Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZBEfxqXp-zEk_0TYGSSSS8WjXp0.roa
File:                     ZBEfxqXp-zEk_0TYGSSSS8WjXp0.roa (raw, json)
Hash identifier:          oOAxuKDuYz+zvRwrpJ4aEBtBGUHRBpL+mAkqFX3x2w4=
Subject key identifier:   64:11:1F:C6:A5:E9:FB:31:24:FF:44:D8:19:24:92:4B:C5:A3:5E:9D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1363
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZBEfxqXp-zEk_0TYGSSSS8WjXp0.roa
Signing time:             Tue 31 Mar 2026 07:55:28 +0000
ROA not before:           Tue 31 Mar 2026 07:55:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4963 (0x1363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=64111FC6A5E9FB3124FF44D81924924BC5A35E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:a7:38:37:97:c7:d1:4c:e9:1d:3e:57:35:
                    f7:d8:69:8a:58:c3:4d:90:1e:e3:d6:d6:22:f6:ef:
                    c1:34:2d:d8:11:60:e0:ab:79:df:a8:e1:de:89:16:
                    6a:ab:3e:ee:6b:7b:81:63:c0:4e:b9:06:fd:f8:27:
                    fc:f9:73:91:70:46:60:a1:b4:1a:33:51:c1:6b:ef:
                    d8:f6:08:c6:6d:dc:2e:8b:b8:33:15:f1:89:b3:75:
                    3b:e3:37:84:9c:74:e2:55:be:a1:8a:84:d3:2e:6b:
                    bd:92:8c:5b:f3:2c:81:8a:ad:b6:c6:1a:75:38:5a:
                    61:0a:56:b3:4a:cc:65:8b:13:d3:d2:0d:b9:e8:d8:
                    d9:18:7b:3d:51:63:36:fb:96:29:3b:be:c1:fd:d8:
                    3a:26:97:e1:44:1f:f1:46:32:8e:bb:fe:f0:85:57:
                    9f:11:22:85:03:42:7e:1f:2e:3e:50:32:6a:9f:c0:
                    41:07:62:53:16:51:ca:45:5e:32:87:6d:98:39:6d:
                    2a:4e:68:41:01:0d:6d:02:2b:b7:3b:df:a6:3a:87:
                    44:1e:16:c7:ea:21:5d:29:00:f3:53:35:49:d6:fa:
                    6b:ca:d8:9f:1e:f8:df:77:4a:55:0e:2f:e0:69:b6:
                    1a:0c:e7:2b:30:26:7b:54:1b:67:25:ac:32:ac:31:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:11:1F:C6:A5:E9:FB:31:24:FF:44:D8:19:24:92:4B:C5:A3:5E:9D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZBEfxqXp-zEk_0TYGSSSS8WjXp0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:38:18:d0:4c:0f:d9:1d:d0:20:af:6a:2c:83:bc:00:43:db:
         c6:6c:e0:9f:12:61:97:a4:0b:d9:56:a5:f2:38:f5:c6:a6:2d:
         28:b5:c1:74:f1:f2:4f:98:2c:72:2b:76:e9:be:d5:9c:33:a7:
         72:7b:d7:42:2d:a6:54:0b:71:6e:a6:0e:d4:09:af:d3:34:82:
         19:67:2e:27:af:91:3a:da:16:43:47:24:25:dc:a8:f1:49:0c:
         2e:c0:f1:c1:a2:af:c2:1b:4a:83:e2:0e:aa:38:a7:08:f8:ca:
         e8:ff:55:92:3a:5a:2e:d2:6c:b5:90:6b:7f:7f:78:c2:8a:78:
         dd:90:99:77:f5:31:a8:e2:4e:be:ac:66:97:51:af:35:51:2e:
         20:df:81:4e:f1:cd:c9:37:38:24:f7:4b:81:fa:ff:ab:e8:a8:
         78:c5:79:ee:4f:5c:f0:a9:d9:5e:35:15:5d:d7:9e:10:f2:f4:
         eb:d7:49:2a:bc:b1:22:d4:79:0d:bd:b3:78:c9:8d:91:8e:f7:
         d8:36:65:6f:58:48:b9:49:77:0c:3b:84:2e:32:88:75:7f:a7:
         42:d1:74:7f:bd:5e:96:6f:24:e3:aa:16:17:81:2b:c5:dd:e8:
         57:d3:e4:45:74:46:92:7d:ab:66:7e:1d:5c:11:7a:53:23:86:
         c5:60:fc:e5
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICE2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU1MjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY0MTExRkM2QTVFOUZC
MzEyNEZGNDREODE5MjQ5MjRCQzVBMzVFOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkE6c4N5fH0UzpHT5XNffYaYpYw02QHuPW1iL278E0LdgRYOCr
ed+o4d6JFmqrPu5re4FjwE65Bv34J/z5c5FwRmChtBozUcFr79j2CMZt3C6LuDMV
8YmzdTvjN4ScdOJVvqGKhNMua72SjFvzLIGKrbbGGnU4WmEKVrNKzGWLE9PSDbno
2NkYez1RYzb7lik7vsH92Doml+FEH/FGMo67/vCFV58RIoUDQn4fLj5QMmqfwEEH
YlMWUcpFXjKHbZg5bSpOaEEBDW0CK7c736Y6h0QeFsfqIV0pAPNTNUnW+mvK2J8e
+N93SlUOL+BpthoM5yswJntUG2clrDKsMS9LAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUZBEfxqXp+zEk/0TYGSSSS8WjXp0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1pCRWZ4cVhwLXpFa18wVFlHU1NTUzhXalhwMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABS+UwDQYJKoZIhvcNAQELBQADggEB
ACo4GNBMD9kd0CCvaiyDvABD28Zs4J8SYZekC9lWpfI49camLSi1wXTx8k+YLHIr
dum+1Zwzp3J710ItplQLcW6mDtQJr9M0ghlnLievkTraFkNHJCXcqPFJDC7A8cGi
r8IbSoPiDqo4pwj4yuj/VZI6Wi7SbLWQa39/eMKKeN2QmXf1MajiTr6sZpdRrzVR
LiDfgU7xzck3OCT3S4H6/6voqHjFee5PXPCp2V41FV3XnhDy9OvXSSq8sSLUeQ29
s3jJjZGO99g2ZW9YSLlJdww7hC4yiHV/p0LRdH+9XpZvJOOqFheBK8Xd6FfT5EV0
RpJ9q2Z+HVwRelMjhsVg/OU=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:19 2026 by rpki-client