Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JY4p_Xa3GPPmd_bfINEaxJRwDyE.roa
File:                     JY4p_Xa3GPPmd_bfINEaxJRwDyE.roa (raw, json)
Hash identifier:          FQyUDW6JM/ARDvJQImFgErnhlPYCOsjvRlk6Tp+JSuo=
Subject key identifier:   25:8E:29:FD:76:B7:18:F3:E6:77:F6:DF:20:D1:1A:C4:94:70:0F:21
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1722
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JY4p_Xa3GPPmd_bfINEaxJRwDyE.roa
Signing time:             Tue 31 Mar 2026 08:03:13 +0000
ROA not before:           Tue 31 Mar 2026 08:03:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5922 (0x1722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=258E29FD76B718F3E677F6DF20D11AC494700F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:c4:54:c6:d3:3e:96:50:fb:87:f9:49:af:
                    0d:6e:b0:e2:70:57:9d:1d:c0:cf:18:86:b5:fa:5e:
                    a4:6f:d7:6b:e5:c9:a5:db:5c:9e:38:36:66:26:ff:
                    00:f0:4b:b1:00:72:e0:a8:3e:82:c5:72:df:f0:fa:
                    05:97:73:08:8a:f9:1d:0d:ac:2f:09:d3:0b:51:d9:
                    c2:94:b9:05:c0:e3:6f:9d:48:82:75:3b:19:05:55:
                    42:ee:84:ff:c5:63:27:6f:33:84:83:66:00:7a:5c:
                    9a:1f:b3:35:ce:d5:07:12:1f:3b:e4:c8:33:54:65:
                    68:23:b1:c3:c5:49:64:1a:09:2b:9d:09:14:99:15:
                    24:b6:7e:10:78:58:73:58:4e:2b:66:8d:4c:86:ee:
                    e5:e9:b3:f4:bf:0c:0f:2c:a2:85:d5:f0:a1:13:ea:
                    01:eb:ef:c0:61:1b:79:93:2b:39:4b:f7:a4:66:c1:
                    57:b7:eb:9c:a5:d5:61:e7:94:67:7a:05:65:40:de:
                    d3:81:ee:6e:08:57:39:9c:d2:c4:41:0d:30:f1:08:
                    c4:6f:87:33:ed:74:9e:72:70:e5:63:48:e2:e3:6b:
                    45:fd:ec:9e:a5:ff:f0:b0:58:ba:fa:d5:c7:89:ac:
                    bd:17:b5:9a:4d:11:72:85:8f:a0:db:5b:10:3a:ba:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8E:29:FD:76:B7:18:F3:E6:77:F6:DF:20:D1:1A:C4:94:70:0F:21
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JY4p_Xa3GPPmd_bfINEaxJRwDyE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:5e:6a:d8:ca:9b:75:55:f1:71:07:40:26:4c:23:b6:e0:66:
         68:86:0b:48:28:0a:66:79:4a:e4:e7:fe:53:67:1c:fa:69:9b:
         37:c2:1d:af:3a:be:0a:ff:e1:93:cd:cd:be:8c:6b:6d:fa:b7:
         5d:d7:33:5c:ae:22:c8:29:ca:5a:3b:d5:3f:dd:07:23:ee:23:
         bb:b7:66:82:08:1e:6b:89:35:88:6e:a8:35:7d:d8:a9:9e:c1:
         ee:b1:78:03:8a:4a:b7:2d:b4:2f:0b:3d:38:f3:53:5b:4c:0c:
         b4:10:56:2b:10:28:7c:5a:12:40:6a:a6:b9:c6:0f:6d:d9:a9:
         16:6e:67:05:ba:69:6f:f1:57:40:da:52:8c:bf:7c:39:1a:9a:
         22:c5:23:81:37:17:e6:f2:e0:aa:0f:a3:27:b5:33:43:11:5d:
         ef:d8:86:84:ee:2f:27:e7:a1:cb:65:56:ee:62:f5:d5:5b:fa:
         7c:25:f2:b6:42:cd:3b:f7:a8:18:2b:b6:a6:20:05:26:38:c7:
         0b:19:cf:73:67:0c:fa:a0:70:1e:61:3a:f3:ef:e2:7f:a8:24:
         fb:4e:cb:ec:f5:34:3b:8c:5c:f8:ae:ea:a3:5b:96:a0:0f:46:
         5b:5b:fe:1d:4e:7d:b3:a2:1d:46:43:ed:38:4b:1c:a9:4d:a4:
         63:6f:61:e0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFyIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAzMTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI1OEUyOUZENzZCNzE4
RjNFNjc3RjZERjIwRDExQUM0OTQ3MDBGMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCd9sRUxtM+llD7h/lJrw1usOJwV50dwM8YhrX6XqRv12vlyaXb
XJ44NmYm/wDwS7EAcuCoPoLFct/w+gWXcwiK+R0NrC8J0wtR2cKUuQXA42+dSIJ1
OxkFVULuhP/FYydvM4SDZgB6XJofszXO1QcSHzvkyDNUZWgjscPFSWQaCSudCRSZ
FSS2fhB4WHNYTitmjUyG7uXps/S/DA8sooXV8KET6gHr78BhG3mTKzlL96RmwVe3
65yl1WHnlGd6BWVA3tOB7m4IVzmc0sRBDTDxCMRvhzPtdJ5ycOVjSOLja0X97J6l
//CwWLr61ceJrL0XtZpNEXKFj6DbWxA6uub7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUJY4p/Xa3GPPmd/bfINEaxJRwDyEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0pZNHBfWGEzR1BQbWRfYmZJTkVheEpSd0R5RS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIb5mgwDQYJKoZIhvcNAQELBQADggEB
ACReatjKm3VV8XEHQCZMI7bgZmiGC0goCmZ5SuTn/lNnHPppmzfCHa86vgr/4ZPN
zb6Ma236t13XM1yuIsgpylo71T/dByPuI7u3ZoIIHmuJNYhuqDV92Kmewe6xeAOK
SrcttC8LPTjzU1tMDLQQVisQKHxaEkBqprnGD23ZqRZuZwW6aW/xV0DaUoy/fDka
miLFI4E3F+by4KoPoye1M0MRXe/YhoTuLyfnoctlVu5i9dVb+nwl8rZCzTv3qBgr
tqYgBSY4xwsZz3NnDPqgcB5hOvPv4n+oJPtOy+z1NDuMXPiu6qNblqAPRltb/h1O
fbOiHUZD7ThLHKlNpGNvYeA=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:12 2026 by rpki-client