Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/t309vzgAJle3TR2TiI2U9BPkaaw.roa
File:                     t309vzgAJle3TR2TiI2U9BPkaaw.roa (raw, json)
Hash identifier:          ZWrR1eYqGLkWOfOPZxNnviZKSfacFOv6AuFUiMRghGQ=
Subject key identifier:   B7:7D:3D:BF:38:00:26:57:B7:4D:1D:93:88:8D:94:F4:13:E4:69:AC
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       73
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/t309vzgAJle3TR2TiI2U9BPkaaw.roa
Signing time:             Tue 31 Mar 2026 07:33:19 +0000
ROA not before:           Tue 31 Mar 2026 07:33:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2515
IP address blocks:        202.1.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Mar 31 07:33:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B77D3DBF38002657B74D1D93888D94F413E469AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:41:9f:73:bd:15:be:68:06:b0:ab:90:8c:
                    05:97:c9:d2:85:94:c1:67:41:59:cc:b7:d7:7a:92:
                    18:18:ec:e1:69:d1:65:c8:f1:6e:7d:65:37:d9:d6:
                    19:57:35:8a:f1:71:a8:01:af:0c:b4:10:0e:e0:f5:
                    b2:03:4d:6f:aa:08:64:43:22:62:00:30:3f:31:d7:
                    6b:e5:bc:13:17:ca:61:89:e7:ab:37:32:77:9c:6c:
                    3b:43:70:5b:20:fd:97:a7:da:04:b3:5f:25:4e:3f:
                    81:6e:75:cd:80:4d:a7:0b:7a:d7:b7:34:a0:c9:d9:
                    08:65:3a:fa:c4:07:a3:03:c1:79:67:6a:a4:47:aa:
                    c2:65:ec:82:76:83:1a:9d:fe:26:b9:63:a3:cb:79:
                    aa:d3:70:63:7c:d7:3c:db:51:11:35:40:b6:3d:6f:
                    fd:f1:10:e2:6a:50:d3:c3:6e:ae:22:e4:33:1c:e4:
                    9d:52:37:c6:7d:c2:6c:51:f9:67:f2:67:de:8d:6a:
                    23:e9:56:50:6a:e2:f0:a2:dd:5d:d0:88:5d:68:5e:
                    c9:17:45:e2:bd:db:3c:d0:ca:8b:6a:31:62:55:66:
                    d4:09:82:e3:6b:0d:9b:82:40:b1:ec:97:67:b8:e1:
                    f0:5c:91:d6:27:ee:8e:a5:80:be:bf:53:e7:16:6f:
                    0a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7D:3D:BF:38:00:26:57:B7:4D:1D:93:88:8D:94:F4:13:E4:69:AC
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/t309vzgAJle3TR2TiI2U9BPkaaw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:05:f5:42:d0:45:9d:7e:df:ca:72:c9:0c:b6:d1:7c:8a:b7:
         ff:e0:2a:71:54:34:63:ea:4b:e6:eb:cd:8c:1f:14:df:1c:71:
         ed:80:36:c9:7c:e2:7e:3d:4d:6d:9e:65:78:94:37:95:33:07:
         2d:4b:99:17:10:fe:85:81:08:6a:17:c0:50:cc:30:a3:b2:82:
         d1:fc:4d:ec:44:1c:8b:09:d1:05:89:fa:a6:6c:78:37:ee:7b:
         f3:75:e3:aa:64:2b:90:43:ae:f0:eb:46:22:a6:36:3a:23:e8:
         0c:74:9b:2e:8d:8e:d3:27:91:d4:77:7f:35:c2:ee:9f:ff:be:
         d9:f1:9f:5b:28:c3:9e:f9:42:e7:e5:88:bb:5b:37:58:25:71:
         6a:18:22:42:f3:ad:50:61:1f:5f:1c:f9:34:7a:b6:7c:bc:66:
         69:ab:2e:48:cd:f4:32:b8:a9:c9:23:45:3d:53:80:74:f4:e7:
         74:bb:9d:da:37:6c:00:06:2c:a8:f3:a3:b3:b7:3c:c9:3b:35:
         19:95:b4:32:97:30:b6:57:38:22:ad:39:57:e4:38:15:2d:77:
         08:36:a9:22:65:54:2b:e2:59:88:5c:1a:13:22:52:e8:46:a0:
         1c:50:ce:69:d8:6e:f9:aa:0c:db:dc:fa:b2:53:e8:09:74:63:
         b7:64:af:f4
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTM1
RDVBRDMzREM2MzBDNDYxMTk4NzE0MEY1RTQ2OEI3MDgxRDExMB4XDTI2MDMzMTA3
MzMxOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjc3RDNEQkYzODAwMjY1
N0I3NEQxRDkzODg4RDk0RjQxM0U0NjlBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL2NQZ9zvRW+aAawq5CMBZfJ0oWUwWdBWcy313qSGBjs4WnRZcjx
bn1lN9nWGVc1ivFxqAGvDLQQDuD1sgNNb6oIZEMiYgAwPzHXa+W8ExfKYYnnqzcy
d5xsO0NwWyD9l6faBLNfJU4/gW51zYBNpwt617c0oMnZCGU6+sQHowPBeWdqpEeq
wmXsgnaDGp3+Jrljo8t5qtNwY3zXPNtRETVAtj1v/fEQ4mpQ08NuriLkMxzknVI3
xn3CbFH5Z/Jn3o1qI+lWUGri8KLdXdCIXWheyRdF4r3bPNDKi2oxYlVm1AmC42sN
m4JAseyXZ7jh8FyR1ifujqWAvr9T5xZvCq8CAwEAAaOCAdswggHXMB0GA1UdDgQW
BBS3fT2/OAAmV7dNHZOIjZT0E+RprDAfBgNVHSMEGDAWgBSpNdWtM9xjDEYRmHFA
9eRotwgdETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xVFhWclRQY1l3eEdFWmh4UVBYa2FM
Y0lIUkUuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvOTk5Ny90MzA5dnpnQUpsZTNUUjJUaUkyVTlCUGthYXcucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAygHVMA0GCSqGSIb3DQEBCwUAA4IB
AQCIBfVC0EWdft/KcskMttF8irf/4CpxVDRj6kvm682MHxTfHHHtgDbJfOJ+PU1t
nmV4lDeVMwctS5kXEP6FgQhqF8BQzDCjsoLR/E3sRByLCdEFifqmbHg37nvzdeOq
ZCuQQ67w60YipjY6I+gMdJsujY7TJ5HUd381wu6f/77Z8Z9bKMOe+ULn5Yi7WzdY
JXFqGCJC861QYR9fHPk0erZ8vGZpqy5IzfQyuKnJI0U9U4B09Od0u53aN2wABiyo
86OztzzJOzUZlbQylzC2VzgirTlX5DgVLXcINqkiZVQr4lmIXBoTIlLoRqAcUM5p
2G75qgzb3PqyU+gJdGO3ZK/0
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:02:09 2026 by rpki-client