Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/x1JoFak-Sk39b-CpI6ukXQgkM3E.roa
File:                     x1JoFak-Sk39b-CpI6ukXQgkM3E.roa (raw, json)
Hash identifier:          hSSi+/V3k/ndOYyeOVN/u239SE1KpbAlaAcODFbufyg=
Subject key identifier:   C7:52:68:15:A9:3E:4A:4D:FD:6F:E0:A9:23:AB:A4:5D:08:24:33:71
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16DF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/x1JoFak-Sk39b-CpI6ukXQgkM3E.roa
Signing time:             Tue 31 Mar 2026 08:02:39 +0000
ROA not before:           Tue 31 Mar 2026 08:02:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.73.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5855 (0x16df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C7526815A93E4A4DFD6FE0A923ABA45D08243371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a2:a6:69:b9:dd:45:91:33:59:f7:36:d8:dc:
                    48:2f:57:99:ba:90:cf:5b:d6:a8:f2:a4:d1:2f:b9:
                    61:6b:6b:0a:1e:c7:cf:00:77:8c:2f:60:ea:1b:74:
                    c5:85:65:2b:8b:79:21:e2:32:cb:3e:a2:29:93:c0:
                    6d:8d:c3:27:87:0b:02:98:12:36:c5:3d:f6:24:e8:
                    c5:a9:3f:0a:81:c3:bd:93:3a:6d:28:fd:7a:33:da:
                    0f:30:ac:c7:0a:5e:7b:d5:c7:65:1b:b1:d2:f0:f6:
                    26:b7:c9:a8:15:4d:55:c7:f9:36:fc:63:fd:ef:df:
                    38:90:01:aa:81:f0:54:4b:b0:64:10:57:09:44:60:
                    cc:c9:7d:88:ab:ea:43:78:9c:a3:fc:45:75:90:12:
                    5b:7c:83:c5:b0:e6:7e:ac:86:51:07:af:10:ec:74:
                    87:c3:df:9d:09:af:75:66:ad:4f:92:68:37:f1:53:
                    35:05:24:54:74:79:9c:be:d7:12:6c:e5:9e:cf:fa:
                    83:93:08:ea:fe:9a:88:a7:5a:03:18:30:db:c8:dc:
                    61:b2:66:73:4a:e1:a9:a8:9b:62:53:09:53:b1:f3:
                    b6:5d:53:51:9c:d1:f6:97:e7:04:2b:f3:62:ae:71:
                    73:87:d2:90:59:68:09:0b:0d:62:fb:ea:cd:f4:c5:
                    8b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:52:68:15:A9:3E:4A:4D:FD:6F:E0:A9:23:AB:A4:5D:08:24:33:71
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/x1JoFak-Sk39b-CpI6ukXQgkM3E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:a1:ab:a2:51:68:5e:55:96:78:7a:dc:1d:34:6f:aa:a6:38:
         45:4c:42:ec:ef:0c:84:28:c8:b5:37:e3:32:46:e8:3a:3a:5e:
         61:b6:87:09:7e:56:d4:1b:a9:66:91:8c:a4:49:be:af:17:4a:
         ec:f7:68:50:62:42:af:fa:1a:61:92:ad:88:0d:3d:ac:90:d8:
         54:b4:b7:94:84:9c:4d:16:8b:5d:c4:83:96:ab:69:9a:ff:52:
         ee:69:90:0a:83:e3:5f:2e:e4:68:81:87:c7:f3:ad:12:1f:bf:
         bf:48:cb:44:da:7f:c6:bc:23:da:a4:f8:69:43:8f:cb:b8:c7:
         79:1d:70:a4:29:80:bd:8e:1c:f1:62:87:9d:b3:83:5d:cc:73:
         66:22:89:b1:22:58:bd:08:aa:83:fe:8e:5d:7e:af:71:5a:a9:
         3a:25:14:35:3f:6f:a3:e8:43:1d:ab:0c:0e:e2:9c:ad:73:8d:
         fe:17:b7:ab:a4:32:43:1d:50:aa:3c:ba:55:60:21:28:0e:a1:
         bd:89:a8:29:a9:4d:ce:ba:29:1b:b9:0f:4b:4e:12:a2:08:1e:
         e2:0e:26:e4:f1:55:c7:56:8d:5a:f5:ee:b9:6d:a0:86:2e:3f:
         eb:e6:08:28:04:a7:bf:a9:53:63:d6:c0:63:83:bb:6e:96:36:
         09:15:93:55
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFt8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAyMzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM3NTI2ODE1QTkzRTRB
NERGRDZGRTBBOTIzQUJBNDVEMDgyNDMzNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhoqZpud1FkTNZ9zbY3EgvV5m6kM9b1qjypNEvuWFrawoex88A
d4wvYOobdMWFZSuLeSHiMss+oimTwG2NwyeHCwKYEjbFPfYk6MWpPwqBw72TOm0o
/Xoz2g8wrMcKXnvVx2UbsdLw9ia3yagVTVXH+Tb8Y/3v3ziQAaqB8FRLsGQQVwlE
YMzJfYir6kN4nKP8RXWQElt8g8Ww5n6shlEHrxDsdIfD350Jr3VmrU+SaDfxUzUF
JFR0eZy+1xJs5Z7P+oOTCOr+moinWgMYMNvI3GGyZnNK4amom2JTCVOx87ZdU1Gc
0faX5wQr82KucXOH0pBZaAkLDWL76s30xYuHAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUx1JoFak+Sk39b+CpI6ukXQgkM3EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3gxSm9GYWstU2szOWItQ3BJNnVrWFFna00zRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC3SR0wDQYJKoZIhvcNAQELBQADggEB
AOehq6JRaF5Vlnh63B00b6qmOEVMQuzvDIQoyLU34zJG6Do6XmG2hwl+VtQbqWaR
jKRJvq8XSuz3aFBiQq/6GmGSrYgNPayQ2FS0t5SEnE0Wi13Eg5araZr/Uu5pkAqD
418u5GiBh8fzrRIfv79Iy0Taf8a8I9qk+GlDj8u4x3kdcKQpgL2OHPFih52zg13M
c2YiibEiWL0IqoP+jl1+r3FaqTolFDU/b6PoQx2rDA7inK1zjf4Xt6ukMkMdUKo8
ulVgISgOob2JqCmpTc66KRu5D0tOEqIIHuIOJuTxVcdWjVr17rltoIYuP+vmCCgE
p7+pU2PWwGODu26WNgkVk1U=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:10 2026 by rpki-client