Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TQf4LVMURh7IqOUbGqHQBne2V90.roa
File:                     TQf4LVMURh7IqOUbGqHQBne2V90.roa (raw, json)
Hash identifier:          UveEGjoTBD9uGAo2Tsspp8Pq2G7A8rmdxWNSzQKEqZc=
Subject key identifier:   4D:07:F8:2D:53:14:46:1E:C8:A8:E5:1B:1A:A1:D0:06:77:B6:57:DD
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1460
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TQf4LVMURh7IqOUbGqHQBne2V90.roa
Signing time:             Tue 31 Mar 2026 07:57:26 +0000
ROA not before:           Tue 31 Mar 2026 07:57:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5216 (0x1460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4D07F82D5314461EC8A8E51B1AA1D00677B657DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:12:db:72:e4:5a:f9:6a:30:48:ca:da:12:
                    3b:03:b0:02:f8:72:97:ec:dc:17:50:59:33:7f:b7:
                    8f:3c:34:65:72:58:ea:86:4e:61:70:57:bb:ea:c4:
                    aa:3e:84:2d:0f:a9:bf:0b:4f:63:26:34:4c:df:d7:
                    19:ea:66:49:4d:01:4d:47:3b:1e:9f:02:cf:ee:20:
                    09:ae:04:e7:ec:bf:7b:65:12:82:87:2d:11:3b:a6:
                    7c:9e:fe:a8:8e:4c:07:50:8b:4f:6e:80:d7:ff:8e:
                    f4:90:20:f6:81:45:d1:fe:1b:fd:9c:a6:cc:0d:b1:
                    61:e5:71:28:1b:87:7b:19:0a:91:48:a7:71:87:f9:
                    94:f2:bb:4f:6c:a9:b6:c2:e5:13:ec:1a:35:7f:2f:
                    d6:b7:27:3b:d3:25:21:dd:3f:a5:b1:9f:cf:6b:f1:
                    60:ae:ab:52:5c:aa:4b:f6:41:d1:d7:fd:5c:03:b1:
                    b2:16:1f:f8:99:e5:3f:c3:9f:05:15:75:cc:06:2d:
                    40:13:84:4d:95:1a:06:fe:2a:b5:f6:69:2d:67:53:
                    53:23:57:35:d6:64:4f:b2:cb:1b:ec:c0:25:a0:d1:
                    a6:79:35:d0:c2:23:d5:50:cc:52:a8:fd:ab:19:8b:
                    96:5c:26:21:30:75:02:cc:3f:30:3a:db:2a:a3:e8:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:07:F8:2D:53:14:46:1E:C8:A8:E5:1B:1A:A1:D0:06:77:B6:57:DD
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TQf4LVMURh7IqOUbGqHQBne2V90.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:8d:b9:f2:fb:03:de:de:84:6c:cd:20:48:03:28:09:bf:18:
         cd:de:7f:27:35:a1:a7:28:5e:0a:c7:55:94:e1:9e:1b:05:3c:
         0f:f9:75:0e:a4:28:a6:72:5a:d2:1d:f9:0d:44:36:4c:fa:7a:
         56:71:de:a1:f3:9e:3f:fa:cf:1e:65:73:0c:33:fc:d7:e8:e6:
         56:63:83:70:24:96:cb:7f:b9:90:89:ea:4f:a0:f3:24:fa:4f:
         b1:78:6a:3e:d5:c3:fe:06:ab:f5:6e:29:6e:65:34:b9:7a:7c:
         fa:00:90:7a:8c:bf:11:51:95:9d:94:1c:70:5b:a4:4f:57:8f:
         09:1f:e7:d8:2c:6b:23:06:ad:56:30:12:e3:04:de:b1:ee:f3:
         1c:f1:bf:37:c2:15:8a:ef:9c:4a:61:4b:7f:34:49:65:3b:19:
         a8:17:47:66:23:7f:44:cf:ad:4e:d7:51:be:1e:bc:72:2a:53:
         b0:c7:29:92:a1:fa:54:f8:a5:a6:9c:78:5a:da:28:27:24:f0:
         bf:f9:20:32:84:f5:16:2e:12:da:1a:c0:43:7a:31:67:d8:95:
         7d:a6:c8:ec:42:a2:f3:39:f8:6c:0b:7c:66:a3:63:df:aa:97:
         46:83:4f:2c:27:b8:ba:9f:90:54:be:5f:d0:af:1f:4f:c0:e6:
         76:b5:c5:81
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU3MjZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDREMDdGODJENTMxNDQ2
MUVDOEE4RTUxQjFBQTFEMDA2NzdCNjU3REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgYRLbcuRa+WowSMraEjsDsAL4cpfs3BdQWTN/t488NGVyWOqG
TmFwV7vqxKo+hC0Pqb8LT2MmNEzf1xnqZklNAU1HOx6fAs/uIAmuBOfsv3tlEoKH
LRE7pnye/qiOTAdQi09ugNf/jvSQIPaBRdH+G/2cpswNsWHlcSgbh3sZCpFIp3GH
+ZTyu09sqbbC5RPsGjV/L9a3JzvTJSHdP6Wxn89r8WCuq1Jcqkv2QdHX/VwDsbIW
H/iZ5T/DnwUVdcwGLUAThE2VGgb+KrX2aS1nU1MjVzXWZE+yyxvswCWg0aZ5NdDC
I9VQzFKo/asZi5ZcJiEwdQLMPzA62yqj6KjLAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUTQf4LVMURh7IqOUbGqHQBne2V90wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1RRZjRMVk1VUmg3SXFPVWJHcUhRQm5lMlY5MC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABT1IwDQYJKoZIhvcNAQELBQADggEB
AKKNufL7A97ehGzNIEgDKAm/GM3efyc1oacoXgrHVZThnhsFPA/5dQ6kKKZyWtId
+Q1ENkz6elZx3qHznj/6zx5lcwwz/Nfo5lZjg3Aklst/uZCJ6k+g8yT6T7F4aj7V
w/4Gq/VuKW5lNLl6fPoAkHqMvxFRlZ2UHHBbpE9Xjwkf59gsayMGrVYwEuME3rHu
8xzxvzfCFYrvnEphS380SWU7GagXR2Yjf0TPrU7XUb4evHIqU7DHKZKh+lT4paac
eFraKCck8L/5IDKE9RYuEtoawEN6MWfYlX2myOxCovM5+GwLfGajY9+ql0aDTywn
uLqfkFS+X9CvH0/A5na1xYE=
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:11 2026 by rpki-client