Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/1zaE6C54F3Std0MH91_1sh4JC5g.roa
File:                     1zaE6C54F3Std0MH91_1sh4JC5g.roa (raw, json)
Hash identifier:          65mnL+O0vVqaU6vl7hO1WpxLjNXl7oFIF1Fo/MBeuQ0=
Subject key identifier:   D7:36:84:E8:2E:78:17:74:AD:77:43:07:F7:5F:F5:B2:1E:09:0B:98
Certificate issuer:       /CN=E8CDBC24A6C3C530B99815AE7B5C0DA3EF8A84D5
Certificate serial:       60
Authority key identifier: E8:CD:BC:24:A6:C3:C5:30:B9:98:15:AE:7B:5C:0D:A3:EF:8A:84:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/1zaE6C54F3Std0MH91_1sh4JC5g.roa
Signing time:             Tue 31 Mar 2026 07:38:43 +0000
ROA not before:           Tue 31 Mar 2026 07:38:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2515
IP address blocks:        192.41.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8CDBC24A6C3C530B99815AE7B5C0DA3EF8A84D5
        Validity
            Not Before: Mar 31 07:38:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D73684E82E781774AD774307F75FF5B21E090B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4a:89:0c:7d:36:f4:88:6a:68:79:7d:9b:e2:
                    4e:d0:e0:4c:d0:6f:02:96:f9:85:ff:77:cc:d7:2d:
                    78:db:10:76:c1:5f:82:7b:5f:de:f5:9b:e1:89:61:
                    70:8f:39:28:8c:24:da:08:93:1d:d7:d2:f3:00:88:
                    86:6a:25:33:41:43:c8:8f:bb:8c:ba:08:ee:86:a5:
                    d5:e4:52:0f:80:78:52:a8:52:03:59:74:6f:ec:d0:
                    66:2d:e3:f5:19:76:af:74:18:cc:29:65:22:c5:97:
                    c8:ad:f4:f8:a0:97:0d:0d:6f:a5:6e:62:22:b6:a6:
                    60:eb:f1:f4:2f:40:eb:f5:21:d6:44:8e:1f:e1:51:
                    92:d0:d0:02:1e:36:a7:ff:c7:ba:b9:42:64:34:ce:
                    d8:9b:dc:fd:2c:28:db:ed:ba:73:ab:73:b3:b4:4c:
                    de:89:d4:64:71:2f:15:93:6a:ae:7a:a7:d2:ef:4a:
                    ec:f5:65:51:ba:93:98:9f:eb:7f:72:00:a4:c6:ac:
                    5e:c7:c8:91:eb:2a:e2:c0:30:e5:28:b5:a3:cb:fb:
                    b1:02:c6:38:f6:c7:f7:4b:d9:f4:2c:8a:2c:ed:ff:
                    0c:92:c7:11:72:aa:f4:4b:b9:9f:4d:1a:f2:85:c2:
                    e4:56:f1:b5:3e:6c:2f:63:f9:d5:18:d0:0a:35:af:
                    a7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:36:84:E8:2E:78:17:74:AD:77:43:07:F7:5F:F5:B2:1E:09:0B:98
            X509v3 Authority Key Identifier:
                keyid:E8:CD:BC:24:A6:C3:C5:30:B9:98:15:AE:7B:5C:0D:A3:EF:8A:84:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/1zaE6C54F3Std0MH91_1sh4JC5g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:75:14:dc:24:6d:d4:7b:98:e5:f9:3e:12:fa:1e:d0:bc:60:
