Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fU0SIal6g9KKkdy1dpu966lkNjU.roa
File:                     fU0SIal6g9KKkdy1dpu966lkNjU.roa (raw, json)
Hash identifier:          asG3RkztW3r941uAKIlwqumTGwvWH4THHQFaP8yyzHo=
Subject key identifier:   7D:4D:12:21:A9:7A:83:D2:8A:91:DC:B5:76:9B:BD:EB:A9:64:36:35
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17DB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fU0SIal6g9KKkdy1dpu966lkNjU.roa
Signing time:             Tue 31 Mar 2026 08:04:41 +0000
ROA not before:           Tue 31 Mar 2026 08:04:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6107 (0x17db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7D4D1221A97A83D28A91DCB5769BBDEBA9643635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:6b:9c:c2:61:c8:be:23:85:ac:c2:f1:17:
                    1b:f9:0b:3b:df:d7:79:77:87:9c:97:29:0b:12:9c:
                    d8:39:5a:1b:52:2f:2b:9a:84:3e:cc:fa:4c:13:a7:
                    b9:90:68:af:eb:1d:a7:f4:68:ce:c9:c4:0f:df:77:
                    70:b4:b6:76:91:72:1d:56:5a:f7:02:14:ea:a0:2e:
                    fb:07:73:65:3c:69:f3:b4:bf:02:bf:77:d6:f3:a0:
                    9f:4b:bb:6e:21:9a:ec:22:c3:08:a9:5b:9a:90:b1:
                    f5:26:9a:73:e8:96:1c:eb:61:4c:8a:b5:d0:f7:ea:
                    fe:99:e1:7e:44:a6:56:cc:f2:7b:15:2a:b4:7a:06:
                    3e:31:db:18:f8:f9:f2:46:32:fa:43:10:df:f5:13:
                    fa:14:d1:b0:c0:67:0f:9e:7a:31:7a:1c:ba:87:5d:
                    53:4a:2e:dd:eb:b1:3f:57:bf:bc:3e:8e:79:5f:49:
                    42:25:34:da:12:d7:98:21:17:fc:63:e6:d8:7d:75:
                    a3:ce:63:37:d2:f8:eb:7e:13:44:bc:52:be:4d:32:
                    24:b6:7b:eb:4f:53:d2:b7:c2:a5:72:da:39:c6:30:
                    6c:51:5f:bf:8e:3e:c2:fd:df:7d:84:b5:d6:55:9a:
                    3b:73:0a:24:d5:0b:71:5b:9c:79:9b:be:65:df:6e:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4D:12:21:A9:7A:83:D2:8A:91:DC:B5:76:9B:BD:EB:A9:64:36:35
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fU0SIal6g9KKkdy1dpu966lkNjU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:11:da:12:6e:2b:c8:bc:c0:57:2c:45:c5:0a:3b:92:33:78:
         d8:2c:a6:e0:5c:15:d5:00:22:50:ba:77:89:71:d7:5d:47:9a:
         5f:1f:2c:4e:28:f0:08:7c:e3:a4:66:04:99:31:5d:43:70:06:
         73:b8:03:e3:bc:64:53:fc:5a:0d:87:6c:2c:ab:bd:bb:3e:84:
         7d:40:18:7f:b2:ea:97:25:5d:df:e5:97:61:fc:f8:09:31:22:
         6f:52:a5:86:6a:b9:68:14:d9:c1:de:78:86:d5:e1:48:27:d1:
         6f:c5:89:43:87:53:2a:c8:4e:ef:f2:83:20:58:8c:f2:b1:9a:
         b0:88:cb:96:35:81:ec:cf:96:37:c1:72:86:0f:db:c1:e8:16:
         33:a3:d7:b8:41:69:f9:c1:41:ae:27:f9:9c:db:40:99:8f:58:
         a8:bb:f0:3e:ca:65:a4:ef:d5:68:66:8f:fb:33:2f:82:a6:dd:
         0f:6c:02:80:cd:1a:10:e6:5b:47:7a:c7:b1:5b:05:cb:06:7e:
         65:75:21:cb:50:b7:e6:2c:a6:3f:9a:5c:31:cb:9a:c1:de:39:
         0d:4d:dc:f0:9c:ac:ba:b9:66:71:72:a3:11:18:26:37:10:ad:
         dd:3a:fd:ad:6e:17:17:0f:af:98:86:63:89:c8:23:24:07:44:
         7b:c9:16:ae
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF9swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA0NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdENEQxMjIxQTk3QTgz
RDI4QTkxRENCNTc2OUJCREVCQTk2NDM2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMOmucwmHIviOFrMLxFxv5Czvf13l3h5yXKQsSnNg5WhtSLyua
hD7M+kwTp7mQaK/rHaf0aM7JxA/fd3C0tnaRch1WWvcCFOqgLvsHc2U8afO0vwK/
d9bzoJ9Lu24hmuwiwwipW5qQsfUmmnPolhzrYUyKtdD36v6Z4X5EplbM8nsVKrR6
Bj4x2xj4+fJGMvpDEN/1E/oU0bDAZw+eejF6HLqHXVNKLt3rsT9Xv7w+jnlfSUIl
NNoS15ghF/xj5th9daPOYzfS+Ot+E0S8Ur5NMiS2e+tPU9K3wqVy2jnGMGxRX7+O
PsL9332EtdZVmjtzCiTVC3FbnHmbvmXfbgaxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUfU0SIal6g9KKkdy1dpu966lkNjUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2ZVMFNJYWw2ZzlLS2tkeTFkcHU5NjZsa05qVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUBSOAwDQYJKoZIhvcNAQELBQADggEB
AJAR2hJuK8i8wFcsRcUKO5IzeNgspuBcFdUAIlC6d4lx111Hml8fLE4o8Ah846Rm
BJkxXUNwBnO4A+O8ZFP8Wg2HbCyrvbs+hH1AGH+y6pclXd/ll2H8+AkxIm9SpYZq
uWgU2cHeeIbV4Ugn0W/FiUOHUyrITu/ygyBYjPKxmrCIy5Y1gezPljfBcoYP28Ho
FjOj17hBafnBQa4n+ZzbQJmPWKi78D7KZaTv1Whmj/szL4Km3Q9sAoDNGhDmW0d6
x7FbBcsGfmV1IctQt+Yspj+aXDHLmsHeOQ1N3PCcrLq5ZnFyoxEYJjcQrd06/a1u
FxcPr5iGY4nIIyQHRHvJFq4=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:33 2026 by rpki-client