Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/naMJ4quzqYBjGAIHYqjHPV13his.roa
File:                     naMJ4quzqYBjGAIHYqjHPV13his.roa (raw, json)
Hash identifier:          FP5/+KO0esEz8Y6k+HLg9OLV12FReEy7PO7FlEcIjeY=
Subject key identifier:   9D:A3:09:E2:AB:B3:A9:80:63:18:02:07:62:A8:C7:3D:5D:77:86:2B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1574
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/naMJ4quzqYBjGAIHYqjHPV13his.roa
Signing time:             Tue 31 Mar 2026 07:59:40 +0000
ROA not before:           Tue 31 Mar 2026 07:59:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5492 (0x1574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9DA309E2ABB3A9806318020762A8C73D5D77862B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:40:69:af:c5:51:7b:ea:0e:33:44:f2:fe:47:
                    bc:27:8c:4a:39:7b:ba:71:c7:a5:6a:34:3c:93:5c:
                    c1:39:1c:84:06:10:6c:34:31:b4:bb:7d:6a:d3:28:
                    d0:3c:30:ea:68:ab:e7:37:bc:cd:65:92:a1:ff:fa:
                    23:be:45:eb:42:0b:cd:62:78:3c:34:33:8a:d4:f2:
                    c3:12:6f:d0:80:50:da:c6:05:38:21:f3:41:e3:2b:
                    fe:8f:ee:a4:70:4e:27:5a:42:38:82:4a:fa:a3:5c:
                    37:2e:27:70:9e:a8:1d:4a:8f:74:fd:73:e8:58:f1:
                    7a:ee:e7:00:d4:2e:f4:0b:03:00:26:f1:c0:1b:ed:
                    68:f6:48:a1:0c:c1:a1:ff:67:46:a0:38:49:a3:53:
                    8c:b1:c7:d6:ab:62:42:ff:73:2b:81:e7:b3:ca:2b:
                    bc:a5:aa:65:36:9b:65:a2:96:3d:8f:d2:fe:4a:a6:
                    be:65:d0:a9:5d:44:95:39:c3:fc:1b:5f:e9:56:81:
                    45:70:3a:04:01:30:e0:94:c1:81:f6:e4:24:71:9e:
                    63:88:9d:80:4e:1b:e2:57:f4:91:61:64:d4:44:04:
                    e4:32:08:ce:cd:92:3d:fb:67:cc:ad:17:77:b5:81:
                    cf:07:e1:53:43:a4:13:39:b5:76:b8:cb:53:14:85:
                    84:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A3:09:E2:AB:B3:A9:80:63:18:02:07:62:A8:C7:3D:5D:77:86:2B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/naMJ4quzqYBjGAIHYqjHPV13his.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:da:cd:02:16:41:69:c7:57:8a:ec:0f:fa:bd:de:04:45:
         71:03:67:9a:14:80:0f:1b:12:e8:fa:40:bf:0e:06:b9:6d:5a:
         ab:42:af:52:12:01:93:65:66:2d:65:e1:18:b5:3c:7c:1f:c4:
         d5:d3:e6:ff:17:1a:d4:9b:90:68:3d:e0:db:30:4f:a9:24:43:
         04:9d:73:46:f8:e4:df:74:50:74:fd:85:bf:9f:8c:f3:3b:d8:
         b9:ca:80:63:d9:64:44:3d:da:94:3d:5c:49:4a:24:80:5b:09:
         15:9b:03:2e:aa:7f:14:cd:bc:6c:6a:a9:fd:8d:9f:29:3a:9d:
         74:6b:ae:d8:54:64:c9:6e:fd:77:28:18:ee:b3:cb:50:8e:12:
         66:30:24:b0:cb:ec:e0:55:73:ed:94:c5:15:cb:81:28:90:3d:
         95:74:fc:79:5c:22:a2:94:86:f9:a4:4a:8e:d5:b8:a9:48:8c:
         57:9a:72:fa:48:a0:2d:de:58:d7:b8:86:61:83:c0:70:f3:42:
         12:35:19:42:5e:d8:0c:7b:0b:1e:d7:c7:c7:1c:ab:43:6d:4e:
         ba:cd:d6:77:5a:01:81:5e:fc:c9:52:e7:d8:7d:d0:76:50:54:
         3a:d0:db:d5:3a:9c:7e:9c:a4:a4:e6:f9:40:80:2f:d4:69:35:
         cc:8b:e6:8f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU5NDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlEQTMwOUUyQUJCM0E5
ODA2MzE4MDIwNzYyQThDNzNENUQ3Nzg2MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCaQGmvxVF76g4zRPL+R7wnjEo5e7pxx6VqNDyTXME5HIQGEGw0
MbS7fWrTKNA8MOpoq+c3vM1lkqH/+iO+RetCC81ieDw0M4rU8sMSb9CAUNrGBTgh
80HjK/6P7qRwTidaQjiCSvqjXDcuJ3CeqB1Kj3T9c+hY8Xru5wDULvQLAwAm8cAb
7Wj2SKEMwaH/Z0agOEmjU4yxx9arYkL/cyuB57PKK7ylqmU2m2Wilj2P0v5Kpr5l
0KldRJU5w/wbX+lWgUVwOgQBMOCUwYH25CRxnmOInYBOG+JX9JFhZNREBOQyCM7N
kj37Z8ytF3e1gc8H4VNDpBM5tXa4y1MUhYRxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUnaMJ4quzqYBjGAIHYqjHPV13hiswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L25hTUo0cXV6cVlCakdBSUhZcWpIUFYxM2hpcy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIb5mQwDQYJKoZIhvcNAQELBQADggEB
AAMc2s0CFkFpx1eK7A/6vd4ERXEDZ5oUgA8bEuj6QL8OBrltWqtCr1ISAZNlZi1l
4Ri1PHwfxNXT5v8XGtSbkGg94NswT6kkQwSdc0b45N90UHT9hb+fjPM72LnKgGPZ
ZEQ92pQ9XElKJIBbCRWbAy6qfxTNvGxqqf2Nnyk6nXRrrthUZMlu/XcoGO6zy1CO
EmYwJLDL7OBVc+2UxRXLgSiQPZV0/HlcIqKUhvmkSo7VuKlIjFeacvpIoC3eWNe4
hmGDwHDzQhI1GUJe2Ax7Cx7Xx8ccq0NtTrrN1ndaAYFe/MlS59h90HZQVDrQ29U6
nH6cpKTm+UCAL9RpNcyL5o8=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:35 2026 by rpki-client