Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OBA5bjdFRdK0eI9IL27sETyrHVQ.roa
File:                     OBA5bjdFRdK0eI9IL27sETyrHVQ.roa (raw, json)
Hash identifier:          gdBwmmAvrUluenSMtlq46dpa9GeCk8FYdQtuBvj9b5E=
Subject key identifier:   38:10:39:6E:37:45:45:D2:B4:78:8F:48:2F:6E:EC:11:3C:AB:1D:54
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1377
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OBA5bjdFRdK0eI9IL27sETyrHVQ.roa
Signing time:             Tue 31 Mar 2026 07:55:38 +0000
ROA not before:           Tue 31 Mar 2026 07:55:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4983 (0x1377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3810396E374545D2B4788F482F6EEC113CAB1D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:69:a7:f0:56:3b:76:1f:99:07:9c:ef:26:
                    56:2f:40:b9:b5:3a:73:b7:6a:2c:cc:fc:4e:f8:0a:
                    85:63:0a:a7:e3:cf:54:68:40:ef:46:81:57:35:ad:
                    33:9c:ff:9d:27:26:fb:06:dd:8a:0c:e6:0d:c3:5d:
                    f8:88:e5:24:11:8f:5a:44:bb:a0:b2:ff:86:22:20:
                    24:fb:11:a4:06:b0:83:23:30:5b:16:fd:5e:23:bc:
                    4d:89:fd:24:90:59:0a:88:ce:ea:c8:7a:f0:ed:00:
                    79:c4:2e:27:eb:90:97:20:09:49:3a:da:75:de:4c:
                    f4:1f:49:8c:e6:e6:64:62:e9:a6:ed:1a:bb:1c:67:
                    45:5c:ea:4e:aa:a9:58:88:67:d7:06:77:54:de:7c:
                    87:36:1b:33:f3:d7:fd:fc:49:58:bc:20:ae:05:00:
                    1c:f5:ec:29:46:9b:7b:6c:de:26:4f:46:25:9d:fd:
                    7f:c7:6c:37:5d:60:21:08:1f:5e:5b:be:2f:07:c0:
                    11:ad:e8:e2:80:61:80:32:94:56:3a:b2:c8:45:0a:
                    2b:70:96:92:0b:44:2e:80:ef:26:8a:93:17:8f:e2:
                    7b:59:9f:99:f3:41:d0:21:f6:ae:31:af:15:31:ab:
                    2d:85:00:ad:8f:e0:0c:85:36:29:92:b9:40:66:97:
                    0f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:10:39:6E:37:45:45:D2:B4:78:8F:48:2F:6E:EC:11:3C:AB:1D:54
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OBA5bjdFRdK0eI9IL27sETyrHVQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e6:5f:d6:04:e4:24:77:8a:a9:46:40:06:12:eb:5a:78:ab:
         82:93:54:ff:25:a5:b3:b9:1c:91:79:dd:0b:e2:c2:e9:56:e5:
         ac:00:4c:81:b5:c4:49:05:e6:dd:e2:36:37:f1:50:8f:4f:e1:
         02:df:ad:0e:79:7c:ba:42:57:21:09:16:b8:30:d1:9e:70:6a:
         76:d1:6b:59:b4:bc:1d:20:53:09:82:6c:f9:15:e0:91:76:bc:
         98:f0:9b:92:b5:3c:8b:d1:be:6f:b1:ed:32:d1:b2:7b:6d:eb:
         5e:92:27:fc:a6:ee:f0:4b:e5:d5:12:01:b6:27:ca:db:f5:f8:
         4e:29:3c:a9:ad:de:93:44:0f:22:b2:bc:59:61:81:44:d2:d7:
         a9:5a:5b:83:2a:49:a8:28:d6:ef:11:a4:94:f8:bb:a0:4f:d5:
         9f:c0:dc:db:89:8f:3a:bc:55:40:11:9d:79:0d:ea:75:02:5d:
         47:8b:32:b5:4e:b3:fd:0a:90:b1:06:ef:cb:34:92:bf:ff:45:
         ea:be:e8:48:3e:ed:64:1d:9e:62:ff:b8:50:1d:33:99:1a:cb:
         5e:80:33:ae:63:5a:64:9c:7b:34:48:8f:f2:d2:86:c1:08:62:
         56:1d:36:e6:8c:c7:ca:f7:19:09:3a:66:47:7a:2d:93:ca:0e:
         5f:86:7a:46
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICE3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU1MzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM4MTAzOTZFMzc0NTQ1
RDJCNDc4OEY0ODJGNkVFQzExM0NBQjFENTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0Hmmn8FY7dh+ZB5zvJlYvQLm1OnO3aizM/E74CoVjCqfjz1Ro
QO9GgVc1rTOc/50nJvsG3YoM5g3DXfiI5SQRj1pEu6Cy/4YiICT7EaQGsIMjMFsW
/V4jvE2J/SSQWQqIzurIevDtAHnELifrkJcgCUk62nXeTPQfSYzm5mRi6abtGrsc
Z0Vc6k6qqViIZ9cGd1TefIc2GzPz1/38SVi8IK4FABz17ClGm3ts3iZPRiWd/X/H
bDddYCEIH15bvi8HwBGt6OKAYYAylFY6sshFCitwlpILRC6A7yaKkxeP4ntZn5nz
QdAh9q4xrxUxqy2FAK2P4AyFNimSuUBmlw/fAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUOBA5bjdFRdK0eI9IL27sETyrHVQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L09CQTViamRGUmRLMGVJOUlMMjdzRVR5ckhWUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABSeIwDQYJKoZIhvcNAQELBQADggEB
AF3mX9YE5CR3iqlGQAYS61p4q4KTVP8lpbO5HJF53QviwulW5awATIG1xEkF5t3i
NjfxUI9P4QLfrQ55fLpCVyEJFrgw0Z5wanbRa1m0vB0gUwmCbPkV4JF2vJjwm5K1
PIvRvm+x7TLRsntt616SJ/ym7vBL5dUSAbYnytv1+E4pPKmt3pNEDyKyvFlhgUTS
16laW4MqSago1u8RpJT4u6BP1Z/A3NuJjzq8VUARnXkN6nUCXUeLMrVOs/0KkLEG
78s0kr//Req+6Eg+7WQdnmL/uFAdM5kay16AM65jWmScezRIj/LShsEIYlYdNuaM
x8r3GQk6Zkd6LZPKDl+GekY=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:18 2026 by rpki-client