Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YiyxLke105U6BleLAfA8eikx4pI.roa
File:                     YiyxLke105U6BleLAfA8eikx4pI.roa (raw, json)
Hash identifier:          BYXls58+DuT1dYeJDWy2SbsZsxSMdZ5oHsExwNE3crg=
Subject key identifier:   62:2C:B1:2E:47:B5:D3:95:3A:06:57:8B:01:F0:3C:7A:29:31:E2:92
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       174F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YiyxLke105U6BleLAfA8eikx4pI.roa
Signing time:             Tue 31 Mar 2026 08:03:34 +0000
ROA not before:           Tue 31 Mar 2026 08:03:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5967 (0x174f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=622CB12E47B5D3953A06578B01F03C7A2931E292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ca:59:8a:1b:e9:fa:72:fc:5d:b1:f6:da:68:
                    e6:9a:0c:33:89:53:58:c6:bc:9d:f2:c0:0a:e8:6d:
                    a2:ac:82:5e:ae:a4:ee:40:67:b5:c6:30:51:e1:e7:
                    60:fd:fc:e7:8b:69:dc:ec:6a:6f:dd:ef:c1:86:8d:
                    18:63:dd:cf:c7:aa:51:17:ec:b5:8b:48:41:4e:d3:
                    9c:af:09:1f:e1:65:cc:24:74:22:86:83:fe:a0:21:
                    d5:77:f7:ac:03:c1:0f:5f:eb:d8:53:8d:56:7e:a4:
                    ef:8b:6f:da:30:91:2d:db:ae:69:90:01:a4:b9:1b:
                    a9:99:d7:75:9f:58:8e:73:63:07:b0:ae:7e:9f:f3:
                    35:f4:8d:3b:c0:9b:c6:fa:27:2a:13:9c:25:63:51:
                    f4:b7:88:bf:ad:47:9a:bf:89:f7:5e:62:11:c5:f4:
                    2a:84:98:df:95:23:aa:54:07:f5:28:a2:75:80:05:
                    7e:e8:49:3c:82:70:f6:51:33:4b:f8:96:be:23:81:
                    80:3b:46:16:01:8e:15:ad:34:71:ea:0b:24:1c:89:
                    70:c6:69:bd:c1:96:8b:bd:e7:1a:6e:3f:7c:26:e2:
                    41:ed:14:eb:73:7d:6a:79:3d:14:15:af:c0:2f:c4:
                    b6:02:9e:d0:98:8e:ec:b6:51:cb:98:56:a0:bc:04:
                    cc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2C:B1:2E:47:B5:D3:95:3A:06:57:8B:01:F0:3C:7A:29:31:E2:92
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YiyxLke105U6BleLAfA8eikx4pI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:a2:43:6b:24:86:3e:6b:cc:a5:e2:7a:ee:8d:93:6f:b8:e0:
         73:d8:03:22:4e:e6:80:8a:d6:c3:48:ce:65:45:4d:d4:76:3e:
         31:c0:b2:1f:5a:cd:32:94:0e:b3:2f:6d:37:2f:1b:12:3d:f4:
         c0:37:e7:d2:7c:ee:0d:07:21:5d:fb:3d:e2:6c:38:c8:0c:d5:
         73:c5:56:d1:59:01:89:4b:f0:01:24:ed:c0:ca:0e:35:18:46:
         c4:fa:ee:cc:dd:fa:8b:7a:4b:1a:1d:26:55:67:6d:f1:6f:05:
         40:ff:59:c0:5e:78:e9:52:76:b0:cb:83:9b:de:d4:de:9b:72:
         b9:b4:71:b4:b1:64:29:86:cf:af:0a:f6:14:32:3a:11:9b:75:
         52:34:55:fc:14:3a:04:1e:2c:0b:9b:c7:a6:8d:de:90:2c:d6:
         dc:8c:dc:0e:92:5e:0d:f6:d9:b6:4f:00:d7:1f:93:d5:47:3b:
         f9:69:52:0e:d2:d5:ab:b1:fb:94:ff:2d:93:38:12:a5:a8:00:
         e1:8a:ab:83:07:b1:2c:b0:af:2d:a7:d0:43:74:43:1b:dd:f4:
         84:bb:d7:cf:36:aa:e4:25:b4:d6:ce:88:95:3f:c5:ac:2b:78:
         9b:6d:70:e2:eb:6c:62:c5:64:b7:06:eb:ad:05:ca:49:c9:39:
         81:bd:0d:76
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF08wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAzMzRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYyMkNCMTJFNDdCNUQz
OTUzQTA2NTc4QjAxRjAzQzdBMjkzMUUyOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLylmKG+n6cvxdsfbaaOaaDDOJU1jGvJ3ywArobaKsgl6upO5A
Z7XGMFHh52D9/OeLadzsam/d78GGjRhj3c/HqlEX7LWLSEFO05yvCR/hZcwkdCKG
g/6gIdV396wDwQ9f69hTjVZ+pO+Lb9owkS3brmmQAaS5G6mZ13WfWI5zYwewrn6f
8zX0jTvAm8b6JyoTnCVjUfS3iL+tR5q/ifdeYhHF9CqEmN+VI6pUB/UoonWABX7o
STyCcPZRM0v4lr4jgYA7RhYBjhWtNHHqCyQciXDGab3Blou95xpuP3wm4kHtFOtz
fWp5PRQVr8AvxLYCntCYjuy2UcuYVqC8BMzlAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUYiyxLke105U6BleLAfA8eikx4pIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1lpeXhMa2UxMDVVNkJsZUxBZkE4ZWlreDRwSS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALTDkQwDQYJKoZIhvcNAQELBQADggEB
AAKiQ2skhj5rzKXieu6Nk2+44HPYAyJO5oCK1sNIzmVFTdR2PjHAsh9azTKUDrMv
bTcvGxI99MA359J87g0HIV37PeJsOMgM1XPFVtFZAYlL8AEk7cDKDjUYRsT67szd
+ot6SxodJlVnbfFvBUD/WcBeeOlSdrDLg5ve1N6bcrm0cbSxZCmGz68K9hQyOhGb
dVI0VfwUOgQeLAubx6aN3pAs1tyM3A6SXg322bZPANcfk9VHO/lpUg7S1aux+5T/
LZM4EqWoAOGKq4MHsSywry2n0EN0Qxvd9IS71882quQltNbOiJU/xawreJttcOLr
bGLFZLcG660FyknJOYG9DXY=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:41 2026 by rpki-client