Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rXPBGfNcph0eDXn8NPDHQ94n67k.roa
File:                     rXPBGfNcph0eDXn8NPDHQ94n67k.roa (raw, json)
Hash identifier:          msQnbP1zNasm8Lowjc+ImC/o/4x5epp8HAOGNzz09J8=
Subject key identifier:   AD:73:C1:19:F3:5C:A6:1D:1E:0D:79:FC:34:F0:C7:43:DE:27:EB:B9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1782
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rXPBGfNcph0eDXn8NPDHQ94n67k.roa
Signing time:             Tue 31 Mar 2026 08:03:58 +0000
ROA not before:           Tue 31 Mar 2026 08:03:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6018 (0x1782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AD73C119F35CA61D1E0D79FC34F0C743DE27EBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:81:32:69:93:cc:de:59:c1:a9:47:eb:5d:
                    ad:39:62:61:ff:b4:2f:1b:28:08:7a:f6:2d:d3:66:
                    b1:01:c4:8b:40:7b:fb:c2:26:29:10:1a:62:79:61:
                    77:e0:91:72:15:3c:3e:28:73:0c:ff:1a:83:21:dc:
                    97:10:79:59:67:2d:ca:c8:ef:e1:6b:12:b9:15:cd:
                    4c:ca:66:ed:ec:83:60:1b:a1:c0:76:fa:4a:7c:e1:
                    a3:b4:d4:02:09:86:d8:bf:db:5a:15:ee:aa:99:ca:
                    1f:1c:a6:81:cb:3f:22:a6:00:a9:11:fc:8d:0b:fc:
                    c3:98:89:54:ec:b1:d7:20:4a:49:b7:06:bb:32:04:
                    79:9b:47:61:c2:a0:a2:ac:42:ff:bf:47:25:97:ae:
                    20:9b:14:76:2a:51:95:a0:4b:b4:91:9d:43:d8:be:
                    6a:51:69:41:84:10:14:ce:f2:2b:6b:4e:d8:63:c5:
                    3c:c4:10:31:8e:03:1e:48:f6:be:f8:43:3a:ba:d4:
                    8e:f5:df:e3:45:c6:c8:68:9b:77:5f:21:20:ec:19:
                    51:96:de:57:db:eb:51:36:73:c9:d2:7e:ad:13:3f:
                    85:48:53:85:5a:7d:d9:b0:94:6b:e1:1b:14:44:63:
                    20:9e:06:cf:14:c5:69:52:18:f5:50:3f:98:1f:ff:
                    08:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:73:C1:19:F3:5C:A6:1D:1E:0D:79:FC:34:F0:C7:43:DE:27:EB:B9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rXPBGfNcph0eDXn8NPDHQ94n67k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:a7:62:dd:d7:ad:ad:19:a3:a2:13:43:55:c4:88:ad:40:bd:
         09:02:cd:51:d9:01:8a:89:00:e7:f4:b4:0a:2c:ae:b6:80:9f:
         cd:c5:74:3a:58:62:4d:9b:b4:4c:68:33:e7:a8:d1:b8:12:f6:
         82:03:2e:cd:df:0b:86:16:a4:a0:4e:8a:27:8d:1a:a0:09:e1:
         e2:6c:6b:68:12:dc:d9:a2:60:08:6f:55:b9:65:f3:3b:0d:24:
         47:ad:3e:c9:17:45:c2:29:f8:32:a1:11:69:0c:28:36:81:d6:
         b0:20:b6:e4:12:7b:98:d4:4d:58:77:41:ce:72:63:b7:4a:51:
         fa:03:e4:9f:7f:1d:6c:ac:cd:d7:8f:38:13:a2:27:70:8a:fb:
         8a:2c:03:86:bb:f5:07:1c:98:30:34:23:c4:09:ba:20:0d:78:
         cd:ab:ca:61:00:3c:10:d6:39:93:e7:da:d1:ac:d4:9f:23:35:
         d2:dd:23:2e:11:9b:32:24:fb:21:aa:ca:df:d0:65:ce:b8:7e:
         22:6f:42:bf:bb:93:68:2b:73:04:51:1b:7c:48:b6:a3:b8:f6:
         4f:6b:8f:03:62:79:08:0a:3e:29:29:2b:20:03:e3:a8:38:04:
         12:e7:40:a8:b7:7a:7f:15:29:7c:a2:2c:84:c2:ea:25:0a:ab:
         3a:26:66:9a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAzNThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFENzNDMTE5RjM1Q0E2
MUQxRTBENzlGQzM0RjBDNzQzREUyN0VCQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7D4EyaZPM3lnBqUfrXa05YmH/tC8bKAh69i3TZrEBxItAe/vC
JikQGmJ5YXfgkXIVPD4ocwz/GoMh3JcQeVlnLcrI7+FrErkVzUzKZu3sg2AbocB2
+kp84aO01AIJhti/21oV7qqZyh8cpoHLPyKmAKkR/I0L/MOYiVTssdcgSkm3Brsy
BHmbR2HCoKKsQv+/RyWXriCbFHYqUZWgS7SRnUPYvmpRaUGEEBTO8itrTthjxTzE
EDGOAx5I9r74Qzq61I713+NFxshom3dfISDsGVGW3lfb61E2c8nSfq0TP4VIU4Va
fdmwlGvhGxREYyCeBs8UxWlSGPVQP5gf/wj3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUrXPBGfNcph0eDXn8NPDHQ94n67kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3JYUEJHZk5jcGgwZURYbjhOUERIUTk0bjY3ay5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQb5pAwDQYJKoZIhvcNAQELBQADggEB
AFWnYt3Xra0Zo6ITQ1XEiK1AvQkCzVHZAYqJAOf0tAosrraAn83FdDpYYk2btExo
M+eo0bgS9oIDLs3fC4YWpKBOiieNGqAJ4eJsa2gS3NmiYAhvVbll8zsNJEetPskX
RcIp+DKhEWkMKDaB1rAgtuQSe5jUTVh3Qc5yY7dKUfoD5J9/HWyszdePOBOiJ3CK
+4osA4a79QccmDA0I8QJuiANeM2rymEAPBDWOZPn2tGs1J8jNdLdIy4RmzIk+yGq
yt/QZc64fiJvQr+7k2grcwRRG3xItqO49k9rjwNieQgKPikpKyAD46g4BBLnQKi3
en8VKXyiLITC6iUKqzomZpo=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:38 2026 by rpki-client