Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Nv5tWgvtxQ7gG0ADFSXnZBme1ew.roa
File:                     Nv5tWgvtxQ7gG0ADFSXnZBme1ew.roa (raw, json)
Hash identifier:          D7QcvWxIVDDddPhjfx9W/eYg/+xmL9Udby7yMNuJbnA=
Subject key identifier:   36:FE:6D:5A:0B:ED:C5:0E:E0:1B:40:03:15:25:E7:64:19:9E:D5:EC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       184C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Nv5tWgvtxQ7gG0ADFSXnZBme1ew.roa
Signing time:             Tue 31 Mar 2026 08:05:42 +0000
ROA not before:           Tue 31 Mar 2026 08:05:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6220 (0x184c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=36FE6D5A0BEDC50EE01B40031525E764199ED5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:5f:e5:f5:ed:97:53:1c:09:e8:46:8d:26:
                    5f:d8:f8:3b:f0:be:28:05:eb:e2:1f:1e:8a:88:92:
                    04:0a:34:d3:96:00:19:5b:a9:c1:54:35:c4:4c:64:
                    29:5f:66:7b:c8:b6:7b:b5:57:c9:6c:30:32:91:4d:
                    b2:74:46:dd:84:28:d5:69:ff:19:cc:d6:7f:98:6e:
                    50:68:b9:96:01:f0:7c:63:41:fd:5d:fe:6f:30:11:
                    0b:fc:48:f7:70:76:bd:75:16:49:ed:f1:eb:97:02:
                    bf:2e:1a:50:34:4b:10:41:61:06:f4:5e:94:cc:9f:
                    f4:a9:28:46:f6:b4:70:4a:cc:d3:f6:63:c1:67:ee:
                    f4:ef:b9:50:81:f2:31:78:55:85:36:25:a6:d7:e8:
                    96:1f:c0:7d:bb:4f:09:4d:92:94:0d:58:fc:d8:47:
                    c0:a4:d3:77:9e:04:5b:a8:a2:d1:c9:49:86:3c:aa:
                    f5:f1:8c:33:74:0d:7a:cc:a2:78:aa:43:0d:b3:2c:
                    ff:26:20:c4:77:76:d0:bf:59:3e:1f:1f:25:5a:c4:
                    6d:6e:25:69:35:8e:38:24:f0:6a:3d:0a:cf:f5:02:
                    66:64:6b:c9:58:7e:cd:01:84:ba:d0:63:dc:40:f1:
                    b6:36:bd:7d:2a:dc:69:22:15:08:ae:af:c2:9b:a8:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FE:6D:5A:0B:ED:C5:0E:E0:1B:40:03:15:25:E7:64:19:9E:D5:EC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Nv5tWgvtxQ7gG0ADFSXnZBme1ew.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:9a:2f:1e:59:d4:ea:ee:d9:e7:d9:02:b7:12:05:dd:85:5f:
         a2:97:70:9f:7b:f3:af:d5:4b:d4:20:ad:14:b7:37:a8:9e:f7:
         ac:89:9d:c5:99:4c:e8:ee:0f:33:96:44:d1:e9:5b:ed:dc:be:
         39:7e:5c:f3:d8:18:95:5a:2a:e5:21:62:24:1f:89:c5:52:7a:
         fe:ab:b0:ae:c9:15:ff:52:cb:5a:62:d2:b0:60:21:d2:64:b2:
         08:0a:fd:85:62:85:84:a5:f0:0e:74:33:0a:55:6a:10:39:12:
         5a:1b:04:44:09:51:db:e8:e5:8a:f7:8a:98:9c:8f:f5:ba:45:
         9e:b3:06:bc:0f:77:bc:28:08:17:b8:83:7f:d7:11:25:06:ef:
         81:fc:d3:58:50:8f:8c:97:dd:42:47:f4:f3:e3:bc:58:89:18:
         47:6c:e0:f8:89:8a:3f:6b:83:fa:01:09:85:1f:b2:7c:73:6d:
         28:ff:84:eb:23:37:59:69:0c:b5:a9:8e:4f:1d:c7:97:0f:79:
         22:ee:b7:56:07:87:93:da:6b:97:eb:f4:e9:9b:56:f9:8a:16:
         3c:46:25:35:c7:9f:84:4d:e4:66:9f:35:41:a7:c1:af:b7:9f:
         66:fa:58:50:73:e7:c7:00:cb:0c:76:16:dd:06:97:0e:cc:a6:
         8b:fb:28:ce
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICGEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA1NDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM2RkU2RDVBMEJFREM1
MEVFMDFCNDAwMzE1MjVFNzY0MTk5RUQ1RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCXU1/l9e2XUxwJ6EaNJl/Y+DvwvigF6+IfHoqIkgQKNNOWABlb
qcFUNcRMZClfZnvItnu1V8lsMDKRTbJ0Rt2EKNVp/xnM1n+YblBouZYB8HxjQf1d
/m8wEQv8SPdwdr11Fknt8euXAr8uGlA0SxBBYQb0XpTMn/SpKEb2tHBKzNP2Y8Fn
7vTvuVCB8jF4VYU2JabX6JYfwH27TwlNkpQNWPzYR8Ck03eeBFuootHJSYY8qvXx
jDN0DXrMoniqQw2zLP8mIMR3dtC/WT4fHyVaxG1uJWk1jjgk8Go9Cs/1AmZka8lY
fs0BhLrQY9xA8bY2vX0q3GkiFQiur8KbqP2TAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUNv5tWgvtxQ7gG0ADFSXnZBme1ewwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L052NXRXZ3Z0eFE3Z0cwQURGU1huWkJtZTFldy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABS3wwDQYJKoZIhvcNAQELBQADggEB
ANaaLx5Z1Oru2efZArcSBd2FX6KXcJ9786/VS9QgrRS3N6ie96yJncWZTOjuDzOW
RNHpW+3cvjl+XPPYGJVaKuUhYiQficVSev6rsK7JFf9Sy1pi0rBgIdJksggK/YVi
hYSl8A50MwpVahA5ElobBEQJUdvo5Yr3ipicj/W6RZ6zBrwPd7woCBe4g3/XESUG
74H801hQj4yX3UJH9PPjvFiJGEds4PiJij9rg/oBCYUfsnxzbSj/hOsjN1lpDLWp
jk8dx5cPeSLut1YHh5Paa5fr9OmbVvmKFjxGJTXHn4RN5GafNUGnwa+3n2b6WFBz
58cAywx2Ft0Glw7Mpov7KM4=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:39 2026 by rpki-client