Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AaHyI-G7pnjroCxy41vcs_TwiB4.roa
File:                     AaHyI-G7pnjroCxy41vcs_TwiB4.roa (raw, json)
Hash identifier:          gconBjJejBQgLvAXeQmThAhU4nlvNplGq6DI5rJic0M=
Subject key identifier:   01:A1:F2:23:E1:BB:A6:78:EB:A0:2C:72:E3:5B:DC:B3:F4:F0:88:1E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1884
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AaHyI-G7pnjroCxy41vcs_TwiB4.roa
Signing time:             Fri 03 Jul 2026 08:59:09 +0000
ROA not before:           Fri 03 Jul 2026 08:59:09 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6276 (0x1884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul  3 08:59:09 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=01A1F223E1BBA678EBA02C72E35BDCB3F4F0881E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:2f:3b:d5:d1:9c:4c:6e:8b:ec:3c:3e:99:
                    71:b5:c9:7c:92:5a:fc:d9:5d:83:8f:00:33:81:fe:
                    87:71:47:69:1d:3d:97:30:d9:74:d5:84:e3:fd:d4:
                    68:f9:74:17:df:0a:41:82:fc:b6:8f:b8:56:53:ce:
                    8d:25:c2:70:e1:0f:60:6b:35:d0:35:e6:2e:06:2a:
                    a4:20:46:85:17:8d:dd:e7:77:cb:28:01:0f:ae:46:
                    24:b2:77:b0:b2:d7:4c:b4:2c:7b:1a:e7:7f:19:70:
                    e6:47:e3:1f:70:0e:b7:40:43:d7:37:3f:f0:a2:6e:
                    6b:66:91:24:42:bd:61:29:c0:af:34:cb:eb:23:48:
                    f6:6e:3d:15:6a:36:00:0e:db:41:3e:57:ab:58:6a:
                    4a:ea:01:f4:45:9c:ed:08:b8:1b:35:14:eb:d6:46:
                    ab:3a:16:da:8e:67:a7:a7:4a:dc:99:9c:df:f8:f7:
                    32:45:b3:7c:d1:91:e0:68:44:45:10:fa:32:37:8b:
                    75:77:5a:94:0f:f2:c1:d9:9f:46:65:44:6d:eb:69:
                    9c:a9:d3:77:90:92:76:78:17:e9:7b:95:fc:fc:64:
                    b0:cf:a5:d6:c3:99:ca:08:f3:ec:a7:b9:ad:b0:38:
                    6a:05:42:22:51:9d:71:09:5e:c7:1e:10:47:51:c4:
                    60:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A1:F2:23:E1:BB:A6:78:EB:A0:2C:72:E3:5B:DC:B3:F4:F0:88:1E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AaHyI-G7pnjroCxy41vcs_TwiB4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:7d:a3:49:35:af:d1:30:19:21:32:28:a6:3d:1e:a4:44:c9:
         19:ec:3a:62:90:2f:d8:0d:0c:1f:9d:62:f1:6c:6c:2e:09:13:
         34:b1:99:26:70:b5:62:e2:2d:a7:46:6d:53:60:bf:b4:e6:0d:
         49:e0:5b:e9:10:1a:df:d5:12:9d:22:18:95:e3:cc:1b:23:ef:
         9c:ae:9e:7b:e8:cf:b4:ea:9f:2d:c6:ba:96:c2:27:80:76:ff:
         f3:df:66:1a:2f:ef:53:99:81:c5:51:2e:58:82:7c:23:ea:92:
         6b:16:d2:63:1b:b5:0a:1f:20:a1:40:81:4a:98:15:1f:16:89:
         cf:3b:09:e9:b5:47:23:28:fd:78:6d:33:df:c8:6a:24:de:2b:
         c4:d9:f9:60:be:6d:85:cb:1e:69:68:fc:6c:1a:0a:6a:3d:d3:
         c8:7c:24:ef:7e:62:51:fb:3d:4c:b8:42:49:70:68:95:e9:23:
         26:90:61:25:3c:b9:20:ff:d7:7c:a5:3e:0f:d8:df:77:55:25:
         23:2a:77:c7:6b:7e:97:8f:9f:c8:6a:21:fd:b8:fc:fa:23:02:
         b9:a4:6b:94:21:54:10:de:e3:01:e2:35:46:a0:02:73:c1:ef:
         33:f2:c9:d9:65:81:d9:ec:15:54:a4:3a:b6:24:71:ba:72:77:
         f7:cb:ad:5f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICGIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjA3MDMw
ODU5MDlaFw0yNzA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAxQTFGMjIzRTFCQkE2
NzhFQkEwMkM3MkUzNUJEQ0IzRjRGMDg4MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx5y871dGcTG6L7Dw+mXG1yXySWvzZXYOPADOB/odxR2kdPZcw
2XTVhOP91Gj5dBffCkGC/LaPuFZTzo0lwnDhD2BrNdA15i4GKqQgRoUXjd3nd8so
AQ+uRiSyd7Cy10y0LHsa538ZcOZH4x9wDrdAQ9c3P/CibmtmkSRCvWEpwK80y+sj
SPZuPRVqNgAO20E+V6tYakrqAfRFnO0IuBs1FOvWRqs6FtqOZ6enStyZnN/49zJF
s3zRkeBoREUQ+jI3i3V3WpQP8sHZn0ZlRG3raZyp03eQknZ4F+l7lfz8ZLDPpdbD
mcoI8+ynua2wOGoFQiJRnXEJXsceEEdRxGDHAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUAaHyI+G7pnjroCxy41vcs/TwiB4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0FhSHlJLUc3cG5qcm9DeHk0MXZjc19Ud2lCNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTDn8wDQYJKoZIhvcNAQELBQADggEB
ANJ9o0k1r9EwGSEyKKY9HqREyRnsOmKQL9gNDB+dYvFsbC4JEzSxmSZwtWLiLadG
bVNgv7TmDUngW+kQGt/VEp0iGJXjzBsj75yunnvoz7Tqny3GupbCJ4B2//PfZhov
71OZgcVRLliCfCPqkmsW0mMbtQofIKFAgUqYFR8Wic87Cem1RyMo/XhtM9/IaiTe
K8TZ+WC+bYXLHmlo/GwaCmo908h8JO9+YlH7PUy4QklwaJXpIyaQYSU8uSD/13yl
Pg/Y33dVJSMqd8drfpePn8hqIf24/PojArmka5QhVBDe4wHiNUagAnPB7zPyydll
gdnsFVSkOrYkcbpyd/fLrV8=
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:39:24 2026 by rpki-client