Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LiiqaOY8qPpBkIWdlIyuYmaECNg.roa
File:                     LiiqaOY8qPpBkIWdlIyuYmaECNg.roa (raw, json)
Hash identifier:          +cah23Is4r/43pVvV9oYM6sOkCqxJLfwN3E5b3k1NNI=
Subject key identifier:   2E:28:AA:68:E6:3C:A8:FA:41:90:85:9D:94:8C:AE:62:66:84:08:D8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14B9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LiiqaOY8qPpBkIWdlIyuYmaECNg.roa
Signing time:             Tue 31 Mar 2026 07:58:09 +0000
ROA not before:           Tue 31 Mar 2026 07:58:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5305 (0x14b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2E28AA68E63CA8FA4190859D948CAE62668408D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:91:1f:04:b7:ed:72:9e:f7:a0:ca:76:dc:
                    04:c9:63:70:51:88:29:61:2e:71:b8:97:5e:08:38:
                    b9:eb:c1:98:3d:45:28:93:e7:a5:43:0c:a7:29:2f:
                    43:2c:9f:12:06:2a:25:d9:2b:93:60:cb:1d:cb:2b:
                    3a:38:b8:c5:b0:4a:b2:8f:9d:db:96:8d:38:16:1b:
                    4f:cf:5c:21:62:ce:b0:76:ee:9f:15:77:eb:e8:8f:
                    c8:02:e7:70:e8:4c:61:a6:c8:28:71:71:75:38:9f:
                    55:91:1e:e3:ee:f1:6d:bc:8e:a8:37:e3:1d:ba:0c:
                    bd:3e:1f:97:07:9e:ff:70:64:d1:f0:d3:c7:32:d9:
                    71:7d:6d:b0:60:5f:4b:4d:aa:e9:79:6a:f3:6c:27:
                    6b:9e:88:ce:db:e2:37:2e:f7:ad:e8:2b:20:85:d0:
                    61:1d:88:7b:48:4d:79:f7:d5:78:43:14:75:c2:e5:
                    16:44:c7:c5:f5:54:b8:26:a2:f4:3b:93:5f:60:e6:
                    c1:d4:b9:ad:6a:c9:87:1a:85:29:3f:6d:29:c6:11:
                    69:cf:97:4f:db:ef:c6:06:13:d7:44:c5:60:43:8c:
                    da:71:bd:c8:db:91:05:5b:c5:ae:41:e2:eb:62:ea:
                    7c:79:ff:c7:61:fb:f8:99:44:f8:12:69:d8:e0:c4:
                    3d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:28:AA:68:E6:3C:A8:FA:41:90:85:9D:94:8C:AE:62:66:84:08:D8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LiiqaOY8qPpBkIWdlIyuYmaECNg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:7f:50:25:6f:0b:0f:2e:e6:ec:de:a4:7e:f8:23:37:e2:69:
         25:87:1d:6b:4f:b9:43:fc:87:28:33:c0:44:48:c1:0e:c1:eb:
         05:6e:6e:e1:20:89:92:9d:44:77:4c:f9:fe:68:33:b7:61:2b:
         54:87:a7:97:c7:d1:d9:fc:55:dd:2a:61:a5:31:c9:f2:2f:fc:
         a2:f6:43:1f:f9:8d:a7:9c:f8:15:4e:7a:f4:f3:43:08:d6:1a:
         ab:f0:b3:91:5e:88:87:c9:fa:9d:8d:c9:c0:e5:3e:02:0f:27:
         df:41:5d:18:24:54:c1:09:43:41:86:fd:b7:2d:83:83:36:c3:
         f8:0b:8a:70:f1:78:6e:63:a6:32:ef:17:c5:0d:76:d6:ba:88:
         ff:f4:ec:67:fd:fc:6b:24:dc:91:a4:18:ba:d1:11:f7:fc:70:
         ed:3b:d5:aa:c1:25:a2:f8:c0:a1:30:af:f4:70:00:1d:d8:a5:
         af:83:e1:f2:54:70:5e:24:a4:9a:84:c2:9a:c0:b1:77:6c:f5:
         d8:57:8c:28:db:89:a3:d0:77:8f:d3:72:d4:0a:2f:c0:e8:c5:
         ca:5c:6f:9a:5f:2d:00:4c:29:9e:bb:7c:57:97:70:83:6b:dc:
         85:49:34:4f:a4:2c:16:80:82:5f:88:fa:96:a1:b7:35:3c:0c:
         52:e5:a6:b1
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFLkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU4MDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJFMjhBQTY4RTYzQ0E4
RkE0MTkwODU5RDk0OENBRTYyNjY4NDA4RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXdpEfBLftcp73oMp23ATJY3BRiClhLnG4l14IOLnrwZg9RSiT
56VDDKcpL0MsnxIGKiXZK5Ngyx3LKzo4uMWwSrKPnduWjTgWG0/PXCFizrB27p8V
d+voj8gC53DoTGGmyChxcXU4n1WRHuPu8W28jqg34x26DL0+H5cHnv9wZNHw08cy
2XF9bbBgX0tNqul5avNsJ2ueiM7b4jcu963oKyCF0GEdiHtITXn31XhDFHXC5RZE
x8X1VLgmovQ7k19g5sHUua1qyYcahSk/bSnGEWnPl0/b78YGE9dExWBDjNpxvcjb
kQVbxa5B4uti6nx5/8dh+/iZRPgSadjgxD3VAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQULiiqaOY8qPpBkIWdlIyuYmaECNgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0xpaXFhT1k4cVBwQmtJV2RsSXl1WW1hRUNOZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK3SsAwDQYJKoZIhvcNAQELBQADggEB
AKR/UCVvCw8u5uzepH74IzfiaSWHHWtPuUP8hygzwERIwQ7B6wVubuEgiZKdRHdM
+f5oM7dhK1SHp5fH0dn8Vd0qYaUxyfIv/KL2Qx/5jaec+BVOevTzQwjWGqvws5Fe
iIfJ+p2NycDlPgIPJ99BXRgkVMEJQ0GG/bctg4M2w/gLinDxeG5jpjLvF8UNdta6
iP/07Gf9/Gsk3JGkGLrREff8cO071arBJaL4wKEwr/RwAB3Ypa+D4fJUcF4kpJqE
wprAsXds9dhXjCjbiaPQd4/TctQKL8Doxcpcb5pfLQBMKZ67fFeXcINr3IVJNE+k
LBaAgl+I+pahtzU8DFLlprE=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:21 2026 by rpki-client