Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/I8wzSKhoFw71XFEQgOUUXIZ-iG4.roa
File:                     I8wzSKhoFw71XFEQgOUUXIZ-iG4.roa (raw, json)
Hash identifier:          yrF1en3QFtfJounxxeom3sHSYRezHG35Ana2iAloHhY=
Subject key identifier:   23:CC:33:48:A8:68:17:0E:F5:5C:51:10:80:E5:14:5C:86:7E:88:6E
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       A9
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I8wzSKhoFw71XFEQgOUUXIZ-iG4.roa
Signing time:             Tue 31 Mar 2026 07:55:17 +0000
ROA not before:           Tue 31 Mar 2026 07:55:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        148.67.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Mar 31 07:55:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=23CC3348A868170EF55C511080E5145C867E886E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:42:3f:b3:b7:b5:29:20:be:27:4c:ba:c4:
                    3c:08:37:47:07:52:58:0e:4e:d4:7c:12:61:42:cb:
                    e6:e7:ff:ef:2b:a1:d1:ec:ef:14:a4:5c:b4:c5:28:
                    54:58:89:a3:f0:0e:da:fb:22:f0:c1:0c:d6:f1:a7:
                    84:f1:4e:b1:cd:3f:1e:e6:0b:2b:5a:1d:dc:dc:55:
                    87:a0:ab:da:b5:5a:7c:d1:70:9b:4f:49:08:8a:09:
                    3a:97:03:c9:8b:40:ad:8c:c8:d8:20:ec:77:d6:ed:
                    f5:a4:18:10:96:62:e5:11:f4:32:63:0a:cf:74:21:
                    d8:6d:f9:03:d6:45:cc:8d:8f:0f:80:42:61:77:fe:
                    55:12:8c:10:6e:7c:f9:0f:49:13:80:26:6a:6d:63:
                    c8:41:c3:c0:af:b5:59:8f:2a:d4:ce:a6:f7:9b:35:
                    65:b7:b2:64:cc:9c:e6:a6:82:a0:d1:0a:8f:e6:86:
                    2f:6c:fa:eb:82:07:55:c5:70:96:65:7a:db:2c:72:
                    89:e5:b1:98:c0:10:21:af:15:72:3c:31:0f:fa:e5:
                    e2:10:3a:47:3f:14:78:bf:78:33:ee:18:39:72:85:
                    73:f3:a2:7d:31:27:70:36:26:a8:e8:f1:e2:0a:64:
                    bb:98:3e:dd:b5:19:28:2f:fe:c5:ad:0f:46:be:83:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CC:33:48:A8:68:17:0E:F5:5C:51:10:80:E5:14:5C:86:7E:88:6E
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I8wzSKhoFw71XFEQgOUUXIZ-iG4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.67.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a4:50:b2:26:49:66:0c:d3:b9:5b:e6:fa:87:2a:14:4a:d8:fe:
         e0:0b:f3:2a:72:97:04:3b:80:3d:6c:4e:67:82:c8:84:fe:0c:
         ee:6d:c9:08:ae:3d:57:e1:20:27:af:93:ee:7b:c1:82:10:f7:
         6a:7e:7f:77:13:22:3a:69:56:ac:96:39:ca:fe:8c:5d:da:49:
         cc:c0:f7:38:e8:06:51:e8:b1:ef:8a:6e:68:16:e5:7a:f2:2e:
         f2:79:68:8e:cb:36:61:fb:4d:14:20:66:1f:87:bf:6b:4c:8b:
         bb:2c:16:8f:be:25:76:88:56:5f:81:6e:2b:00:e8:27:03:2e:
         2c:31:22:38:16:a1:a4:5e:ae:74:23:9c:51:c8:cf:ad:01:31:
         6c:69:39:91:62:f5:51:1d:fe:92:04:4a:19:1d:6e:69:5b:61:
         cb:9e:1d:10:0f:e5:f7:0b:2a:19:47:81:c7:79:1f:9f:5b:20:
         ae:9c:16:6d:af:d2:b2:33:2a:14:b6:d9:c8:a2:48:f8:16:8c:
         fb:1d:8e:91:da:11:af:21:f8:94:63:3f:0f:7d:53:d1:1b:ae:
         ab:4f:9a:ad:5a:3b:b1:e7:6e:5a:ae:b2:af:95:ab:ba:cb:f4:
         df:72:a8:00:94:7b:6c:27:e8:dd:bf:34:54:c7:8e:a0:f7:37:
         5a:f8:91:6f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5
RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMzEw
NzU1MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIzQ0MzMzQ4QTg2ODE3
MEVGNTVDNTExMDgwRTUxNDVDODY3RTg4NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2qkI/s7e1KSC+J0y6xDwIN0cHUlgOTtR8EmFCy+bn/+8rodHs
7xSkXLTFKFRYiaPwDtr7IvDBDNbxp4TxTrHNPx7mCytaHdzcVYegq9q1WnzRcJtP
SQiKCTqXA8mLQK2MyNgg7HfW7fWkGBCWYuUR9DJjCs90Idht+QPWRcyNjw+AQmF3
/lUSjBBufPkPSROAJmptY8hBw8CvtVmPKtTOpvebNWW3smTMnOamgqDRCo/mhi9s
+uuCB1XFcJZletssconlsZjAECGvFXI8MQ/65eIQOkc/FHi/eDPuGDlyhXPzon0x
J3A2Jqjo8eIKZLuYPt21GSgv/sWtD0a+gy3JAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUI8wzSKhoFw71XFEQgOUUXIZ+iG4wHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco
j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193
R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0k4d3pTS2hvRnc3MVhGRVFnT1VVWElaLWlHNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAeUQ4AwDQYJKoZIhvcNAQELBQADggEB
AKRQsiZJZgzTuVvm+ocqFErY/uAL8ypylwQ7gD1sTmeCyIT+DO5tyQiuPVfhICev
k+57wYIQ92p+f3cTIjppVqyWOcr+jF3aSczA9zjoBlHose+KbmgW5XryLvJ5aI7L
NmH7TRQgZh+Hv2tMi7ssFo++JXaIVl+BbisA6CcDLiwxIjgWoaRernQjnFHIz60B
MWxpOZFi9VEd/pIEShkdbmlbYcueHRAP5fcLKhlHgcd5H59bIK6cFm2v0rIzKhS2
2ciiSPgWjPsdjpHaEa8h+JRjPw99U9EbrqtPmq1aO7Hnblqusq+Vq7rL9N9yqACU
e2wn6N2/NFTHjqD3N1r4kW8=
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:34 2026 by rpki-client