Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9Oscg_vHesVIgFmpXgxvP5raqlg.roa
File:                     9Oscg_vHesVIgFmpXgxvP5raqlg.roa (raw, json)
Hash identifier:          jWJHQMNGgDrG4KW1kpseq2qAoX4Rhx7F14AezjzmEB8=
Subject key identifier:   F4:EB:1C:83:FB:C7:7A:C5:48:80:59:A9:5E:0C:6F:3F:9A:DA:AA:58
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1492
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9Oscg_vHesVIgFmpXgxvP5raqlg.roa
Signing time:             Tue 31 Mar 2026 07:57:48 +0000
ROA not before:           Tue 31 Mar 2026 07:57:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5266 (0x1492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F4EB1C83FBC77AC5488059A95E0C6F3F9ADAAA58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:ca:78:0a:a6:b3:64:d9:1f:4a:3c:69:9c:
                    35:7b:8c:bf:be:95:fd:c2:2c:f9:96:0c:28:2d:76:
                    79:3c:5f:4e:ba:32:b9:b4:52:4f:69:0a:e3:62:fa:
                    34:35:94:3b:fb:91:15:88:7c:09:b7:e5:2a:7c:48:
                    67:29:dc:89:b4:a6:1e:0a:d0:31:6f:a1:5f:0f:aa:
                    f7:85:92:f6:14:11:cb:3a:ab:5e:89:d4:ea:f7:ac:
                    47:08:a0:61:98:48:8f:3c:74:4b:65:d2:02:e2:3b:
                    d7:6b:de:ac:2d:8d:ef:f9:74:68:6a:48:99:c1:a9:
                    29:71:a3:f8:00:34:16:bc:1f:49:6e:cf:bc:d7:37:
                    d7:48:42:66:e7:71:ac:60:2a:58:56:67:86:a7:64:
                    21:f7:d3:37:25:67:d9:1d:28:03:73:6e:b0:39:d7:
                    84:a0:f4:ed:87:a6:55:41:c1:15:1b:92:6c:4e:19:
                    13:7c:e8:c5:3b:60:ed:f6:35:6d:8a:a5:69:cb:22:
                    58:bd:1d:ee:f9:88:4e:d6:2a:de:0c:da:c2:e5:51:
                    7f:60:a1:f0:fd:7d:d3:12:fd:27:ed:72:14:c5:fd:
                    7e:ea:fc:8a:ff:c9:a0:ac:9b:12:58:49:9b:14:7d:
                    80:e6:a9:de:8d:b0:a7:0a:bd:33:49:ad:81:71:7e:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EB:1C:83:FB:C7:7A:C5:48:80:59:A9:5E:0C:6F:3F:9A:DA:AA:58
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9Oscg_vHesVIgFmpXgxvP5raqlg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:5b:a0:c6:e7:94:34:0a:fc:01:44:5e:78:0b:ac:70:65:
         e7:99:cf:23:8d:e2:cb:ce:47:eb:7e:e3:fa:2b:5d:39:b0:56:
         a0:cd:52:dc:ab:74:81:54:b1:b2:9d:0c:63:13:b7:aa:41:20:
         c0:04:fd:17:8c:ea:63:32:75:94:c7:de:0a:96:7b:8c:c3:09:
         69:66:8d:a3:85:fe:84:e3:70:ca:d0:e8:ef:60:f9:ef:52:cd:
         2e:bf:b8:0c:74:fc:92:65:cd:59:e6:44:a3:86:8e:82:33:8e:
         e2:bb:d7:e1:a7:18:ff:e8:f9:39:25:98:cd:bb:ca:78:95:93:
         fa:95:37:2a:7a:0b:66:52:9d:c0:99:cb:56:e4:0d:68:d0:12:
         52:6a:c3:14:06:de:51:5c:92:ef:01:08:e0:32:bd:d2:2f:3b:
         ac:10:bf:d0:3a:4c:1d:92:89:8b:b1:fe:11:ac:2a:f8:e8:a0:
         2d:34:1b:bb:a3:ef:b6:cc:43:d8:a6:c7:c3:d4:dc:de:ee:b0:
         92:83:ec:fd:ea:92:ea:46:a2:fb:66:06:ef:32:1a:c4:f6:8d:
         9d:7a:c3:b0:95:19:b7:eb:29:f8:aa:bd:e1:8a:0d:00:8d:5e:
         34:f3:e1:41:ee:f2:78:e2:eb:49:ff:24:80:d8:a8:49:a7:9d:
         0b:99:33:c7
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU3NDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY0RUIxQzgzRkJDNzdB
QzU0ODgwNTlBOTVFMEM2RjNGOUFEQUFBNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ2sp4CqazZNkfSjxpnDV7jL++lf3CLPmWDCgtdnk8X066Mrm0
Uk9pCuNi+jQ1lDv7kRWIfAm35Sp8SGcp3Im0ph4K0DFvoV8PqveFkvYUEcs6q16J
1Or3rEcIoGGYSI88dEtl0gLiO9dr3qwtje/5dGhqSJnBqSlxo/gANBa8H0luz7zX
N9dIQmbncaxgKlhWZ4anZCH30zclZ9kdKANzbrA514Sg9O2HplVBwRUbkmxOGRN8
6MU7YO32NW2KpWnLIli9He75iE7WKt4M2sLlUX9gofD9fdMS/SftchTF/X7q/Ir/
yaCsmxJYSZsUfYDmqd6NsKcKvTNJrYFxfgf1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU9Oscg/vHesVIgFmpXgxvP5raqlgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzlPc2NnX3ZIZXNWSWdGbXBYZ3h2UDVyYXFsZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBS+gwDQYJKoZIhvcNAQELBQADggEB
AJqcW6DG55Q0CvwBRF54C6xwZeeZzyON4svOR+t+4/orXTmwVqDNUtyrdIFUsbKd
DGMTt6pBIMAE/ReM6mMydZTH3gqWe4zDCWlmjaOF/oTjcMrQ6O9g+e9SzS6/uAx0
/JJlzVnmRKOGjoIzjuK71+GnGP/o+TklmM27yniVk/qVNyp6C2ZSncCZy1bkDWjQ
ElJqwxQG3lFcku8BCOAyvdIvO6wQv9A6TB2SiYux/hGsKvjooC00G7uj77bMQ9im
x8PU3N7usJKD7P3qkupGovtmBu8yGsT2jZ16w7CVGbfrKfiqveGKDQCNXjTz4UHu
8nji60n/JIDYqEmnnQuZM8c=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:41 2026 by rpki-client