Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qTkk913eGx7gcpsS_sO3gdjj3Vg.roa
File:                     qTkk913eGx7gcpsS_sO3gdjj3Vg.roa (raw, json)
Hash identifier:          fGnMQU6KzMPFb1Y2GoqO2HLjln9yOdMCUUVmDdVhQ44=
Subject key identifier:   A9:39:24:F7:5D:DE:1B:1E:E0:72:9B:12:FE:C3:B7:81:D8:E3:DD:58
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16F9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qTkk913eGx7gcpsS_sO3gdjj3Vg.roa
Signing time:             Tue 31 Mar 2026 08:02:52 +0000
ROA not before:           Tue 31 Mar 2026 08:02:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5881 (0x16f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A93924F75DDE1B1EE0729B12FEC3B781D8E3DD58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d5:b1:95:07:8b:94:80:00:86:4f:68:94:f8:
                    63:2a:01:92:c9:19:67:cd:58:5e:1b:75:14:93:03:
                    a4:66:c6:64:d5:56:9a:bd:8f:3b:5a:e3:a1:c1:da:
                    08:b4:80:39:39:0c:ce:9d:57:0d:4e:68:56:2e:b0:
                    8b:2b:ee:26:c9:d7:60:07:ae:a0:85:29:1d:31:e4:
                    40:d8:cf:9c:1e:f3:cb:f3:cf:87:41:5f:28:06:96:
                    02:35:44:f4:54:3c:e2:a3:b5:bf:57:38:22:f9:98:
                    14:0f:56:6d:8f:e9:92:af:4e:55:c5:1d:c1:b4:e6:
                    39:30:ee:87:50:0e:4f:07:05:8c:f2:28:8a:d0:2e:
                    cc:84:53:ca:e4:f9:da:ad:3c:4f:37:d9:79:20:c9:
                    28:aa:39:1f:92:5a:40:fe:7f:6e:c4:c4:ca:d3:88:
                    c0:f0:67:30:aa:92:35:95:93:b7:69:77:db:8d:3c:
                    86:8c:4b:eb:2e:b7:08:73:83:bb:a7:0e:36:ad:34:
                    07:77:1a:9a:f0:80:ae:fb:81:20:f8:19:00:95:75:
                    e1:65:4d:fd:fe:d5:ee:00:2e:fa:8e:9f:52:01:74:
                    fb:a0:b7:bd:33:02:3f:9d:4e:5e:94:c7:3f:53:f3:
                    ae:6f:14:3d:2c:39:0a:0c:e6:a9:67:69:2e:07:9e:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:39:24:F7:5D:DE:1B:1E:E0:72:9B:12:FE:C3:B7:81:D8:E3:DD:58
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qTkk913eGx7gcpsS_sO3gdjj3Vg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:98:fa:f9:45:80:c9:83:c6:5e:6f:f0:c2:5b:fc:05:9c:81:
         20:7e:e8:91:0a:e2:d3:a6:ad:db:16:77:42:36:6d:e1:63:8c:
         12:8f:24:c7:4a:88:fb:ce:6f:64:06:9a:e6:60:1b:db:20:a7:
         16:00:7a:ef:a5:2e:97:0d:fa:a4:ca:97:8a:5e:8c:a9:1d:e9:
         ed:9d:ad:78:59:7e:29:91:19:24:5f:bb:3d:8b:58:5a:e4:aa:
         b5:30:14:a5:a0:57:5b:a4:d8:08:ac:0a:c2:32:cc:6c:c6:46:
         50:54:a7:5c:59:62:47:6a:2a:39:26:4b:39:2d:77:78:60:f1:
         34:34:ad:b1:25:47:09:62:c8:9d:24:c2:00:c9:99:b8:a3:2f:
         ea:cf:5a:ae:b9:eb:9d:30:6f:84:08:42:ae:2d:45:65:62:85:
         85:7b:a7:33:e1:ae:b8:a5:7b:2f:16:87:32:af:1b:9e:a2:aa:
         3f:b6:98:b1:fb:4a:a6:c6:51:71:d2:8c:ae:53:be:ce:c5:b7:
         ab:46:29:3d:fc:c3:7c:5d:9b:a6:12:62:29:13:7d:5a:e5:c3:
         5a:2a:a2:b8:de:71:00:64:ae:f1:70:2c:c3:30:bb:b8:0e:ca:
         84:69:6f:7e:3b:d2:54:cf:a8:3f:a6:5e:56:4a:14:94:1e:e9:
         d7:11:9f:80
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAyNTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE5MzkyNEY3NURERTFC
MUVFMDcyOUIxMkZFQzNCNzgxRDhFM0RENTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDN1bGVB4uUgACGT2iU+GMqAZLJGWfNWF4bdRSTA6RmxmTVVpq9
jzta46HB2gi0gDk5DM6dVw1OaFYusIsr7ibJ12AHrqCFKR0x5EDYz5we88vzz4dB
XygGlgI1RPRUPOKjtb9XOCL5mBQPVm2P6ZKvTlXFHcG05jkw7odQDk8HBYzyKIrQ
LsyEU8rk+dqtPE832XkgySiqOR+SWkD+f27ExMrTiMDwZzCqkjWVk7dpd9uNPIaM
S+sutwhzg7unDjatNAd3GprwgK77gSD4GQCVdeFlTf3+1e4ALvqOn1IBdPugt70z
Aj+dTl6Uxz9T865vFD0sOQoM5qlnaS4HnsTlAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUqTkk913eGx7gcpsS/sO3gdjj3VgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3FUa2s5MTNlR3g3Z2Nwc1Nfc08zZ2RqajNWZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTDk8wDQYJKoZIhvcNAQELBQADggEB
AHOY+vlFgMmDxl5v8MJb/AWcgSB+6JEK4tOmrdsWd0I2beFjjBKPJMdKiPvOb2QG
muZgG9sgpxYAeu+lLpcN+qTKl4pejKkd6e2drXhZfimRGSRfuz2LWFrkqrUwFKWg
V1uk2AisCsIyzGzGRlBUp1xZYkdqKjkmSzktd3hg8TQ0rbElRwliyJ0kwgDJmbij
L+rPWq65650wb4QIQq4tRWVihYV7pzPhrriley8WhzKvG56iqj+2mLH7SqbGUXHS
jK5Tvs7Ft6tGKT38w3xdm6YSYikTfVrlw1oqorjecQBkrvFwLMMwu7gOyoRpb347
0lTPqD+mXlZKFJQe6dcRn4A=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:36 2026 by rpki-client