Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eeeFcJv2EdrME4vhgtaWad_gjAg.roa
File:                     eeeFcJv2EdrME4vhgtaWad_gjAg.roa (raw, json)
Hash identifier:          YoEVbpQjTAQOppMSSwBk2IU9T8vmpOi6MKIu5h4qGpY=
Subject key identifier:   79:E7:85:70:9B:F6:11:DA:CC:13:8B:E1:82:D6:96:69:DF:E0:8C:08
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       143A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eeeFcJv2EdrME4vhgtaWad_gjAg.roa
Signing time:             Tue 31 Mar 2026 07:57:08 +0000
ROA not before:           Tue 31 Mar 2026 07:57:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5178 (0x143a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=79E785709BF611DACC138BE182D69669DFE08C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:d9:10:eb:2f:57:20:4b:9d:be:da:57:e4:
                    e9:33:50:a5:4b:d2:ea:bb:83:55:ee:db:85:2d:2c:
                    ac:00:15:76:cb:b6:e0:0f:14:ea:a6:e5:29:44:4a:
                    4b:b3:25:36:29:16:3c:dd:8d:0b:e7:55:a1:48:09:
                    ab:ec:1f:30:24:40:58:88:e0:26:e8:23:6e:13:a6:
                    fa:ba:c4:f3:c7:ea:8c:fb:74:0b:f6:be:22:0e:c7:
                    6a:93:0a:4a:a9:b4:ad:0d:bb:bd:8c:19:46:2f:d4:
                    c0:b3:43:8a:3e:12:d7:79:cd:64:3c:57:42:3a:e0:
                    30:61:6f:32:77:33:07:4a:6f:ce:31:7c:b6:c0:05:
                    20:60:af:6d:aa:3c:db:be:68:e4:5e:9f:e4:39:31:
                    ae:89:20:42:78:35:0d:d1:8d:30:94:ce:ee:7e:be:
                    de:2f:1e:91:67:cf:cb:ba:d5:c0:b1:9c:9e:74:ee:
                    b7:10:71:71:f6:26:e2:2f:1a:9f:e2:51:1d:dc:fa:
                    0f:94:d9:a0:e6:72:62:46:d5:f8:df:a9:ed:1c:81:
                    86:df:ef:58:f5:9c:29:00:a0:d2:9f:70:2e:e0:46:
                    0e:fa:42:0c:39:02:2e:4d:ee:75:01:36:bd:f9:b2:
                    b4:dd:e8:d2:3a:1b:76:ff:66:48:dc:17:15:cc:b1:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E7:85:70:9B:F6:11:DA:CC:13:8B:E1:82:D6:96:69:DF:E0:8C:08
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eeeFcJv2EdrME4vhgtaWad_gjAg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:7c:a2:82:c5:4b:b0:45:2a:37:10:ff:7a:2d:ba:1c:da:
         1d:0a:48:b4:c6:9c:8d:bd:05:bb:82:4b:ab:01:a0:ab:67:28:
         f2:2a:5d:69:3d:45:ba:2b:b2:23:de:c5:ac:27:2c:c4:1c:4f:
         67:12:7b:10:0f:bf:b6:62:08:ed:e6:26:63:23:71:80:00:4b:
         36:81:d4:61:7f:03:81:45:73:96:2a:df:4e:10:dd:97:20:41:
         3a:90:e4:c5:81:82:65:6e:f9:cb:88:59:d9:6e:e5:e9:9f:d1:
         3c:ce:a7:69:d2:7b:4d:2f:d5:11:82:e2:8d:79:18:72:7d:36:
         2c:eb:29:fd:11:39:d8:99:fd:94:f2:86:59:29:dc:24:02:0a:
         19:f7:4f:d7:f6:c1:b2:62:61:d4:0b:72:88:a2:62:d3:28:56:
         5e:5f:7b:31:1f:4e:55:32:dd:86:c4:11:32:a0:cc:1e:c0:9d:
         0f:07:1c:a1:17:de:60:ce:a6:8d:a2:f2:44:39:c6:ef:a8:2c:
         bb:1f:95:a2:c8:5d:1b:d6:03:8a:e0:75:4c:50:fc:bd:7a:b0:
         04:48:cb:ac:46:11:40:42:e8:05:be:16:d8:c7:6a:a3:e2:07:
         6f:a1:9d:59:18:da:87:d4:b5:97:1e:1a:0a:d6:be:26:ed:c0:
         7a:eb:2c:de
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFDowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU3MDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc5RTc4NTcwOUJGNjEx
REFDQzEzOEJFMTgyRDY5NjY5REZFMDhDMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUx9kQ6y9XIEudvtpX5OkzUKVL0uq7g1Xu24UtLKwAFXbLtuAP
FOqm5SlESkuzJTYpFjzdjQvnVaFICavsHzAkQFiI4CboI24Tpvq6xPPH6oz7dAv2
viIOx2qTCkqptK0Nu72MGUYv1MCzQ4o+Etd5zWQ8V0I64DBhbzJ3MwdKb84xfLbA
BSBgr22qPNu+aORen+Q5Ma6JIEJ4NQ3RjTCUzu5+vt4vHpFnz8u61cCxnJ507rcQ
cXH2JuIvGp/iUR3c+g+U2aDmcmJG1fjfqe0cgYbf71j1nCkAoNKfcC7gRg76Qgw5
Ai5N7nUBNr35srTd6NI6G3b/ZkjcFxXMsQwlAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUeeeFcJv2EdrME4vhgtaWad/gjAgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2VlZUZjSnYyRWRyTUU0dmhndGFXYWRfZ2pBZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABuowowDQYJKoZIhvcNAQELBQADggEB
AHOjfKKCxUuwRSo3EP96Lboc2h0KSLTGnI29BbuCS6sBoKtnKPIqXWk9RborsiPe
xawnLMQcT2cSexAPv7ZiCO3mJmMjcYAASzaB1GF/A4FFc5Yq304Q3ZcgQTqQ5MWB
gmVu+cuIWdlu5emf0TzOp2nSe00v1RGC4o15GHJ9NizrKf0ROdiZ/ZTyhlkp3CQC
Chn3T9f2wbJiYdQLcoiiYtMoVl5fezEfTlUy3YbEETKgzB7AnQ8HHKEX3mDOpo2i
8kQ5xu+oLLsflaLIXRvWA4rgdUxQ/L16sARIy6xGEUBC6AW+FtjHaqPiB2+hnVkY
2ofUtZceGgrWvibtwHrrLN4=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:37 2026 by rpki-client