Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K5-i7l2LonO3e_t8Xz82OpPrlv8.roa
File:                     K5-i7l2LonO3e_t8Xz82OpPrlv8.roa (raw, json)
Hash identifier:          8Lym9L+Vd0Ro6qw/6kc6mn4A+HuVs1J4t4t1ClMiOnc=
Subject key identifier:   2B:9F:A2:EE:5D:8B:A2:73:B7:7B:FB:7C:5F:3F:36:3A:93:EB:96:FF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       158C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K5-i7l2LonO3e_t8Xz82OpPrlv8.roa
Signing time:             Tue 31 Mar 2026 07:59:50 +0000
ROA not before:           Tue 31 Mar 2026 07:59:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5516 (0x158c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2B9FA2EE5D8BA273B77BFB7C5F3F363A93EB96FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:c8:1e:06:62:27:41:15:9a:89:15:ea:67:
                    4c:f2:f0:30:92:99:3f:35:38:22:55:78:42:ab:43:
                    fc:ca:cc:6a:ba:4d:9a:77:09:98:91:87:6f:64:04:
                    1a:84:66:b2:b7:95:0b:8e:6b:21:60:6e:92:9c:d8:
                    4f:09:ae:6c:40:a1:5e:b5:03:16:f1:cc:83:26:2c:
                    b7:ab:7b:59:be:57:f8:62:f8:1a:af:23:e0:5c:96:
                    a7:c3:04:88:90:d9:e6:f7:c9:78:82:cd:96:32:03:
                    86:1e:91:41:26:d8:a2:3d:58:85:a3:a7:04:80:fa:
                    78:6f:3a:d8:f9:ec:82:69:cc:1d:12:cf:c2:4a:02:
                    f3:62:ed:31:27:de:26:eb:4f:00:a8:9a:13:03:b7:
                    fe:84:44:f0:07:1c:3c:d3:e7:5f:e8:4c:93:12:0a:
                    62:b0:14:ee:3f:03:b0:4d:75:42:5c:f3:12:9b:84:
                    d7:12:03:60:4e:37:70:ed:fb:ba:b3:3d:bf:d2:1a:
                    a0:f6:70:94:c4:ef:42:60:4f:6a:f6:86:43:98:f7:
                    e9:44:3d:93:28:ed:1d:62:9e:80:3c:56:5d:e4:e6:
                    62:21:9c:b2:89:f9:ff:8d:78:9f:9d:2c:e7:f8:1f:
                    c7:8e:5d:eb:1c:50:60:32:fa:9f:74:e1:5a:33:bf:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9F:A2:EE:5D:8B:A2:73:B7:7B:FB:7C:5F:3F:36:3A:93:EB:96:FF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K5-i7l2LonO3e_t8Xz82OpPrlv8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:08:26:66:90:11:0e:15:92:57:91:b6:d9:f0:3e:bb:ff:08:
         0d:61:1e:0c:79:2f:c9:06:33:ec:83:43:e9:01:27:c6:2e:b1:
         0f:60:45:29:bc:c1:64:88:52:44:75:5f:5c:52:50:66:6e:3b:
         73:4b:a5:3c:ce:e6:03:c6:80:29:b2:f6:9d:e4:5c:f7:a4:b1:
         11:7c:f6:9a:e4:1b:b3:9a:9e:52:33:f4:c0:21:41:45:f8:93:
         3c:17:8d:93:fa:80:05:5e:02:c4:34:53:ba:6f:e8:47:cc:e2:
         0f:91:95:87:89:ef:3d:7b:67:eb:60:30:ec:06:50:e4:01:57:
         75:8b:fc:86:45:12:54:e9:55:55:2a:2c:26:15:c5:d0:b3:cc:
         23:52:f6:fd:58:fe:e5:b9:7e:e7:12:39:8e:5e:a8:22:d3:53:
         50:84:3d:96:d1:8f:5b:c9:8e:bb:3b:e7:10:44:ad:f4:a1:ce:
         20:2a:f2:ac:06:9d:a3:a2:9e:4e:1a:42:4d:4a:4f:80:17:ff:
         0b:c2:4d:1b:8c:e1:38:ed:d9:13:78:4b:03:4a:7b:13:fd:3b:
         75:75:5a:3d:aa:82:60:f9:6f:e3:45:a4:a4:fd:da:c6:23:16:
         0b:35:88:50:bc:82:fb:03:aa:3f:3b:2a:ee:21:82:7e:bf:04:
         11:e6:09:e6
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU5NTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJCOUZBMkVFNUQ4QkEy
NzNCNzdCRkI3QzVGM0YzNjNBOTNFQjk2RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTucgeBmInQRWaiRXqZ0zy8DCSmT81OCJVeEKrQ/zKzGq6TZp3
CZiRh29kBBqEZrK3lQuOayFgbpKc2E8JrmxAoV61AxbxzIMmLLere1m+V/hi+Bqv
I+BclqfDBIiQ2eb3yXiCzZYyA4YekUEm2KI9WIWjpwSA+nhvOtj57IJpzB0Sz8JK
AvNi7TEn3ibrTwComhMDt/6ERPAHHDzT51/oTJMSCmKwFO4/A7BNdUJc8xKbhNcS
A2BON3Dt+7qzPb/SGqD2cJTE70JgT2r2hkOY9+lEPZMo7R1inoA8Vl3k5mIhnLKJ
+f+NeJ+dLOf4H8eOXescUGAy+p904Vozv9DRAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUK5+i7l2LonO3e/t8Xz82OpPrlv8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0s1LWk3bDJMb25PM2VfdDhYejgyT3BQcmx2OC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAb5l4wDQYJKoZIhvcNAQELBQADggEB
AHkIJmaQEQ4VkleRttnwPrv/CA1hHgx5L8kGM+yDQ+kBJ8YusQ9gRSm8wWSIUkR1
X1xSUGZuO3NLpTzO5gPGgCmy9p3kXPeksRF89prkG7OanlIz9MAhQUX4kzwXjZP6
gAVeAsQ0U7pv6EfM4g+RlYeJ7z17Z+tgMOwGUOQBV3WL/IZFElTpVVUqLCYVxdCz
zCNS9v1Y/uW5fucSOY5eqCLTU1CEPZbRj1vJjrs75xBErfShziAq8qwGnaOink4a
Qk1KT4AX/wvCTRuM4Tjt2RN4SwNKexP9O3V1Wj2qgmD5b+NFpKT92sYjFgs1iFC8
gvsDqj87Ku4hgn6/BBHmCeY=
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:28 2026 by rpki-client