Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/zHucjvQEjdyQKu-MkjjBJ61toEg.roa
File:                     zHucjvQEjdyQKu-MkjjBJ61toEg.roa (raw, json)
Hash identifier:          CEWP/Yt0BGUkBzk3K7GyzvoNco3BJRKHjmUMRHYWggk=
Subject key identifier:   CC:7B:9C:8E:F4:04:8D:DC:90:2A:EF:8C:92:38:C1:27:AD:6D:A0:48
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       85
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/zHucjvQEjdyQKu-MkjjBJ61toEg.roa
Signing time:             Tue 31 Mar 2026 08:37:37 +0000
ROA not before:           Tue 31 Mar 2026 08:37:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        117.18.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 31 08:37:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CC7B9C8EF4048DDC902AEF8C9238C127AD6DA048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:c3:c0:b1:1c:1a:ab:a6:e6:8a:73:0f:b4:
                    d6:74:dd:68:b5:8b:2a:17:f8:9d:9a:6c:30:b3:b8:
                    fc:3f:a9:d0:a2:cd:f7:5d:97:79:04:90:b8:c6:f9:
                    c5:3a:71:ac:14:af:c7:e1:75:b6:a0:69:3b:7e:ff:
                    bf:f9:cc:69:51:6b:07:44:b0:25:b9:9d:dd:0b:04:
                    5b:c2:5b:c6:ca:14:4d:11:76:49:7a:4e:95:4f:9c:
                    9f:c1:1c:1a:25:f4:ef:ef:67:33:37:04:29:df:39:
                    b0:9e:bd:73:92:3f:02:87:5d:b5:8e:5f:21:22:04:
                    e7:78:51:8e:61:80:e6:c0:95:b0:6d:c2:13:60:32:
                    cd:6a:b5:92:48:6f:09:2b:42:c4:1f:9d:3b:94:4e:
                    73:43:35:e7:86:b8:22:dc:37:d2:2b:9b:5c:37:40:
                    f8:28:76:2d:88:6d:96:58:c6:88:c8:50:76:17:bb:
                    14:ae:48:5f:c5:d9:0b:33:77:05:a8:30:73:d7:29:
                    7a:56:65:0c:10:ad:0b:05:8d:43:56:54:09:05:ef:
                    0d:a1:b1:8e:f1:b0:a6:33:64:96:2b:d1:66:fb:09:
                    18:f0:8b:e2:cb:4d:30:6e:88:77:a2:cf:85:41:c9:
                    af:b7:2e:be:b8:ca:ac:61:8c:9c:f9:b5:b1:ec:29:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7B:9C:8E:F4:04:8D:DC:90:2A:EF:8C:92:38:C1:27:AD:6D:A0:48
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/zHucjvQEjdyQKu-MkjjBJ61toEg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:99:ec:d9:2d:91:30:40:81:31:88:91:5e:7a:69:5a:b6:90:
         fb:14:2d:27:4b:bd:84:34:c1:c9:11:fb:4e:b5:9e:7c:87:52:
         39:eb:aa:0f:98:67:72:ad:a1:7c:3a:2a:f8:4c:fb:ae:58:93:
         0c:86:73:63:b8:ea:87:b2:f7:7f:dd:c1:da:f7:26:c6:a9:f8:
         19:98:7d:78:58:a0:03:76:8c:2f:75:f0:2d:b0:f9:7a:18:0c:
         81:2e:6c:f1:15:da:9c:70:85:27:e0:a7:cd:55:f6:f9:1d:7a:
         d0:58:24:8e:92:81:bd:8c:3e:7f:31:de:6b:98:65:11:b4:ed:
         3a:10:98:bb:ea:fc:0b:e5:63:a2:08:fd:22:fa:81:7d:5d:81:
         7f:be:f0:5d:0f:d1:80:c3:0b:80:ed:34:f6:7b:b6:a8:50:07:
         df:17:aa:99:a3:76:ff:00:2f:76:a2:70:df:fe:24:87:91:8f:
         12:ad:e6:56:b3:20:dd:73:9f:ad:df:e6:ef:10:8f:ce:00:b4:
         06:b4:2c:98:b5:25:fc:de:b0:1c:93:36:c0:9b:cf:39:4d:0e:
         d0:08:4c:79:71:5d:d9:28:47:cd:38:83:5d:27:52:fe:c5:b7:
         68:70:3f:cd:cb:86:1c:ed:ee:a4:fd:66:b3:10:b2:6c:db:c5:
         85:14:46:00
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzNE
RjlCMjRGNTNCQkNBQzM0N0JBNUI1QThDNDlCRkY0MTY2NkEyNjAeFw0yNjAzMzEw
ODM3MzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENDN0I5QzhFRjQwNDhE
REM5MDJBRUY4QzkyMzhDMTI3QUQ2REEwNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/4sPAsRwaq6bminMPtNZ03Wi1iyoX+J2abDCzuPw/qdCizfdd
l3kEkLjG+cU6cawUr8fhdbagaTt+/7/5zGlRawdEsCW5nd0LBFvCW8bKFE0Rdkl6
TpVPnJ/BHBol9O/vZzM3BCnfObCevXOSPwKHXbWOXyEiBOd4UY5hgObAlbBtwhNg
Ms1qtZJIbwkrQsQfnTuUTnNDNeeGuCLcN9Irm1w3QPgodi2IbZZYxojIUHYXuxSu
SF/F2QszdwWoMHPXKXpWZQwQrQsFjUNWVAkF7w2hsY7xsKYzZJYr0Wb7CRjwi+LL
TTBuiHeiz4VBya+3Lr64yqxhjJz5tbHsKeMfAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUzHucjvQEjdyQKu+MkjjBJ61toEgwHwYDVR0jBBgwFoAUM9+bJPU7vKw0e6W1
qMSb/0FmaiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwODIyL005LWJKUFU3dkt3MGU2VzFxTVNiXzBGbWFpWS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL005LWJKUFU3dkt3MGU2VzFxTVNi
XzBGbWFpWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDgyMi96SHVjanZRRWpkeVFLdS1Na2pqQko2MXRvRWcucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEdRLQMA0GCSqGSIb3DQEBCwUA
A4IBAQARmezZLZEwQIExiJFeemlatpD7FC0nS72ENMHJEftOtZ58h1I566oPmGdy
raF8Oir4TPuuWJMMhnNjuOqHsvd/3cHa9ybGqfgZmH14WKADdowvdfAtsPl6GAyB
LmzxFdqccIUn4KfNVfb5HXrQWCSOkoG9jD5/Md5rmGURtO06EJi76vwL5WOiCP0i
+oF9XYF/vvBdD9GAwwuA7TT2e7aoUAffF6qZo3b/AC92onDf/iSHkY8SreZWsyDd
c5+t3+bvEI/OALQGtCyYtSX83rAckzbAm885TQ7QCEx5cV3ZKEfNOINdJ1L+xbdo
cD/Ny4Yc7e6k/WazELJs28WFFEYA
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:05 2026 by rpki-client