Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y-5BGw_sPKa8un27gUyiIEiQ1a8.roa
File:                     y-5BGw_sPKa8un27gUyiIEiQ1a8.roa (raw, json)
Hash identifier:          PfwywLXpzrnC0Z9nxPte87zwf7auEvW1QupTOcTQ/uo=
Subject key identifier:   CB:EE:41:1B:0F:EC:3C:A6:BC:BA:7D:BB:81:4C:A2:20:48:90:D5:AF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1879
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y-5BGw_sPKa8un27gUyiIEiQ1a8.roa
Signing time:             Wed 20 May 2026 06:25:41 +0000
ROA not before:           Wed 20 May 2026 06:25:41 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.66.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6265 (0x1879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 20 06:25:41 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=CBEE411B0FEC3CA6BCBA7DBB814CA2204890D5AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:2e:94:e8:f4:d9:a1:1c:99:b2:2f:98:f4:43:
                    8e:5b:fa:2a:4b:c6:f0:d5:f2:f6:27:33:2d:d4:9e:
                    a4:ac:fa:25:4c:6c:ca:1c:cd:9f:1b:df:be:c9:de:
                    09:e5:73:be:d1:ce:bd:d0:78:18:de:25:ed:36:ca:
                    93:38:6b:9e:7e:46:0a:da:8c:c9:47:c5:bf:88:ff:
                    1f:5d:49:7e:be:09:cc:a0:78:cf:f3:18:fd:2d:78:
                    b2:35:c4:86:dc:68:29:67:3f:30:69:40:9c:fa:99:
                    50:ba:46:d3:9f:3f:cf:3a:f3:7d:91:69:86:bf:8a:
                    3a:3c:2c:37:19:ef:5f:8a:1d:6c:f4:31:f1:59:4c:
                    f6:40:dc:3a:d0:09:61:f9:7b:99:e5:c2:61:4c:72:
                    a5:77:fe:7c:c4:06:17:6e:d1:86:b1:ca:3b:2f:dd:
                    51:98:74:41:19:8b:64:09:8f:8e:d3:af:b5:d3:f4:
                    7d:f2:e0:11:7a:6a:bc:be:7f:46:6f:68:29:d8:73:
                    e0:8a:54:87:7d:ae:46:d0:db:7b:02:db:68:5f:3f:
                    ab:6d:55:08:09:82:35:a7:a0:9e:ba:f9:d4:9b:2a:
                    e1:66:3a:af:02:40:eb:f8:e3:b8:9f:ee:4d:ad:fd:
                    03:a6:21:a5:ec:1d:16:d4:ec:ed:36:b2:77:29:f8:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EE:41:1B:0F:EC:3C:A6:BC:BA:7D:BB:81:4C:A2:20:48:90:D5:AF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y-5BGw_sPKa8un27gUyiIEiQ1a8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:4d:74:74:4c:bd:7a:e3:46:f2:ee:56:2f:5f:9d:0b:72:56:
         1a:67:43:ee:21:80:7d:eb:bd:37:71:4d:23:51:b0:db:7d:76:
         ae:6c:0c:3b:28:70:39:51:4e:de:96:98:b8:b1:92:25:d0:38:
         c6:7a:8d:6f:05:3f:34:dc:cc:61:55:01:30:9c:ac:aa:ef:57:
         82:f2:27:96:cd:e5:6f:9d:7f:7c:d1:15:30:6d:26:d6:09:7d:
         cf:9e:7c:c6:be:b8:27:70:5b:3b:98:b3:d7:f2:a2:2e:dc:7e:
         2b:8c:7a:07:48:90:8d:3a:da:d2:fe:b7:a6:23:a3:ad:ae:5e:
         70:a3:c2:aa:1d:be:65:dd:04:67:ce:cd:e9:69:5c:43:92:f5:
         21:68:13:2b:b6:1a:ef:92:bc:c7:19:c2:e5:7d:d2:9a:17:da:
         24:74:80:2e:45:8f:a6:1e:1e:92:6c:bd:d9:30:d6:db:6f:e9:
         ac:39:f7:22:7a:3c:1b:4b:f2:8b:52:32:15:9d:27:60:76:27:
         fa:a9:64:b1:52:94:0d:22:a9:68:72:42:e5:f7:8d:d6:9b:14:
         5f:6b:5e:bd:3a:d4:49:da:f0:48:bf:6f:54:ea:0f:22:a8:68:
         f0:4b:8f:0d:6f:c0:79:aa:0c:a1:5f:a7:9b:9b:e6:8e:ce:ac:
         07:45:0f:ba
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICGHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjA1MjAw
NjI1NDFaFw0yNzA1MTUwMTMwMDJaMDMxMTAvBgNVBAMTKENCRUU0MTFCMEZFQzND
QTZCQ0JBN0RCQjgxNENBMjIwNDg5MEQ1QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD+LpTo9NmhHJmyL5j0Q45b+ipLxvDV8vYnMy3UnqSs+iVMbMoc
zZ8b377J3gnlc77Rzr3QeBjeJe02ypM4a55+RgrajMlHxb+I/x9dSX6+CcygeM/z
GP0teLI1xIbcaClnPzBpQJz6mVC6RtOfP886832RaYa/ijo8LDcZ71+KHWz0MfFZ
TPZA3DrQCWH5e5nlwmFMcqV3/nzEBhdu0Yaxyjsv3VGYdEEZi2QJj47Tr7XT9H3y
4BF6ary+f0ZvaCnYc+CKVId9rkbQ23sC22hfP6ttVQgJgjWnoJ66+dSbKuFmOq8C
QOv447if7k2t/QOmIaXsHRbU7O02sncp+GHrAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUy+5BGw/sPKa8un27gUyiIEiQ1a8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3ktNUJHd19zUEthOHVuMjdnVXlpSUVpUTFhOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABQiQwDQYJKoZIhvcNAQELBQADggEB
ABtNdHRMvXrjRvLuVi9fnQtyVhpnQ+4hgH3rvTdxTSNRsNt9dq5sDDsocDlRTt6W
mLixkiXQOMZ6jW8FPzTczGFVATCcrKrvV4LyJ5bN5W+df3zRFTBtJtYJfc+efMa+
uCdwWzuYs9fyoi7cfiuMegdIkI062tL+t6Yjo62uXnCjwqodvmXdBGfOzelpXEOS
9SFoEyu2Gu+SvMcZwuV90poX2iR0gC5Fj6YeHpJsvdkw1ttv6aw59yJ6PBtL8otS
MhWdJ2B2J/qpZLFSlA0iqWhyQuX3jdabFF9rXr061Ena8Ei/b1TqDyKoaPBLjw1v
wHmqDKFfp5ub5o7OrAdFD7o=
-----END CERTIFICATE-----
Generated at Sat May 23 05:48:00 2026 by rpki-client