         60:00:17:14:6c:28:5f:b0:45:5c:38:62:3c:57:43:7e:e2:5d:
         86:8c:15:cd:c2:d4:38:37:e6:85:82:f2:1d:26:99:5a:66:21:
         aa:88:58:ec:c4:07:bb:7c:2e:e6:c8:7b:d0:08:e6:19:e7:ef:
         35:c8:ea:e9:49:ad:92:f3:17:76:2b:75:02:98:28:ea:9f:cd:
         8d:33:d9:e3:96:87:b3:36:54:df:dc:96:ff:40:5b:70:17:82:
         99:e3:39:0a:ed:e5:88:4b:0c:b5:5e:0c:70:8e:73:78:40:27:
         65:d6:eb:dc:59:29:d3:1f:94:9b:2c:ce:00:e0:47:3b:0f:23:
         00:a7:3d:43:04:f2:2b:1d:d4:fc:09:f1:e3:22:ed:54:6c:ef:
         2f:f3:a0:91:e0:e1:17:3a:53:b5:3e:54:df:da:38:f8:7a:6e:
         cf:54:a8:3e:76:8f:81:0f:9a:57:e9:c2:7b:a6:53:ee:52:e2:
         ce:7b:dd:fd:19:51:85:3f:41:13:fe:8d:d8:bc:24:46:89:e6:
         53:1a:8f:80:13:7b:56:2f:12:c0:35:34:47:4d:a2:c5:97:20:
         09:ed:2c:45:ee:24:e4:3d:6a:3e:b2:40:de:33:db:db:4f:75:
         cc:d9:8f:a0
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFOENE
QkMyNEE2QzNDNTMwQjk5ODE1QUU3QjVDMERBM0VGOEE4NEQ1MB4XDTI2MDMzMTA3
Mzg0M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDczNjg0RTgyRTc4MTc3
NEFENzc0MzA3Rjc1RkY1QjIxRTA5MEI5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ9KiQx9NvSIamh5fZviTtDgTNBvApb5hf93zNcteNsQdsFfgntf
3vWb4YlhcI85KIwk2giTHdfS8wCIhmolM0FDyI+7jLoI7oal1eRSD4B4UqhSA1l0
b+zQZi3j9Rl2r3QYzCllIsWXyK30+KCXDQ1vpW5iIramYOvx9C9A6/Uh1kSOH+FR
ktDQAh42p//HurlCZDTO2Jvc/Swo2+26c6tzs7RM3onUZHEvFZNqrnqn0u9K7PVl
UbqTmJ/rf3IApMasXsfIkesq4sAw5Si1o8v7sQLGOPbH90vZ9CyKLO3/DJLHEXKq
9Eu5n00a8oXC5FbxtT5sL2P51RjQCjWvp7ECAwEAAaOCAdswggHXMB0GA1UdDgQW
BBTXNoToLngXdK13Qwf3X/WyHgkLmDAfBgNVHSMEGDAWgBTozbwkpsPFMLmYFa57
XA2j74qE1TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTAwMy82TTI4SktiRHhUQzVtQld1ZTF3Tm8tLUtoTlUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC82TTI4SktiRHhUQzVtQld1ZTF3Tm8t
LUtoTlUuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTAwMy8xemFFNkM1NEYzU3RkME1IOTFfMXNoNEpDNWcucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnAMA0GCSqGSIb3DQEBCwUAA4IB
AQCwdRTcJG3Ue5jl+T4S+h7QvGBgABcUbChfsEVcOGI8V0N+4l2GjBXNwtQ4N+aF
gvIdJplaZiGqiFjsxAe7fC7myHvQCOYZ5+81yOrpSa2S8xd2K3UCmCjqn82NM9nj
loezNlTf3Jb/QFtwF4KZ4zkK7eWISwy1XgxwjnN4QCdl1uvcWSnTH5SbLM4A4Ec7
DyMApz1DBPIrHdT8CfHjIu1UbO8v86CR4OEXOlO1PlTf2jj4em7PVKg+do+BD5pX
6cJ7plPuUuLOe939GVGFP0ET/o3YvCRGieZTGo+AE3tWLxLANTRHTaLFlyAJ7SxF
7iTkPWo+skDeM9vbT3XM2Y+g
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:34 2026 by rpki-client