Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10694/gjdmmH6lBoNqckmZLIYMJ6yqnYo.roa
File:                     gjdmmH6lBoNqckmZLIYMJ6yqnYo.roa (raw, json)
Hash identifier:          smCTpyWpIwEjml64V9tM/vqF9J9zLipmpJ+Ku9dx83g=
Subject key identifier:   82:37:66:98:7E:A5:06:83:6A:72:49:99:2C:86:0C:27:AC:AA:9D:8A
Certificate issuer:       /CN=713193D702C3122114F7CDE81FD5A58672720F84
Certificate serial:       30
Authority key identifier: 71:31:93:D7:02:C3:12:21:14:F7:CD:E8:1F:D5:A5:86:72:72:0F:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/gjdmmH6lBoNqckmZLIYMJ6yqnYo.roa
Signing time:             Tue 31 Mar 2026 08:36:11 +0000
ROA not before:           Tue 31 Mar 2026 08:36:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7511
IP address blocks:        101.53.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713193D702C3122114F7CDE81FD5A58672720F84
        Validity
            Not Before: Mar 31 08:36:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=823766987EA506836A7249992C860C27ACAA9D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:a3:5d:49:36:43:11:89:35:fa:1b:24:58:
                    c2:2d:9f:82:dd:52:94:21:5d:65:12:d3:f1:9a:2e:
                    24:91:c4:a8:f0:c3:e2:c7:8e:24:0f:f6:98:8a:de:
                    76:5e:65:d5:fd:11:78:2f:e1:c8:08:83:d3:a0:f2:
                    b6:1d:06:14:7b:70:fa:5c:c7:9b:f2:76:d9:7d:97:
                    63:16:f8:09:55:68:23:11:15:ec:24:40:81:1e:6f:
                    a4:28:53:e7:35:f4:07:7f:7d:42:70:31:2c:34:e0:
                    ee:88:13:0a:9a:63:dc:1a:04:87:e2:7c:24:27:c0:
                    55:62:d4:2a:90:33:df:28:66:b5:0c:a7:86:32:ec:
                    e6:37:eb:12:a4:6a:0f:d7:c6:45:a9:5b:ca:29:8a:
                    e4:d1:f1:de:b7:8f:88:e0:cd:c1:31:8f:05:bd:a8:
                    05:f9:33:77:2f:2a:ef:14:58:86:3f:7e:7b:f1:4e:
                    d4:be:08:0a:cf:ca:5c:6c:80:e5:d6:20:df:2f:b4:
                    e3:7a:56:fa:df:7a:aa:86:f5:b0:0e:b9:62:7a:90:
                    8f:f4:4a:58:3e:77:e4:f4:75:69:b2:34:45:46:17:
                    68:69:34:43:cb:6b:b2:15:4f:4d:5c:a2:bf:8a:b1:
                    f0:78:b1:c6:f7:29:2e:3f:eb:28:e4:0c:e7:90:23:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:37:66:98:7E:A5:06:83:6A:72:49:99:2C:86:0C:27:AC:AA:9D:8A
            X509v3 Authority Key Identifier:
                keyid:71:31:93:D7:02:C3:12:21:14:F7:CD:E8:1F:D5:A5:86:72:72:0F:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/gjdmmH6lBoNqckmZLIYMJ6yqnYo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.53.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:3e:bd:ba:7b:18:f5:3e:c0:cf:37:d4:4d:11:4e:91:aa:d3:
         98:fa:38:1f:4c:19:f0:ac:72:ba:e2:e8:5d:89:5a:dc:98:13:
         1d:56:41:54:3e:8f:45:0c:af:12:ca:53:a4:46:1f:63:f1:01:
         8d:7e:74:ce:86:84:19:d7:0a:ea:2c:88:09:db:59:83:aa:a8:
         52:59:c2:71:bf:7a:16:f2:73:90:94:4a:8a:04:51:d7:ae:f8:
         55:08:a3:0e:93:5c:e5:73:5e:18:14:33:48:5d:7e:43:95:f6:
         f7:cd:f6:02:8d:f6:ad:58:6e:e7:83:da:fb:f4:1a:4a:a5:f6:
         50:5d:e1:f5:f6:36:3f:b5:89:25:92:9c:f1:61:f5:ed:6f:f4:
         74:5a:f5:ed:6f:ff:d1:3c:a0:95:e6:0a:34:08:0d:b4:29:a1:
         66:e2:3f:9f:72:d4:99:44:39:c6:73:b2:de:37:08:6d:28:af:
         7b:48:1f:aa:bc:40:0c:6f:0b:a4:4e:5c:5a:c1:c6:2b:9b:86:
         fa:7a:59:79:1f:d5:b6:f9:54:98:09:6f:a3:c8:2d:ac:24:5e:
         a2:8a:6e:13:ab:dd:b7:c1:2f:c0:21:bc:d1:e5:ca:c8:1a:68:
         42:ee:6d:e7:68:c2:29:b3:34:bf:6f:fc:37:a4:ad:0d:90:56:
         97:7d:bc:d1
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTMx
OTNENzAyQzMxMjIxMTRGN0NERTgxRkQ1QTU4NjcyNzIwRjg0MB4XDTI2MDMzMTA4
MzYxMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODIzNzY2OTg3RUE1MDY4
MzZBNzI0OTk5MkM4NjBDMjdBQ0FBOUQ4QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALfio11JNkMRiTX6GyRYwi2fgt1SlCFdZRLT8ZouJJHEqPDD4seO
JA/2mIredl5l1f0ReC/hyAiD06Dyth0GFHtw+lzHm/J22X2XYxb4CVVoIxEV7CRA
gR5vpChT5zX0B399QnAxLDTg7ogTCppj3BoEh+J8JCfAVWLUKpAz3yhmtQynhjLs
5jfrEqRqD9fGRalbyimK5NHx3rePiODNwTGPBb2oBfkzdy8q7xRYhj9+e/FO1L4I
Cs/KXGyA5dYg3y+043pW+t96qob1sA65YnqQj/RKWD535PR1abI0RUYXaGk0Q8tr
shVPTVyiv4qx8HixxvcpLj/rKOQM55AjOwMCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBSCN2aYfqUGg2pySZkshgwnrKqdijAfBgNVHSMEGDAWgBRxMZPXAsMSIRT3zegf
1aWGcnIPhDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA2OTQvY1RHVDF3TERFaUVVOTgzb0g5V2xobkp5RDRRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY1RHVDF3TERFaUVVOTgzb0g5V2xo
bkp5RDRRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEwNjk0L2dqZG1tSDZsQm9OcWNrbVpMSVlNSjZ5cW5Zby5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANlNWgwDQYJKoZIhvcNAQELBQAD
ggEBACU+vbp7GPU+wM831E0RTpGq05j6OB9MGfCscrri6F2JWtyYEx1WQVQ+j0UM
rxLKU6RGH2PxAY1+dM6GhBnXCuosiAnbWYOqqFJZwnG/ehbyc5CUSooEUdeu+FUI
ow6TXOVzXhgUM0hdfkOV9vfN9gKN9q1YbueD2vv0Gkql9lBd4fX2Nj+1iSWSnPFh
9e1v9HRa9e1v/9E8oJXmCjQIDbQpoWbiP59y1JlEOcZzst43CG0or3tIH6q8QAxv
C6ROXFrBxiubhvp6WXkf1bb5VJgJb6PILawkXqKKbhOr3bfBL8AhvNHlysgaaELu
bedowimzNL9v/DekrQ2QVpd9vNE=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:39 2026 by rpki-client