Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9A69-i3PNr19G4Zmqm7YmKRw4EQ.roa
File:                     9A69-i3PNr19G4Zmqm7YmKRw4EQ.roa (raw, json)
Hash identifier:          3ms0/smPqFXZb6cc77aj4vBlJM9hU35gNNCpL/K7Dmg=
Subject key identifier:   F4:0E:BD:FA:2D:CF:36:BD:7D:1B:86:66:AA:6E:D8:98:A4:70:E0:44
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1433
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9A69-i3PNr19G4Zmqm7YmKRw4EQ.roa
Signing time:             Tue 31 Mar 2026 07:57:03 +0000
ROA not before:           Tue 31 Mar 2026 07:57:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5171 (0x1433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F40EBDFA2DCF36BD7D1B8666AA6ED898A470E044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:03:ec:d5:76:c3:cc:c4:a8:e4:2f:af:f8:
                    f6:52:61:1f:92:48:00:24:a3:f8:c7:03:8d:02:db:
                    29:8c:a7:9b:de:99:91:43:af:dc:bf:76:55:9e:c3:
                    d9:00:18:6f:b5:40:1f:c7:bb:60:3f:3f:a8:d4:e9:
                    20:84:05:7f:a8:cd:09:e4:72:0e:6f:2d:d2:71:c4:
                    75:ba:1d:7d:62:4c:b3:a3:19:d8:ef:be:a9:e4:0b:
                    a5:ef:73:11:2c:c7:82:d6:a8:fb:58:4d:44:8e:48:
                    8a:18:aa:3a:0c:68:a8:58:3f:ff:6d:80:8f:80:0d:
                    c2:78:25:55:18:1a:ea:1d:dd:b2:e1:ed:a1:85:6a:
                    75:45:f0:16:c5:5b:b1:93:54:4f:fb:fc:14:fb:4f:
                    11:af:02:92:97:91:7a:0d:ba:af:90:83:5e:dc:5b:
                    9c:25:a7:16:17:ca:59:75:65:0a:81:b5:e8:83:3d:
                    2a:7c:26:de:ea:05:c5:e0:89:5d:ce:cf:02:ba:fe:
                    78:6c:bd:25:45:41:b7:09:85:59:bb:59:60:4c:4d:
                    4f:ba:83:89:47:75:79:0f:8f:44:21:60:58:c3:e4:
                    79:0e:4b:d0:fa:b5:ce:8e:90:ee:5e:44:89:c9:6e:
                    d0:c4:a8:c9:23:68:65:fe:6b:f4:09:23:8e:74:0c:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0E:BD:FA:2D:CF:36:BD:7D:1B:86:66:AA:6E:D8:98:A4:70:E0:44
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9A69-i3PNr19G4Zmqm7YmKRw4EQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:0f:3f:73:82:64:2d:ba:82:cb:5e:93:3e:fa:7f:f6:f3:e4:
         6e:45:54:7f:bf:c7:46:20:b6:5c:0f:fc:b5:9a:e7:8c:73:1c:
         02:ec:c0:01:ef:49:4d:0f:99:f1:6c:20:e7:2c:39:44:c2:e6:
         46:7b:ca:a9:bf:48:47:3b:57:20:16:82:b3:50:7c:ca:ac:cb:
         1e:e3:c6:32:b3:aa:b2:09:79:72:e7:e6:75:72:0d:c5:d2:02:
         e3:ce:5c:fb:83:ef:8d:ea:35:3a:08:60:ca:c6:4f:aa:ca:d5:
         f2:4d:13:15:9d:93:a4:4e:7f:b0:b7:c6:b5:a8:75:ae:cf:2b:
         33:0d:88:27:48:fe:33:fd:55:ae:37:a2:34:69:b0:03:6e:67:
         47:7e:7e:2f:87:76:fa:16:65:01:46:ae:1e:87:a6:3a:f7:52:
         d8:66:87:55:48:2f:fc:fc:1b:7b:be:05:0e:aa:eb:9c:38:5b:
         b1:37:cf:26:76:70:9f:d4:16:e2:88:f4:ae:e7:ee:b6:8b:ba:
         ad:83:7d:c7:b4:3f:67:f8:c1:16:c9:52:af:dc:2c:91:f6:d7:
         66:ba:63:55:75:43:d4:22:1f:01:98:ca:1f:e3:48:ba:5b:0d:
         52:8e:96:ff:27:e2:15:25:4b:7c:a7:be:19:23:8e:98:93:a4:
         46:80:b3:2d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFDMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU3MDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY0MEVCREZBMkRDRjM2
QkQ3RDFCODY2NkFBNkVEODk4QTQ3MEUwNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClZAPs1XbDzMSo5C+v+PZSYR+SSAAko/jHA40C2ymMp5vemZFD
r9y/dlWew9kAGG+1QB/Hu2A/P6jU6SCEBX+ozQnkcg5vLdJxxHW6HX1iTLOjGdjv
vqnkC6XvcxEsx4LWqPtYTUSOSIoYqjoMaKhYP/9tgI+ADcJ4JVUYGuod3bLh7aGF
anVF8BbFW7GTVE/7/BT7TxGvApKXkXoNuq+Qg17cW5wlpxYXyll1ZQqBteiDPSp8
Jt7qBcXgiV3OzwK6/nhsvSVFQbcJhVm7WWBMTU+6g4lHdXkPj0QhYFjD5HkOS9D6
tc6OkO5eRInJbtDEqMkjaGX+a/QJI450DJRtAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU9A69+i3PNr19G4Zmqm7YmKRw4EQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzlBNjktaTNQTnIxOUc0Wm1xbTdZbUtSdzRFUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBT7IwDQYJKoZIhvcNAQELBQADggEB
AH4PP3OCZC26gstekz76f/bz5G5FVH+/x0YgtlwP/LWa54xzHALswAHvSU0PmfFs
IOcsOUTC5kZ7yqm/SEc7VyAWgrNQfMqsyx7jxjKzqrIJeXLn5nVyDcXSAuPOXPuD
743qNToIYMrGT6rK1fJNExWdk6ROf7C3xrWoda7PKzMNiCdI/jP9Va43ojRpsANu
Z0d+fi+HdvoWZQFGrh6Hpjr3Uthmh1VIL/z8G3u+BQ6q65w4W7E3zyZ2cJ/UFuKI
9K7n7raLuq2Dfce0P2f4wRbJUq/cLJH212a6Y1V1Q9QiHwGYyh/jSLpbDVKOlv8n
4hUlS3ynvhkjjpiTpEaAsy0=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:35 2026 by rpki-client