Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ip7we8CTPGj83ynskrGIVFkWCT8.roa
File:                     Ip7we8CTPGj83ynskrGIVFkWCT8.roa (raw, json)
Hash identifier:          7dawVQCn1wL+vHvqrDekx3bjIGfXSUGmkmmQLilSWGY=
Subject key identifier:   22:9E:F0:7B:C0:93:3C:68:FC:DF:29:EC:92:B1:88:54:59:16:09:3F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       155C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ip7we8CTPGj83ynskrGIVFkWCT8.roa
Signing time:             Tue 31 Mar 2026 07:59:30 +0000
ROA not before:           Tue 31 Mar 2026 07:59:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.74.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5468 (0x155c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=229EF07BC0933C68FCDF29EC92B188545916093F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b1:ee:52:db:4f:35:34:5c:9f:51:bf:0b:b5:
                    8b:ed:f8:86:0d:60:98:f0:f0:f1:db:da:24:d8:75:
                    a1:66:9a:18:56:fa:9c:3a:b5:e8:df:bf:3b:16:9d:
                    82:57:82:0a:48:0f:76:8a:f3:14:3d:06:7a:e9:36:
                    0e:b4:df:e2:3f:a2:2a:13:46:7d:4a:65:9f:ec:b1:
                    35:90:de:29:8a:d7:41:52:f9:b3:64:8f:6c:b6:2b:
                    a4:2f:10:6a:9b:c6:15:63:93:51:dd:c8:6e:e3:62:
                    2b:61:b3:20:89:78:33:0c:c8:dd:03:98:f6:64:e5:
                    72:4b:83:48:6a:07:1b:a7:4b:da:85:f0:b5:be:98:
                    46:0b:61:58:f3:e1:88:1d:b5:1e:cd:eb:e4:54:6f:
                    34:23:1d:d1:77:a9:13:73:c6:c2:16:4d:16:dd:1f:
                    8e:36:83:76:2b:e0:de:37:87:83:41:e6:fa:7b:d4:
                    f2:38:6d:b7:96:68:0d:3b:fb:f0:a6:51:bc:aa:e6:
                    c6:28:35:26:61:55:4d:a0:04:b5:48:c9:90:ae:0b:
                    7e:d8:eb:30:ed:b8:77:93:4c:95:a2:cf:4f:ad:dc:
                    81:73:95:92:83:91:7a:c0:58:15:35:04:94:03:6b:
                    dc:4b:8f:79:c6:d9:f1:85:b4:bc:78:13:49:73:e7:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9E:F0:7B:C0:93:3C:68:FC:DF:29:EC:92:B1:88:54:59:16:09:3F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ip7we8CTPGj83ynskrGIVFkWCT8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:5b:93:da:d2:3a:b5:4f:39:06:77:93:42:9f:c8:ce:bb:55:
         23:4f:01:f3:e9:a2:e1:95:0f:82:83:d6:a4:d9:bd:14:f1:88:
         4c:a7:88:38:d9:c9:22:f3:3b:e7:fe:40:dc:95:2f:87:d5:2e:
         74:49:54:30:a6:a7:92:17:10:f2:bb:5c:dd:fa:9b:31:fd:48:
         f1:82:88:dc:2e:76:3a:48:1b:8c:10:bf:72:f8:07:f1:b4:91:
         ec:a7:99:76:24:b8:a4:48:3a:33:34:ff:5d:5c:46:f5:6d:99:
         8e:c6:a0:91:65:c6:d8:9c:36:98:17:76:84:22:e3:7f:c9:3c:
         0b:94:3f:b4:57:be:ff:4c:49:ed:25:76:9a:1e:3b:23:9c:74:
         52:c7:70:47:1f:08:26:b4:f9:21:92:5c:b6:3f:38:b7:17:7b:
         c9:a1:3e:1d:fc:0c:7e:0c:26:57:ca:97:69:10:cc:02:ed:72:
         e4:6a:25:3f:ba:4b:d5:7e:f0:e5:4e:c5:05:db:7c:a8:c2:aa:
         16:66:b4:3b:61:54:17:4b:50:0c:54:66:89:71:4e:34:10:6d:
         33:34:ab:fa:03:5c:d5:5d:1c:08:09:f8:b5:e0:72:51:a7:41:
         4b:ce:fc:97:d7:58:39:66:c5:87:d1:39:77:7d:3f:be:92:23:
         bf:56:dc:62
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU5MzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIyOUVGMDdCQzA5MzND
NjhGQ0RGMjlFQzkyQjE4ODU0NTkxNjA5M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcse5S2081NFyfUb8LtYvt+IYNYJjw8PHb2iTYdaFmmhhW+pw6
tejfvzsWnYJXggpID3aK8xQ9BnrpNg603+I/oioTRn1KZZ/ssTWQ3imK10FS+bNk
j2y2K6QvEGqbxhVjk1HdyG7jYithsyCJeDMMyN0DmPZk5XJLg0hqBxunS9qF8LW+
mEYLYVjz4YgdtR7N6+RUbzQjHdF3qRNzxsIWTRbdH442g3Yr4N43h4NB5vp71PI4
bbeWaA07+/CmUbyq5sYoNSZhVU2gBLVIyZCuC37Y6zDtuHeTTJWiz0+t3IFzlZKD
kXrAWBU1BJQDa9xLj3nG2fGFtLx4E0lz56zNAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUIp7we8CTPGj83ynskrGIVFkWCT8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0lwN3dlOENUUEdqODN5bnNrckdJVkZrV0NUOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBSsQwDQYJKoZIhvcNAQELBQADggEB
AJpbk9rSOrVPOQZ3k0KfyM67VSNPAfPpouGVD4KD1qTZvRTxiEyniDjZySLzO+f+
QNyVL4fVLnRJVDCmp5IXEPK7XN36mzH9SPGCiNwudjpIG4wQv3L4B/G0keynmXYk
uKRIOjM0/11cRvVtmY7GoJFlxticNpgXdoQi43/JPAuUP7RXvv9MSe0ldpoeOyOc
dFLHcEcfCCa0+SGSXLY/OLcXe8mhPh38DH4MJlfKl2kQzALtcuRqJT+6S9V+8OVO
xQXbfKjCqhZmtDthVBdLUAxUZolxTjQQbTM0q/oDXNVdHAgJ+LXgclGnQUvO/JfX
WDlmxYfROXd9P76SI79W3GI=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:04 2026 by rpki-client