Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y9n8f2pZRYKcVn4q2OnSXTQEhug.roa
File:                     y9n8f2pZRYKcVn4q2OnSXTQEhug.roa (raw, json)
Hash identifier:          qLLfEIi/fCMnBZ4jzgdTz21BWydMwNifXYwE4h+ygBY=
Subject key identifier:   CB:D9:FC:7F:6A:59:45:82:9C:56:7E:2A:D8:E9:D2:5D:34:04:86:E8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       144F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y9n8f2pZRYKcVn4q2OnSXTQEhug.roa
Signing time:             Tue 31 Mar 2026 07:57:19 +0000
ROA not before:           Tue 31 Mar 2026 07:57:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5199 (0x144f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CBD9FC7F6A5945829C567E2AD8E9D25D340486E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:43:ae:ef:85:8a:d3:73:32:df:14:e5:83:
                    1f:26:3b:27:a7:cc:bb:8f:22:53:9d:a0:ec:b3:5d:
                    fc:82:22:93:27:75:4b:e7:35:01:7a:20:f9:ca:ab:
                    e6:90:1f:cf:7a:9c:6d:87:04:89:fe:a0:47:46:7a:
                    83:7e:e4:e8:49:31:b3:d1:5f:6e:7d:22:d9:b7:f4:
                    94:ef:dc:46:0c:08:5d:01:8f:91:e6:98:5c:1b:01:
                    33:f0:3c:f5:bc:4b:44:36:23:c5:5e:ef:47:73:d5:
                    d4:7c:e9:d5:1a:d8:63:b0:96:3b:81:90:e0:3d:8f:
                    66:ff:a5:a7:69:66:38:e9:e6:14:14:e7:e9:78:da:
                    c3:2c:1e:c1:15:ee:3d:77:4c:6e:24:59:77:8a:aa:
                    66:0d:b1:cb:df:5e:7f:05:32:59:de:75:b4:66:08:
                    90:3a:05:b4:ee:a7:7d:06:10:08:41:a6:da:29:4f:
                    0d:91:e3:2d:8e:87:77:71:59:d5:d0:99:14:12:46:
                    8e:71:d6:bf:0a:8a:5f:80:e3:18:9e:94:ef:99:c0:
                    40:6a:f7:06:09:18:d2:5e:95:d9:92:d0:03:dd:da:
                    7c:77:5e:36:9f:54:80:af:d9:84:dc:8c:18:e3:00:
                    ac:03:b9:80:a8:fb:40:11:a8:2d:13:4d:ab:11:b9:
                    88:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D9:FC:7F:6A:59:45:82:9C:56:7E:2A:D8:E9:D2:5D:34:04:86:E8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y9n8f2pZRYKcVn4q2OnSXTQEhug.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:b9:d8:6e:11:1d:55:d5:d4:15:f3:c3:f7:42:57:5d:61:14:
         48:e9:e7:6a:f9:09:b3:d6:22:c7:47:2b:dd:9c:ac:82:04:79:
         f9:6d:66:af:ad:f3:85:dc:08:a3:90:e9:b6:23:8e:cd:46:c4:
         20:d9:ca:2b:13:7d:21:82:34:f6:cc:d8:e6:45:d2:c1:af:70:
         00:15:d3:30:6e:63:73:1e:1f:d3:d4:d7:6f:62:45:e7:2c:f9:
         d6:be:7c:5f:a5:3e:d6:f8:1b:19:d7:42:25:9c:eb:d3:42:de:
         3f:8a:b7:7d:80:3c:59:94:44:1e:cf:39:6e:a8:ad:b2:96:5f:
         f4:42:49:86:33:18:06:57:99:35:c9:62:98:d4:8f:83:af:8e:
         a2:28:40:a3:bb:67:2a:1d:ce:1d:82:62:71:0f:ad:fe:69:66:
         e4:67:5f:e1:2c:c4:03:71:e5:72:71:fa:9d:2e:45:e7:63:20:
         fc:8d:c7:e3:82:a7:07:63:1d:80:40:7a:15:94:ae:ef:c2:9a:
         1a:60:ae:00:23:37:c1:a0:2a:88:28:0f:52:aa:ee:56:51:2a:
         4d:58:8f:95:f1:d3:b1:01:2a:51:05:c3:a1:a3:5f:22:15:d2:
         d6:5e:1d:6b:76:94:fe:16:bc:f8:ce:a4:cb:57:7a:c1:57:86:
         b7:b9:aa:0c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFE8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU3MTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENCRDlGQzdGNkE1OTQ1
ODI5QzU2N0UyQUQ4RTlEMjVEMzQwNDg2RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1xEOu74WK03My3xTlgx8mOyenzLuPIlOdoOyzXfyCIpMndUvn
NQF6IPnKq+aQH896nG2HBIn+oEdGeoN+5OhJMbPRX259Itm39JTv3EYMCF0Bj5Hm
mFwbATPwPPW8S0Q2I8Ve70dz1dR86dUa2GOwljuBkOA9j2b/padpZjjp5hQU5+l4
2sMsHsEV7j13TG4kWXeKqmYNscvfXn8FMlnedbRmCJA6BbTup30GEAhBptopTw2R
4y2Oh3dxWdXQmRQSRo5x1r8Kil+A4xielO+ZwEBq9wYJGNJeldmS0APd2nx3Xjaf
VICv2YTcjBjjAKwDuYCo+0ARqC0TTasRuYhhAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUy9n8f2pZRYKcVn4q2OnSXTQEhugwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3k5bjhmMnBaUllLY1ZuNHEyT25TWFRRRWh1Zy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABTwowDQYJKoZIhvcNAQELBQADggEB
AM252G4RHVXV1BXzw/dCV11hFEjp52r5CbPWIsdHK92crIIEefltZq+t84XcCKOQ
6bYjjs1GxCDZyisTfSGCNPbM2OZF0sGvcAAV0zBuY3MeH9PU129iRecs+da+fF+l
Ptb4GxnXQiWc69NC3j+Kt32APFmURB7POW6orbKWX/RCSYYzGAZXmTXJYpjUj4Ov
jqIoQKO7Zyodzh2CYnEPrf5pZuRnX+EsxANx5XJx+p0uRedjIPyNx+OCpwdjHYBA
ehWUru/CmhpgrgAjN8GgKogoD1Kq7lZRKk1Yj5Xx07EBKlEFw6GjXyIV0tZeHWt2
lP4WvPjOpMtXesFXhre5qgw=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:49 2026 by rpki-client