Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Aq5dE-5s76x8V58VW2hhL8_axgw.roa
File:                     Aq5dE-5s76x8V58VW2hhL8_axgw.roa (raw, json)
Hash identifier:          XgHDf/4w5WOBARfX+c7wpurd3yL4jEiF1okdgAhqu3M=
Subject key identifier:   02:AE:5D:13:EE:6C:EF:AC:7C:57:9F:15:5B:68:61:2F:CF:DA:C6:0C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1371
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Aq5dE-5s76x8V58VW2hhL8_axgw.roa
Signing time:             Tue 31 Mar 2026 07:55:34 +0000
ROA not before:           Tue 31 Mar 2026 07:55:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4977 (0x1371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=02AE5D13EE6CEFAC7C579F155B68612FCFDAC60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f9:b3:02:4f:1d:c7:e8:60:12:9f:91:32:49:
                    b9:ff:a7:e9:90:ab:a0:37:7e:02:22:8e:27:15:29:
                    2f:2c:31:51:e3:7d:c9:7a:10:6e:d2:bc:70:72:ec:
                    65:aa:2f:a6:d8:6e:8e:ff:74:8d:2d:7d:dc:fd:7c:
                    5e:be:0b:18:29:37:5d:fb:57:84:f2:5e:0c:fa:b5:
                    15:4c:6c:22:13:89:69:41:a2:b2:e4:d4:95:c3:37:
                    54:17:51:a1:92:ff:a3:90:da:93:ea:b0:ae:42:7f:
                    82:a1:de:71:b9:75:eb:eb:e2:05:53:90:4b:07:a5:
                    d3:e8:81:21:7e:ce:75:a5:a9:49:ae:51:be:79:20:
                    cb:2c:e9:9a:83:23:c9:da:4c:a3:39:0f:e5:b3:04:
                    52:59:bf:e3:0d:36:6a:01:b8:7c:58:38:4f:f7:8f:
                    06:8f:19:21:90:94:a1:8f:07:3c:1f:8b:91:b7:05:
                    a5:8c:f2:5c:21:f2:f3:b9:bb:b9:2b:f9:cb:a8:e5:
                    ab:9c:21:13:48:a4:10:62:55:ae:d5:99:90:b7:88:
                    8a:f8:46:a9:dc:4e:ff:18:27:00:7c:09:59:41:4d:
                    38:25:ea:93:8e:cc:81:79:1e:47:5d:62:4e:bb:a6:
                    e0:76:78:74:9a:b6:63:e1:2b:f4:17:82:0d:df:0a:
                    fd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AE:5D:13:EE:6C:EF:AC:7C:57:9F:15:5B:68:61:2F:CF:DA:C6:0C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Aq5dE-5s76x8V58VW2hhL8_axgw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b0:58:7c:e6:f7:96:e4:b4:f7:0e:35:fb:26:71:d7:11:cd:1a:
         53:98:a3:52:75:56:80:ec:7e:e8:45:8d:c0:bf:3f:e6:4d:db:
         5f:de:c8:bc:6c:2e:9c:e0:b3:cd:d0:6d:e3:55:92:e8:fa:5a:
         00:87:c1:e2:05:0f:48:da:2d:25:a4:4a:a3:6e:4d:e4:30:14:
         d6:49:9f:2f:91:e3:96:38:a5:d5:6f:6b:ce:76:a3:4c:0c:8b:
         6c:ab:44:75:11:69:10:0c:61:25:41:dd:36:98:66:c2:3a:a6:
         56:cc:2d:b2:e9:e5:c6:0f:bb:6b:2f:1b:0b:71:cc:83:95:59:
         e8:61:26:ae:10:3e:bb:91:b2:95:32:04:ab:ce:c7:90:08:31:
         50:4c:ff:72:02:6e:0a:36:ec:81:5e:65:54:c3:0f:7a:58:86:
         10:20:e8:47:ec:65:9b:4d:98:0d:e1:d7:4d:18:32:49:ce:7f:
         3f:88:e9:df:c1:0f:71:bc:9d:78:63:a8:d0:02:17:3b:56:2e:
         16:82:37:3f:56:cb:74:7f:79:99:b3:f9:55:76:fa:75:5a:b7:
         9a:79:45:a3:39:49:41:dd:a8:43:e6:4b:b7:94:a8:69:a2:c0:
         0a:8d:06:6c:14:f1:7d:b2:4f:75:f9:15:d4:3e:5d:9f:94:53:
         65:27:6a:01
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICE3EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU1MzRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyQUU1RDEzRUU2Q0VG
QUM3QzU3OUYxNTVCNjg2MTJGQ0ZEQUM2MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDS+bMCTx3H6GASn5EySbn/p+mQq6A3fgIijicVKS8sMVHjfcl6
EG7SvHBy7GWqL6bYbo7/dI0tfdz9fF6+CxgpN137V4TyXgz6tRVMbCITiWlBorLk
1JXDN1QXUaGS/6OQ2pPqsK5Cf4Kh3nG5devr4gVTkEsHpdPogSF+znWlqUmuUb55
IMss6ZqDI8naTKM5D+WzBFJZv+MNNmoBuHxYOE/3jwaPGSGQlKGPBzwfi5G3BaWM
8lwh8vO5u7kr+cuo5aucIRNIpBBiVa7VmZC3iIr4RqncTv8YJwB8CVlBTTgl6pOO
zIF5HkddYk67puB2eHSatmPhK/QXgg3fCv0zAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUAq5dE+5s76x8V58VW2hhL8/axgwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0FxNWRFLTVzNzZ4OFY1OFZXMmhoTDhfYXhndy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYBSYAwDQYJKoZIhvcNAQELBQADggEB
ALBYfOb3luS09w41+yZx1xHNGlOYo1J1VoDsfuhFjcC/P+ZN21/eyLxsLpzgs83Q
beNVkuj6WgCHweIFD0jaLSWkSqNuTeQwFNZJny+R45Y4pdVva852o0wMi2yrRHUR
aRAMYSVB3TaYZsI6plbMLbLp5cYPu2svGwtxzIOVWehhJq4QPruRspUyBKvOx5AI
MVBM/3ICbgo27IFeZVTDD3pYhhAg6EfsZZtNmA3h100YMknOfz+I6d/BD3G8nXhj
qNACFztWLhaCNz9Wy3R/eZmz+VV2+nVat5p5RaM5SUHdqEPmS7eUqGmiwAqNBmwU
8X2yT3X5FdQ+XZ+UU2UnagE=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:06 2026 by rpki-client