Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/W_CBTQ6pPy7ctKb6EssjPUBs8t0.roa
File:                     W_CBTQ6pPy7ctKb6EssjPUBs8t0.roa (raw, json)
Hash identifier:          bwPjj1mk0rW4rNMBlArUpfXrBKowxO6kIZImNabc3/A=
Subject key identifier:   5B:F0:81:4D:0E:A9:3F:2E:DC:B4:A6:FA:12:CB:23:3D:40:6C:F2:DD
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       94
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/W_CBTQ6pPy7ctKb6EssjPUBs8t0.roa
Signing time:             Tue 31 Mar 2026 07:40:56 +0000
ROA not before:           Tue 31 Mar 2026 07:40:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7514
IP address blocks:        210.155.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Mar 31 07:40:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5BF0814D0EA93F2EDCB4A6FA12CB233D406CF2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:c6:96:fe:54:1f:19:b3:4f:d7:77:1f:0f:
                    1f:f6:7d:0c:ed:f8:20:57:17:91:e0:a0:04:1e:fb:
                    ac:87:6b:10:3d:c8:7d:00:8d:6f:ed:b3:cc:2b:c9:
                    59:8b:38:35:e2:d4:ac:b5:2f:91:b6:6a:8c:05:4f:
                    5a:60:ef:49:a9:08:8f:e8:4d:87:6b:17:dd:61:bc:
                    bb:1b:3a:46:07:37:ad:26:20:65:d7:ba:ae:25:3f:
                    3c:20:95:c9:62:fe:7f:47:e2:f3:e4:9e:54:58:4e:
                    f5:7a:66:88:b0:88:ea:d3:ab:40:87:07:16:93:20:
                    e2:cc:96:32:f7:ac:75:bb:7d:50:72:0e:3d:e7:45:
                    0e:7b:ac:d8:31:30:0c:9f:5e:5f:a3:22:f5:04:b9:
                    63:97:5b:8c:47:32:ef:33:8f:c1:84:f5:0f:41:3d:
                    93:d9:6c:a4:2d:48:49:71:72:83:60:1c:6b:8a:96:
                    14:30:48:82:0b:f6:83:e7:8e:58:71:81:fd:5a:5f:
                    d4:02:01:1e:de:a6:6c:35:e1:a7:04:03:81:65:19:
                    49:1b:08:82:b3:b0:92:9e:e4:33:a7:22:0a:ca:af:
                    cc:5e:81:6f:26:26:a1:11:df:eb:e7:06:a6:65:c0:
                    66:ab:42:c6:6f:73:cd:7d:78:50:19:41:4c:31:24:
                    04:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F0:81:4D:0E:A9:3F:2E:DC:B4:A6:FA:12:CB:23:3D:40:6C:F2:DD
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/W_CBTQ6pPy7ctKb6EssjPUBs8t0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.155.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:4a:4c:f0:84:01:d9:3b:9e:94:ff:f7:ea:93:27:58:b6:3b:
         cb:bf:cb:68:89:c8:f4:16:e4:88:ff:51:38:8a:49:ed:53:c0:
         1d:d5:db:72:1f:c1:18:64:2f:e3:ef:39:23:34:3d:d3:88:de:
         3c:9f:ca:eb:8e:ed:38:ae:cc:27:d1:c8:5e:e0:cc:d9:26:ab:
         97:db:93:fd:ed:5d:92:21:59:6e:59:49:e3:83:cb:d1:be:c0:
         48:9c:a0:c9:94:0c:7a:ba:e3:2a:50:61:58:ca:33:cd:0b:a0:
         ff:b2:3f:f5:a4:e7:bd:04:a4:f5:b8:ff:d5:b2:a6:59:c8:a2:
         80:e0:72:67:90:87:33:97:18:cc:36:70:8f:01:e4:35:02:1f:
         bd:08:44:c2:5b:8a:6b:6f:e3:09:f7:a3:83:b3:d8:a4:d9:f7:
         4a:b2:cb:b2:dc:3e:27:7a:e8:9e:6a:d1:1a:06:5c:1c:9a:3e:
         3c:0f:6f:6c:a6:2b:41:dc:76:29:29:1a:00:26:6c:e0:48:4e:
         ab:2e:f9:1b:a1:e4:b6:9f:a6:54:c9:8e:14:ab:6b:17:ce:88:
         42:15:92:71:bb:60:88:5a:69:8e:b0:cf:a5:5a:8f:6c:e0:f2:
         c2:d3:ad:76:e3:ab:37:db:8e:e0:8a:d5:c1:fc:bf:21:55:75:
         cf:4c:50:b6
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjgz
OTNGQUUxMjlCNTAxODI0Njk2QkFFMjRCNjQ3MzRBMjAzQzM3NjAeFw0yNjAzMzEw
NzQwNTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVCRjA4MTREMEVBOTNG
MkVEQ0I0QTZGQTEyQ0IyMzNENDA2Q0YyREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB0saW/lQfGbNP13cfDx/2fQzt+CBXF5HgoAQe+6yHaxA9yH0A
jW/ts8wryVmLODXi1Ky1L5G2aowFT1pg70mpCI/oTYdrF91hvLsbOkYHN60mIGXX
uq4lPzwglcli/n9H4vPknlRYTvV6ZoiwiOrTq0CHBxaTIOLMljL3rHW7fVByDj3n
RQ57rNgxMAyfXl+jIvUEuWOXW4xHMu8zj8GE9Q9BPZPZbKQtSElxcoNgHGuKlhQw
SIIL9oPnjlhxgf1aX9QCAR7epmw14acEA4FlGUkbCIKzsJKe5DOnIgrKr8xegW8m
JqER3+vnBqZlwGarQsZvc819eFAZQUwxJATvAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUW/CBTQ6pPy7ctKb6EssjPUBs8t0wHwYDVR0jBBgwFoAUKDk/rhKbUBgkaWuu
JLZHNKIDw3YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwNzYyL0tEa19yaEtiVUJna2FXdXVKTFpITktJRHczWS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0tEa19yaEtiVUJna2FXdXVKTFpI
TktJRHczWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDc2Mi9XX0NCVFE2cFB5N2N0S2I2RXNzalBVQnM4dDAucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0puAMA0GCSqGSIb3DQEBCwUA
A4IBAQCSSkzwhAHZO56U//fqkydYtjvLv8toicj0FuSI/1E4ikntU8Ad1dtyH8EY
ZC/j7zkjND3TiN48n8rrju04rswn0che4MzZJquX25P97V2SIVluWUnjg8vRvsBI
nKDJlAx6uuMqUGFYyjPNC6D/sj/1pOe9BKT1uP/VsqZZyKKA4HJnkIczlxjMNnCP
AeQ1Ah+9CETCW4prb+MJ96ODs9ik2fdKssuy3D4neuieatEaBlwcmj48D29spitB
3HYpKRoAJmzgSE6rLvkboeS2n6ZUyY4Uq2sXzohCFZJxu2CIWmmOsM+lWo9s4PLC
061246s3247gitXB/L8hVXXPTFC2
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:51 2026 by rpki-client