Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/l3NmMdDLxd5Abgxz0GkEiDaSUJM.roa
File:                     l3NmMdDLxd5Abgxz0GkEiDaSUJM.roa (raw, json)
Hash identifier:          b6lE1wAUK+4+0UwE4YhI6JNSVTCBRUmff+P9mQ38NNE=
Subject key identifier:   97:73:66:31:D0:CB:C5:DE:40:6E:0C:73:D0:69:04:88:36:92:50:93
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16E7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l3NmMdDLxd5Abgxz0GkEiDaSUJM.roa
Signing time:             Tue 31 Mar 2026 08:02:43 +0000
ROA not before:           Tue 31 Mar 2026 08:02:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5863 (0x16e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=97736631D0CBC5DE406E0C73D069048836925093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:cb:10:b9:6a:a6:7c:14:93:79:66:3f:92:39:
                    87:e3:b0:3f:ce:97:bb:61:c8:3e:48:92:70:c0:c6:
                    2e:40:6e:93:f5:64:f7:88:25:f3:e4:73:36:be:b0:
                    0d:ef:d1:8d:18:89:cf:3f:bf:ba:f6:54:01:70:48:
                    b6:40:0d:60:be:b7:4f:14:40:e6:e1:4e:1a:47:c1:
                    53:8a:7e:ac:42:c0:53:c5:16:93:f9:51:f9:c0:2d:
                    26:08:b0:b3:5b:95:75:06:08:16:99:be:14:87:19:
                    3b:fa:73:62:14:4d:92:c7:89:11:5a:1c:aa:9b:f9:
                    4c:f1:56:01:12:da:a5:fc:ca:72:94:87:ec:fa:8f:
                    68:37:dd:da:d6:15:cb:99:c7:a4:11:37:ec:01:79:
                    0b:bf:df:d1:7d:85:7f:75:71:9e:f8:59:22:74:ab:
                    60:ba:b1:a0:44:00:3f:cc:4f:ae:7f:53:aa:d4:48:
                    08:3d:b4:ab:49:e9:0e:b9:d4:27:bd:49:02:a2:3d:
                    1b:d8:3e:b6:a0:0e:24:3a:95:17:db:d1:4b:b7:52:
                    ed:fe:35:33:01:0f:c3:f7:3a:71:91:87:e8:6d:ee:
                    61:e9:05:32:87:e5:b5:60:19:e6:09:28:f4:16:e0:
                    3f:02:89:03:d1:8c:09:8f:29:2d:bd:04:8a:90:8b:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:73:66:31:D0:CB:C5:DE:40:6E:0C:73:D0:69:04:88:36:92:50:93
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l3NmMdDLxd5Abgxz0GkEiDaSUJM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:eb:e6:e0:9e:a6:f8:8a:ae:5c:55:73:6c:b5:35:b4:b1:04:
         b6:7a:24:93:55:a4:aa:7a:4c:b5:cc:c4:6c:fc:01:fa:17:e5:
         15:be:73:2d:19:88:e9:f3:74:96:2c:cd:89:fc:a7:36:af:a5:
         b4:0b:6a:17:88:9b:d2:b4:ec:96:52:e0:ef:a3:29:35:45:99:
         c3:8a:e7:a1:19:70:c2:41:fc:54:f5:a2:91:a0:aa:f3:ca:0a:
         76:c2:15:43:9d:54:e2:71:ee:a0:79:52:25:80:a1:78:89:8e:
         ff:76:7c:22:d6:3e:3b:e0:8b:30:e6:27:5b:af:22:1c:31:99:
         78:ce:67:b8:d3:89:e5:04:6e:85:92:d5:43:d3:b4:f9:44:b2:
         dc:f7:ea:6d:fa:1b:48:f2:4f:eb:b7:1e:84:ca:59:e3:31:9a:
         15:3b:16:85:4f:c7:bc:03:d4:f1:23:cb:e3:e4:f1:9e:54:b2:
         67:cd:1e:2f:9f:f0:2c:35:69:7d:66:f6:48:e2:07:e2:dd:39:
         2e:6f:d1:41:1f:de:21:30:1d:55:0f:87:6c:f1:0c:44:aa:ae:
         1c:60:07:2c:d2:65:01:39:16:df:d6:55:4d:07:e8:67:97:ce:
         59:fc:4d:03:0c:96:5a:1e:fb:86:78:5c:93:18:67:3d:cf:fa:
         bf:81:2d:ac
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFucwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAyNDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk3NzM2NjMxRDBDQkM1
REU0MDZFMEM3M0QwNjkwNDg4MzY5MjUwOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2yxC5aqZ8FJN5Zj+SOYfjsD/Ol7thyD5IknDAxi5AbpP1ZPeI
JfPkcza+sA3v0Y0Yic8/v7r2VAFwSLZADWC+t08UQObhThpHwVOKfqxCwFPFFpP5
UfnALSYIsLNblXUGCBaZvhSHGTv6c2IUTZLHiRFaHKqb+UzxVgES2qX8ynKUh+z6
j2g33drWFcuZx6QRN+wBeQu/39F9hX91cZ74WSJ0q2C6saBEAD/MT65/U6rUSAg9
tKtJ6Q651Ce9SQKiPRvYPragDiQ6lRfb0Uu3Uu3+NTMBD8P3OnGRh+ht7mHpBTKH
5bVgGeYJKPQW4D8CiQPRjAmPKS29BIqQiwG1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUl3NmMdDLxd5Abgxz0GkEiDaSUJMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2wzTm1NZERMeGQ1QWJneHowR2tFaURhU1VKTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADc0kUwDQYJKoZIhvcNAQELBQADggEB
AKfr5uCepviKrlxVc2y1NbSxBLZ6JJNVpKp6TLXMxGz8AfoX5RW+cy0ZiOnzdJYs
zYn8pzavpbQLaheIm9K07JZS4O+jKTVFmcOK56EZcMJB/FT1opGgqvPKCnbCFUOd
VOJx7qB5UiWAoXiJjv92fCLWPjvgizDmJ1uvIhwxmXjOZ7jTieUEboWS1UPTtPlE
stz36m36G0jyT+u3HoTKWeMxmhU7FoVPx7wD1PEjy+Pk8Z5UsmfNHi+f8Cw1aX1m
9kjiB+LdOS5v0UEf3iEwHVUPh2zxDESqrhxgByzSZQE5Ft/WVU0H6GeXzln8TQMM
lloe+4Z4XJMYZz3P+r+BLaw=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:17 2026 by rpki-client