoN3PsUaKJAiPgaUoS
ME0aYNurtxrN5ZH1ID7D/ZIC35vrO6eJNt4pylU/FmM+KU7dkTwHTxaF2GjyrlsJ
elUQ1waMQfI6kJen/UQCMxckwZjnqS+bfKV+//uKEqhQWLnLGF+qt9MgjD38/4Yi
4vf9EVYjgChO22Xq9BJmEq+iJEkMMUq2Qnq3hNcwZWuQhXuSBVnTryAzrMnP0G7c
KjrdDcP33S9D9ZwW35FUegol6ndTXKKXkKR7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU7sUBv2j+1h72sCCaRmU/Vh25mk4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzdzVUJ2MmotMWg3MnNDQ2FSbVVfVmgyNW1rNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPbekAwDQYJKoZIhvcNAQELBQADggEB
ACNU+DnnTLpOph+tGLchGgDSSYd1XzAsfRjelkxIgO5a6Im1C9yXeeOQiCtvZgsX
8HfHDVpa2qdj74UqIARec4OtVGWSRhG7T9qqKPxKjELtWk23X0/KROMnBPgEW3wy
Bl3Fbq7t19WAmrykc3e2EkD/xEqyQ1S+vgCQBjXpN8+z/rqDU9PA+7+vsqP9xoPg
8h2qbjj7QYygMu4AJhbYQqMy2xqdzkDE683wBrGrCz7z+AsZa9KQIl/OUu2UUwSh
tTas1wGLRAbCG/vTsud/rc3nHqaV2/eejWiBQGHEMiuwBuediMMAZ555qT6T3JMw
4OLVzgsiuiAfHv8uIBfP/IA=
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:39 2026 by rpki-client