Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FPJoUHH2lTyYz9eXENiwgvd7mSk.roa
File:                     FPJoUHH2lTyYz9eXENiwgvd7mSk.roa (raw, json)
Hash identifier:          7lRZkHktXuHaQqwAcof9+L5Qw3+4opETozpsV1QBOPI=
Subject key identifier:   14:F2:68:50:71:F6:95:3C:98:CF:D7:97:10:D8:B0:82:F7:7B:99:29
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       144C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FPJoUHH2lTyYz9eXENiwgvd7mSk.roa
Signing time:             Tue 31 Mar 2026 07:57:18 +0000
ROA not before:           Tue 31 Mar 2026 07:57:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5196 (0x144c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=14F2685071F6953C98CFD79710D8B082F77B9929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:27:10:b1:cf:47:f3:c3:f3:32:b0:92:f5:
                    4f:7b:96:e2:af:4e:ca:66:f7:0c:89:3d:5f:43:f5:
                    26:2f:7d:99:26:1b:e0:a8:d0:3a:07:8b:62:5f:7c:
                    da:75:8d:e6:c1:7b:ad:f0:ff:c7:ac:b7:de:fa:82:
                    08:6f:cb:9c:88:bd:06:78:6d:27:bb:d8:a0:43:0d:
                    4d:48:4b:59:3b:13:15:0e:68:5f:34:e4:2b:44:1a:
                    d9:e3:13:33:dc:e6:fd:cd:8b:a4:6b:0e:b9:23:44:
                    3e:42:9c:9f:6d:27:8b:9a:dd:0e:29:08:a8:44:1d:
                    a3:b2:9e:02:48:5c:09:e3:fd:d7:53:d9:30:08:3a:
                    c5:16:7e:df:73:88:43:72:d9:8d:73:67:0c:a9:9f:
                    fe:85:af:01:6b:70:ee:79:c1:46:1e:80:47:16:c0:
                    14:92:6e:24:2c:b4:b0:a0:8a:2c:fe:e9:ff:6a:de:
                    56:c7:cf:0a:ae:d0:26:32:f5:5e:50:92:26:8e:26:
                    99:a8:e3:18:19:ba:84:b7:01:b4:1c:9b:aa:24:8a:
                    1a:ab:f1:28:df:f7:4e:0a:eb:23:7d:15:f3:4d:d6:
                    06:aa:87:88:c7:1c:0d:fd:c0:7e:0c:45:f5:0b:bc:
                    1f:6c:13:3f:61:55:0d:23:e6:87:60:27:48:fb:08:
                    00:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F2:68:50:71:F6:95:3C:98:CF:D7:97:10:D8:B0:82:F7:7B:99:29
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FPJoUHH2lTyYz9eXENiwgvd7mSk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:0f:ef:6f:16:f9:52:83:19:bc:78:2e:1f:69:b6:f9:8b:9e:
         4d:7e:2c:a8:88:79:9b:00:e9:0e:4f:37:ea:0f:be:bf:c9:3f:
         d3:c7:f9:f5:71:89:65:45:fc:dc:c7:1a:c5:3f:0b:04:c2:90:
         c7:30:b7:22:f8:d2:dc:eb:0a:1e:99:0a:ad:e5:05:ac:44:51:
         f7:4f:05:6c:97:d1:66:3f:34:4c:dc:0c:58:53:71:44:b9:ea:
         62:96:65:d3:95:28:a4:e1:16:fc:e9:b5:fa:b7:94:d0:e9:68:
         b7:b3:4e:0b:41:0b:be:7a:d7:4f:96:4b:e4:8b:27:a8:f6:04:
         82:1d:d1:5a:04:91:5f:6a:25:9f:4f:1a:79:cb:0e:d6:bf:23:
         2b:6e:42:80:15:5a:ea:e7:79:77:b6:ac:2b:fa:44:8f:85:13:
         45:f9:d5:3f:22:29:23:9a:cd:5f:3d:5c:0a:f8:28:66:81:25:
         6f:8b:4c:cd:c3:7d:fa:8f:c2:8e:49:06:1d:50:d9:10:4e:82:
         5a:ac:b6:ad:99:3b:b2:96:e1:ed:bd:18:e5:15:2f:ba:69:53:
         3e:b9:ba:66:dd:a8:8d:31:b4:86:87:96:a2:96:37:2d:23:b0:
         68:0a:8d:25:52:ab:ba:57:5b:64:54:09:e3:30:07:d4:45:13:
         05:24:60:34
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU3MThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE0RjI2ODUwNzFGNjk1
M0M5OENGRDc5NzEwRDhCMDgyRjc3Qjk5MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCocycQsc9H88PzMrCS9U97luKvTspm9wyJPV9D9SYvfZkmG+Co
0DoHi2JffNp1jebBe63w/8est976gghvy5yIvQZ4bSe72KBDDU1IS1k7ExUOaF80
5CtEGtnjEzPc5v3Ni6RrDrkjRD5CnJ9tJ4ua3Q4pCKhEHaOyngJIXAnj/ddT2TAI
OsUWft9ziENy2Y1zZwypn/6FrwFrcO55wUYegEcWwBSSbiQstLCgiiz+6f9q3lbH
zwqu0CYy9V5QkiaOJpmo4xgZuoS3AbQcm6okihqr8Sjf904K6yN9FfNN1gaqh4jH
HA39wH4MRfULvB9sEz9hVQ0j5odgJ0j7CAAVAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUFPJoUHH2lTyYz9eXENiwgvd7mSkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0ZQSm9VSEgybFR5WXo5ZVhFTml3Z3ZkN21Tay5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO3SvAwDQYJKoZIhvcNAQELBQADggEB
AKcP728W+VKDGbx4Lh9ptvmLnk1+LKiIeZsA6Q5PN+oPvr/JP9PH+fVxiWVF/NzH
GsU/CwTCkMcwtyL40tzrCh6ZCq3lBaxEUfdPBWyX0WY/NEzcDFhTcUS56mKWZdOV
KKThFvzptfq3lNDpaLezTgtBC75610+WS+SLJ6j2BIId0VoEkV9qJZ9PGnnLDta/
IytuQoAVWurneXe2rCv6RI+FE0X51T8iKSOazV89XAr4KGaBJW+LTM3DffqPwo5J
Bh1Q2RBOglqstq2ZO7KW4e29GOUVL7ppUz65umbdqI0xtIaHlqKWNy0jsGgKjSVS
q7pXW2RUCeMwB9RFEwUkYDQ=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:19 2026 by rpki-client