Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ARwB4XBbNNlqv3zqs06XRBqj_ag.roa
File:                     ARwB4XBbNNlqv3zqs06XRBqj_ag.roa (raw, json)
Hash identifier:          Yfe39vEnMSyWi5ijneo1rhWqwdtRb0gpJhP8A1bhq20=
Subject key identifier:   01:1C:01:E1:70:5B:34:D9:6A:BF:7C:EA:B3:4E:97:44:1A:A3:FD:A8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1553
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ARwB4XBbNNlqv3zqs06XRBqj_ag.roa
Signing time:             Tue 31 Mar 2026 07:59:26 +0000
ROA not before:           Tue 31 Mar 2026 07:59:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5459 (0x1553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=011C01E1705B34D96ABF7CEAB34E97441AA3FDA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:57:6b:1c:5c:7e:ca:8c:37:16:4d:3b:d9:
                    6e:a9:af:b9:e0:c5:19:ef:9d:52:1c:b2:f0:88:db:
                    28:64:67:b5:35:a5:78:ba:d5:46:df:dd:8d:4c:b3:
                    e2:e2:24:a3:8a:94:68:e7:41:0d:00:a4:81:62:2c:
                    f2:43:a9:32:28:d2:0d:36:93:d9:55:55:c3:bc:f2:
                    dc:fe:05:95:10:65:fc:b6:79:cc:99:0d:c4:9e:89:
                    3a:fa:9e:c3:d3:75:cd:7c:b6:c8:4f:3f:f9:5f:5e:
                    1f:83:e1:fb:2e:d5:46:19:96:ff:b5:eb:d0:58:bb:
                    6a:f0:28:5e:09:cf:d3:f2:bb:2f:2f:37:4c:de:be:
                    51:5c:67:c3:64:79:f7:44:af:8a:e4:97:9f:da:ff:
                    b4:0e:33:a1:00:d2:d0:8a:3b:8f:04:f5:0a:97:ae:
                    22:41:19:99:60:bf:4e:03:f6:05:79:7a:f3:79:59:
                    f8:a5:3e:5a:d0:5f:bf:a2:4d:af:5b:52:df:ae:3b:
                    d6:04:98:7d:12:20:5f:08:6e:07:e2:4f:6e:55:a4:
                    8b:60:14:bc:e0:58:ec:c9:1e:3b:01:2f:f7:a1:9e:
                    da:1b:b9:44:f9:72:ff:65:ef:2c:76:e5:bf:e5:07:
                    b9:3f:7f:5f:d1:1b:d1:40:55:29:ca:6d:a4:cf:4f:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1C:01:E1:70:5B:34:D9:6A:BF:7C:EA:B3:4E:97:44:1A:A3:FD:A8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ARwB4XBbNNlqv3zqs06XRBqj_ag.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:3a:62:e3:a4:69:2e:59:3d:d5:02:ad:8a:b6:ef:8f:f0:de:
         1b:c1:ca:3e:d6:35:c2:b1:0f:aa:39:e8:59:17:f7:64:e7:93:
         3c:da:32:79:ec:2e:1f:b8:94:11:58:b9:26:1a:1f:25:73:fe:
         24:e9:6c:59:bb:bd:97:49:f2:8a:bb:8b:ff:63:19:e4:fc:b8:
         45:01:70:3b:49:98:79:56:b5:66:ef:02:c1:cd:f3:71:4b:be:
         5e:32:c5:95:ba:fe:73:89:4d:47:c4:86:09:bc:0f:76:cc:1c:
         31:62:9d:df:77:7a:da:c2:dd:5a:4e:ec:6a:21:9b:ea:9c:ca:
         0a:cf:9a:32:6a:bf:71:3e:4a:e1:2f:b4:dc:c7:d1:1a:b3:c5:
         f5:4c:67:c0:84:63:99:8c:1b:42:fb:47:6f:56:c2:b6:bf:d8:
         62:fa:f7:73:54:b5:19:cb:09:32:2e:c2:b8:23:c0:0b:3d:8f:
         40:60:d7:56:36:4c:ec:c0:e0:09:21:64:66:72:00:94:14:bf:
         bf:2e:6a:0d:8c:48:8c:30:62:e6:4b:3d:42:6f:72:b8:d9:a3:
         aa:68:77:39:c3:6e:64:2d:c8:aa:79:12:50:77:e6:d4:33:08:
         f8:a9:0d:a9:d5:24:f3:46:64:4f:b6:0e:74:b8:ea:83:86:e3:
         81:5a:2f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:58 2026 by rpki-client