Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k5VQAA7355A9HNNgkUm0jBvLnDg.roa
File:                     k5VQAA7355A9HNNgkUm0jBvLnDg.roa (raw, json)
Hash identifier:          u2T8fGyFB7LKAPRTY3fdeZmolr0k9/4jXFNgzDIpARE=
Subject key identifier:   93:95:50:00:0E:F7:E7:90:3D:1C:D3:60:91:49:B4:8C:1B:CB:9C:38
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       154D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k5VQAA7355A9HNNgkUm0jBvLnDg.roa
Signing time:             Tue 31 Mar 2026 07:59:22 +0000
ROA not before:           Tue 31 Mar 2026 07:59:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.158.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5453 (0x154d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=939550000EF7E7903D1CD3609149B48C1BCB9C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:5f:1d:52:bd:15:ad:28:c5:cc:b5:4a:66:
                    51:f9:24:01:2b:6a:95:3b:79:f4:06:1d:5a:22:7f:
                    ca:52:73:a1:82:af:99:ed:5c:e8:fc:92:c8:f0:57:
                    43:17:f8:67:f7:31:dc:9d:45:93:91:fc:c5:f7:bf:
                    84:2d:f1:49:74:ef:8f:60:85:d9:41:40:22:c9:86:
                    f7:61:88:b5:31:32:d4:3a:80:30:f0:53:ad:95:94:
                    02:f8:9a:9d:a6:71:df:d8:93:39:75:ae:07:b3:11:
                    f4:e2:bd:63:f9:d3:4e:8f:9f:c6:5e:a7:51:a9:f3:
                    07:e7:23:ef:ea:87:3f:46:44:57:96:5a:97:d6:bd:
                    42:75:9f:8a:1e:73:5a:96:b1:40:e5:5e:37:cb:97:
                    2f:bc:9c:5f:30:21:49:93:b3:23:b4:4f:db:50:c7:
                    0b:a9:4a:8d:06:da:51:25:fd:b5:60:22:b8:f0:17:
                    fc:0c:16:1c:c4:38:97:9c:bb:d7:ab:fe:6a:9f:f7:
                    03:ae:22:c4:ed:f5:dc:d8:7b:8e:9d:07:3c:d5:fe:
                    3e:ea:90:51:24:09:e0:0a:9b:7c:73:f9:e9:cc:64:
                    2e:49:17:9e:94:25:56:7f:dc:b0:c7:a4:2d:64:30:
                    d4:1e:72:91:67:8b:f7:e0:77:83:b9:50:be:e6:02:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:95:50:00:0E:F7:E7:90:3D:1C:D3:60:91:49:B4:8C:1B:CB:9C:38
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k5VQAA7355A9HNNgkUm0jBvLnDg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:79:84:ae:fd:35:91:c4:3f:93:d9:f7:c7:e9:77:f3:10:3f:
         ff:f5:b7:a3:56:77:7c:73:a5:ea:e2:50:b5:96:e6:55:6f:1f:
         5a:32:81:a3:35:22:16:73:67:73:47:c4:f6:23:fd:15:a3:25:
         78:86:d7:c8:dd:e5:f5:c1:b0:20:c4:77:94:7b:df:e4:0a:c4:
         00:38:38:99:f5:83:23:44:46:67:e2:8d:a3:ee:93:57:c4:1c:
         ad:e9:ae:5c:f2:5a:dd:cd:c0:39:b6:c0:83:ff:9d:8f:8b:a9:
         37:dd:af:ae:a3:c0:e5:1f:dc:e9:d1:28:c4:8d:af:67:19:dd:
         78:4a:9d:e3:1e:cf:c7:67:67:5b:0d:58:d4:8c:80:f6:9e:e4:
         c2:24:fe:6c:d7:63:61:24:60:8b:fd:28:df:84:ed:6a:b5:f4:
         65:d6:e3:14:d6:c1:e1:99:2f:cd:fe:4d:a2:ca:20:a3:aa:c1:
         79:93:36:54:4e:b4:14:26:ce:39:1a:77:3a:d2:34:77:a0:37:
         a2:18:80:4e:40:39:0b:b2:a2:6c:6d:79:1b:64:a9:c9:27:b9:
         1c:6d:72:ff:36:3c:d3:08:de:8f:8f:31:e7:a1:73:1d:99:28:
         50:4f:17:dc:2d:7a:37:84:09:48:34:c3:bd:55:5d:9c:a8:10:
         c3:89:d3:d8
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFU0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU5MjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkzOTU1MDAwMEVGN0U3
OTAzRDFDRDM2MDkxNDlCNDhDMUJDQjlDMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQy18dUr0VrSjFzLVKZlH5JAErapU7efQGHVoif8pSc6GCr5nt
XOj8ksjwV0MX+Gf3MdydRZOR/MX3v4Qt8Ul0749ghdlBQCLJhvdhiLUxMtQ6gDDw
U62VlAL4mp2mcd/Ykzl1rgezEfTivWP5006Pn8Zep1Gp8wfnI+/qhz9GRFeWWpfW
vUJ1n4oec1qWsUDlXjfLly+8nF8wIUmTsyO0T9tQxwupSo0G2lEl/bVgIrjwF/wM
FhzEOJecu9er/mqf9wOuIsTt9dzYe46dBzzV/j7qkFEkCeAKm3xz+enMZC5JF56U
JVZ/3LDHpC1kMNQecpFni/fgd4O5UL7mAmOhAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUk5VQAA7355A9HNNgkUm0jBvLnDgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2s1VlFBQTczNTVBOUhOTmdrVW0wakJ2TG5EZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZunsAwDQYJKoZIhvcNAQELBQADggEB
AJl5hK79NZHEP5PZ98fpd/MQP//1t6NWd3xzperiULWW5lVvH1oygaM1IhZzZ3NH
xPYj/RWjJXiG18jd5fXBsCDEd5R73+QKxAA4OJn1gyNERmfijaPuk1fEHK3prlzy
Wt3NwDm2wIP/nY+LqTfdr66jwOUf3OnRKMSNr2cZ3XhKneMez8dnZ1sNWNSMgPae
5MIk/mzXY2EkYIv9KN+E7Wq19GXW4xTWweGZL83+TaLKIKOqwXmTNlROtBQmzjka
dzrSNHegN6IYgE5AOQuyomxteRtkqcknuRxtcv82PNMI3o+PMeehcx2ZKFBPF9wt
ejeECUg0w71VXZyoEMOJ09g=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:29 2026 by rpki-client