Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vn316RRuXCa6FJMvt8oc82hkay8.roa
File:                     vn316RRuXCa6FJMvt8oc82hkay8.roa (raw, json)
Hash identifier:          2kNhTQymVmBMV1REQngCxmODENGyTJRAuElx5HngIBA=
Subject key identifier:   BE:7D:F5:E9:14:6E:5C:26:BA:14:93:2F:B7:CA:1C:F3:68:64:6B:2F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       172E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vn316RRuXCa6FJMvt8oc82hkay8.roa
Signing time:             Tue 31 Mar 2026 08:03:19 +0000
ROA not before:           Tue 31 Mar 2026 08:03:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5934 (0x172e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BE7DF5E9146E5C26BA14932FB7CA1CF368646B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:22:b5:b2:30:ee:ce:fa:8d:40:5e:7f:61:f0:
                    39:f7:e2:e3:fa:27:f7:06:3d:dd:38:2b:71:5d:88:
                    20:de:4c:7e:6e:1a:e7:0d:69:22:d2:35:64:0e:e3:
                    14:74:98:5d:6b:0d:83:06:e2:8a:1b:cd:9c:62:af:
                    63:0e:ee:ec:11:8b:5a:7b:9f:8f:80:d7:94:c0:90:
                    d1:57:d8:16:55:57:80:bb:95:9d:07:93:25:67:08:
                    c0:ca:43:50:35:43:c1:b7:fc:0e:b4:60:ee:d0:ba:
                    24:59:a9:c1:b2:b5:1b:dc:5b:60:f8:19:13:0c:2d:
                    78:0b:c6:ab:01:96:36:4a:97:3f:91:83:1e:18:38:
                    b6:19:28:1c:71:18:f8:f0:f2:8e:70:d9:13:ea:34:
                    1e:84:1d:a4:3b:47:5f:6a:7d:d9:0f:c3:0f:b9:9a:
                    33:77:ee:a8:61:c9:62:92:e0:0c:84:4a:b1:34:8b:
                    3c:99:fa:48:f9:e6:a8:c3:65:37:04:40:0b:fe:32:
                    45:1d:30:66:59:48:37:35:52:ed:46:7d:70:66:6c:
                    e5:8d:c6:e0:f4:2c:e0:da:cb:f6:1a:77:50:da:f3:
                    dc:eb:07:f2:5f:5f:46:c5:99:d5:fe:58:93:23:82:
                    a7:eb:04:21:c3:8a:77:ed:f0:8e:49:3c:8c:07:7e:
                    03:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7D:F5:E9:14:6E:5C:26:BA:14:93:2F:B7:CA:1C:F3:68:64:6B:2F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vn316RRuXCa6FJMvt8oc82hkay8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:c0:0c:b7:ec:d0:79:ce:d4:4e:d6:ba:41:26:46:c2:bb:c6:
         c4:f7:32:77:2e:74:45:13:8d:82:fa:69:c5:9c:bc:22:05:f5:
         3a:7a:38:ee:aa:ff:65:21:63:1f:32:c8:75:6d:4d:78:e7:6c:
         b3:51:53:1e:df:d7:54:6b:45:dc:84:1e:c1:48:0e:5f:14:ef:
         52:02:cb:1e:1e:25:c1:3c:3c:90:37:0f:fa:bb:1f:fe:b7:c7:
         d4:0f:f8:a1:df:f3:27:58:c6:27:11:75:a8:92:7a:81:bf:40:
         38:08:f9:3f:94:4b:34:d5:57:bd:8a:2c:68:b7:df:30:8d:d1:
         3b:12:b3:ab:0c:b8:d7:ad:ef:16:c4:cb:8b:85:fd:78:c1:cf:
         b0:b4:3e:4e:cc:97:74:75:25:08:6d:01:04:33:9f:cb:6f:2a:
         e6:5e:62:34:eb:23:06:8c:8c:fd:19:5d:c3:44:75:a4:f1:55:
         7b:70:1f:91:f4:f2:d3:27:eb:60:b2:d1:46:fe:69:7a:48:09:
         ca:89:25:8d:60:4f:38:0e:dd:e0:18:bb:0b:ae:38:2a:92:f8:
         94:3a:c2:04:f3:a2:14:10:5c:1a:4e:94:da:e9:69:8a:e6:ce:
         17:4e:a9:fe:cd:3b:02:54:b1:be:a6:24:b6:89:4d:e4:db:8b:
         51:04:6e:59
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFy4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAzMTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJFN0RGNUU5MTQ2RTVD
MjZCQTE0OTMyRkI3Q0ExQ0YzNjg2NDZCMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWIrWyMO7O+o1AXn9h8Dn34uP6J/cGPd04K3FdiCDeTH5uGucN
aSLSNWQO4xR0mF1rDYMG4oobzZxir2MO7uwRi1p7n4+A15TAkNFX2BZVV4C7lZ0H
kyVnCMDKQ1A1Q8G3/A60YO7QuiRZqcGytRvcW2D4GRMMLXgLxqsBljZKlz+Rgx4Y
OLYZKBxxGPjw8o5w2RPqNB6EHaQ7R19qfdkPww+5mjN37qhhyWKS4AyESrE0izyZ
+kj55qjDZTcEQAv+MkUdMGZZSDc1Uu1GfXBmbOWNxuD0LODay/Yad1Da89zrB/Jf
X0bFmdX+WJMjgqfrBCHDinft8I5JPIwHfgOnAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUvn316RRuXCa6FJMvt8oc82hkay8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3ZuMzE2UlJ1WENhNkZKTXZ0OG9jODJoa2F5OC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFuocIwDQYJKoZIhvcNAQELBQADggEB
AELADLfs0HnO1E7WukEmRsK7xsT3MncudEUTjYL6acWcvCIF9Tp6OO6q/2UhYx8y
yHVtTXjnbLNRUx7f11RrRdyEHsFIDl8U71ICyx4eJcE8PJA3D/q7H/63x9QP+KHf
8ydYxicRdaiSeoG/QDgI+T+USzTVV72KLGi33zCN0TsSs6sMuNet7xbEy4uF/XjB
z7C0Pk7Ml3R1JQhtAQQzn8tvKuZeYjTrIwaMjP0ZXcNEdaTxVXtwH5H08tMn62Cy
0Ub+aXpICcqJJY1gTzgO3eAYuwuuOCqS+JQ6wgTzohQQXBpOlNrpaYrmzhdOqf7N
OwJUsb6mJLaJTeTbi1EEblk=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:00 2026 by rpki-client