Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UIIT_Ayn2u2CS2ktdkzT-cUWbRc.roa
File:                     UIIT_Ayn2u2CS2ktdkzT-cUWbRc.roa (raw, json)
Hash identifier:          ZMJdHhFaqRW/OJVud9L2Nw1lnAZWJPpHZbKB3NLzLww=
Subject key identifier:   50:82:13:FC:0C:A7:DA:ED:82:4B:69:2D:76:4C:D3:F9:C5:16:6D:17
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1577
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UIIT_Ayn2u2CS2ktdkzT-cUWbRc.roa
Signing time:             Tue 31 Mar 2026 07:59:41 +0000
ROA not before:           Tue 31 Mar 2026 07:59:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.159.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5495 (0x1577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=508213FC0CA7DAED824B692D764CD3F9C5166D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:7e:7f:ad:95:4a:13:bb:6f:ba:bd:89:67:
                    7a:88:cd:93:20:63:8f:6f:71:1b:06:c2:87:e3:f0:
                    e8:68:b2:c5:68:0e:53:89:74:68:0c:c3:7b:ce:2d:
                    e6:83:b7:28:4e:90:b8:42:4e:b9:d9:9e:be:86:62:
                    cc:20:3a:b8:19:04:27:8a:17:29:fe:9d:a3:6a:0a:
                    ae:46:9a:9e:2e:2e:97:f5:ac:f1:e5:64:2f:5c:3d:
                    56:2e:18:a0:bd:98:36:ec:33:bd:19:f0:61:6f:52:
                    6f:41:05:16:36:e6:8f:93:31:c6:68:37:5d:38:78:
                    d5:9c:42:1c:34:af:5f:d0:be:7b:88:40:3f:96:fc:
                    d4:17:3b:30:a8:c2:68:6a:b1:50:36:21:90:30:18:
                    e3:93:63:63:10:7e:cc:51:4b:db:42:b1:ad:1b:3f:
                    4c:8c:4b:6b:02:6a:aa:a6:f5:bd:cd:80:8a:22:f3:
                    ca:70:01:75:d8:9c:b2:f1:a8:0e:16:8e:aa:12:f5:
                    46:ab:2f:ed:6b:74:20:76:1b:60:09:39:48:4b:0e:
                    65:bd:e6:ec:1e:18:89:53:93:3f:d5:36:99:80:71:
                    96:d8:74:85:b0:81:de:54:0e:85:a4:2f:a4:17:ce:
                    e1:47:00:54:2d:56:1a:59:4b:97:b1:c4:f3:d9:f3:
                    d9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:82:13:FC:0C:A7:DA:ED:82:4B:69:2D:76:4C:D3:F9:C5:16:6D:17
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UIIT_Ayn2u2CS2ktdkzT-cUWbRc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:90:bb:b3:54:05:3a:01:68:9d:ce:9c:77:da:12:d6:a9:a0:
         a3:24:fd:ee:ab:f6:c7:ed:8c:f2:e9:1e:bb:a0:70:b2:46:3a:
         9e:c0:11:08:ee:f1:ac:63:c4:29:04:23:49:30:e2:45:1c:6d:
         0d:c3:70:8c:6c:ed:03:e1:46:7a:a7:81:91:df:07:96:a2:e7:
         1b:3d:a1:eb:0e:13:d4:32:81:e2:60:9d:71:a2:2c:40:83:20:
         16:7e:05:d1:8d:fd:d2:35:9c:4d:15:98:7f:0a:15:8f:f4:7e:
         6f:13:6f:70:88:9a:49:b0:87:ce:6d:e3:47:84:3b:c4:3f:d8:
         7e:2c:95:58:51:53:36:2b:a6:d2:7c:f8:c0:d2:d9:1d:5f:46:
         af:5c:33:19:18:9f:0e:03:90:c5:48:08:fc:9a:0c:f5:cb:67:
         2e:14:16:04:49:db:78:f3:7c:68:4b:d3:1b:2f:6b:1a:df:b2:
         b2:58:88:5d:3e:e9:d7:03:01:76:16:d4:10:96:6e:d5:21:11:
         8e:1a:26:f9:5a:96:6e:4c:ac:2c:22:b1:df:73:92:6b:70:5e:
         7e:90:14:d3:61:c1:c5:fe:69:b1:d4:87:9c:22:05:29:16:7d:
         11:de:e4:ab:54:ea:4a:24:ba:50:7c:11:20:2c:e2:5a:77:4f:
         d1:88:f1:fb
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU5NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUwODIxM0ZDMENBN0RB
RUQ4MjRCNjkyRDc2NENEM0Y5QzUxNjZEMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDODH5/rZVKE7tvur2JZ3qIzZMgY49vcRsGwofj8OhossVoDlOJ
dGgMw3vOLeaDtyhOkLhCTrnZnr6GYswgOrgZBCeKFyn+naNqCq5Gmp4uLpf1rPHl
ZC9cPVYuGKC9mDbsM70Z8GFvUm9BBRY25o+TMcZoN104eNWcQhw0r1/QvnuIQD+W
/NQXOzCowmhqsVA2IZAwGOOTY2MQfsxRS9tCsa0bP0yMS2sCaqqm9b3NgIoi88pw
AXXYnLLxqA4WjqoS9UarL+1rdCB2G2AJOUhLDmW95uweGIlTkz/VNpmAcZbYdIWw
gd5UDoWkL6QXzuFHAFQtVhpZS5exxPPZ89nxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUUIIT/Ayn2u2CS2ktdkzT+cUWbRcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1VJSVRfQXluMnUyQ1Mya3Rka3pULWNVV2JSYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHcn/owDQYJKoZIhvcNAQELBQADggEB
AGaQu7NUBToBaJ3OnHfaEtapoKMk/e6r9sftjPLpHrugcLJGOp7AEQju8axjxCkE
I0kw4kUcbQ3DcIxs7QPhRnqngZHfB5ai5xs9oesOE9QygeJgnXGiLECDIBZ+BdGN
/dI1nE0VmH8KFY/0fm8Tb3CImkmwh85t40eEO8Q/2H4slVhRUzYrptJ8+MDS2R1f
Rq9cMxkYnw4DkMVICPyaDPXLZy4UFgRJ23jzfGhL0xsvaxrfsrJYiF0+6dcDAXYW
1BCWbtUhEY4aJvlalm5MrCwisd9zkmtwXn6QFNNhwcX+abHUh5wiBSkWfRHe5KtU
6kokulB8ESAs4lp3T9GI8fs=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:05 2026 by rpki-client