Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/KTRevCvWYm_968t66Bv-x-S1Zt8.roa
File:                     KTRevCvWYm_968t66Bv-x-S1Zt8.roa (raw, json)
Hash identifier:          ss06qo3x2qfO7fWiWmCifhZVpZVLck5sXUBvBDFvG+U=
Subject key identifier:   29:34:5E:BC:2B:D6:62:6F:FD:EB:CB:7A:E8:1B:FE:C7:E4:B5:66:DF
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       02AB
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/KTRevCvWYm_968t66Bv-x-S1Zt8.roa
Signing time:             Tue 31 Mar 2026 07:33:54 +0000
ROA not before:           Tue 31 Mar 2026 07:33:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        218.44.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=29345EBC2BD6626FFDEBCB7AE81BFEC7E4B566DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:93:17:c6:48:81:81:ad:68:58:0b:67:c0:
                    b6:bb:af:2b:c7:e2:04:18:78:fc:6f:d3:53:c1:ab:
                    ef:b2:fe:b7:f4:6b:c0:ef:4f:0c:fe:95:5f:3b:ca:
                    02:08:bc:c9:f0:35:2b:75:cf:25:e7:ea:28:9b:01:
                    f6:30:96:24:8b:ab:06:6f:d3:24:d9:44:f5:6d:ec:
                    06:13:04:c2:70:4d:12:04:e9:d1:36:09:b0:7d:01:
                    4f:51:67:c6:98:65:b4:ca:75:82:7e:13:9d:14:9e:
                    be:c2:a6:65:7e:2e:fe:f1:fb:75:8e:c2:3f:ef:69:
                    f8:95:78:47:44:b6:5e:95:88:cb:fb:dd:e9:c6:52:
                    40:fe:6c:5a:ef:fc:53:de:f7:77:42:2d:fa:f4:67:
                    3f:23:31:0f:44:c5:d4:ea:02:6e:f5:fa:ca:8a:f9:
                    62:6b:d6:7d:b0:3e:4f:1e:c3:5c:34:96:19:e2:50:
                    49:87:13:2b:7c:8e:6f:65:3b:df:2f:81:5e:75:b8:
                    8c:ae:1c:52:fa:18:1d:77:51:11:ae:f5:68:7b:92:
                    b1:26:07:45:ae:56:64:fb:b1:66:e2:22:cb:cd:32:
                    bf:a3:40:43:03:08:a5:96:e6:05:e3:fc:f9:2f:d6:
                    c2:de:dd:3b:50:4d:ea:8c:91:11:c6:31:49:af:f2:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:34:5E:BC:2B:D6:62:6F:FD:EB:CB:7A:E8:1B:FE:C7:E4:B5:66:DF
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/KTRevCvWYm_968t66Bv-x-S1Zt8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.44.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:16:37:0c:57:30:e7:60:f5:f0:f6:b1:d4:23:df:61:f5:17:
         51:e4:53:4c:ef:64:83:fb:4a:fd:53:cb:f6:e4:98:2a:64:35:
         5e:53:6b:ef:6a:7e:29:2e:44:4a:ad:0d:32:df:34:fd:75:8f:
         aa:46:c1:84:10:e5:f4:9f:ec:83:b5:f3:21:ab:79:97:05:42:
         62:2f:8e:3d:7a:95:46:ab:5e:db:2f:4e:8f:dd:6d:be:7d:3a:
         82:4a:0d:e5:26:0c:64:81:d6:76:db:13:18:8b:3a:41:00:ff:
         36:19:5b:23:7b:66:44:77:59:5a:77:e5:d1:88:5e:f6:ee:de:
         8f:dc:fc:04:17:11:22:59:22:06:9b:b1:3b:7e:c2:1c:45:2b:
         ae:ce:c8:59:7a:f7:e4:14:ee:78:3c:aa:d3:48:78:c2:3a:9b:
         e7:3e:a3:57:03:fc:00:f8:cf:3c:49:bc:c4:67:49:9d:7e:54:
         02:88:23:4c:4c:e8:e7:e5:db:65:38:40:d5:b0:fb:6d:b6:d4:
         e7:d8:43:8c:44:1e:b4:4c:87:ab:7a:f1:ff:23:c4:f3:9c:08:
         d4:28:ca:52:63:99:0c:ba:5f:14:16:7a:74:54:1c:58:a1:46:
         85:7a:9f:7c:37:36:a2:61:dc:dd:23:2b:f2:cd:1f:3c:a7:69:
         c9:d7:df:a1
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICAqswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw
NzMzNTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI5MzQ1RUJDMkJENjYy
NkZGREVCQ0I3QUU4MUJGRUM3RTRCNTY2REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJaJMXxkiBga1oWAtnwLa7ryvH4gQYePxv01PBq++y/rf0a8Dv
Twz+lV87ygIIvMnwNSt1zyXn6iibAfYwliSLqwZv0yTZRPVt7AYTBMJwTRIE6dE2
CbB9AU9RZ8aYZbTKdYJ+E50Unr7CpmV+Lv7x+3WOwj/vafiVeEdEtl6ViMv73enG
UkD+bFrv/FPe93dCLfr0Zz8jMQ9ExdTqAm71+sqK+WJr1n2wPk8ew1w0lhniUEmH
Eyt8jm9lO98vgV51uIyuHFL6GB13URGu9Wh7krEmB0WuVmT7sWbiIsvNMr+jQEMD
CKWW5gXj/Pkv1sLe3TtQTeqMkRHGMUmv8oQfAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUKTRevCvWYm/968t66Bv+x+S1Zt8wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL0tUUmV2Q3ZXWW1fOTY4dDY2QnYteC1TMVp0OC5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDaLDANBgkqhkiG9w0BAQsFAAOCAQEA
qhY3DFcw52D18Pax1CPfYfUXUeRTTO9kg/tK/VPL9uSYKmQ1XlNr72p+KS5ESq0N
Mt80/XWPqkbBhBDl9J/sg7XzIat5lwVCYi+OPXqVRqte2y9Oj91tvn06gkoN5SYM
ZIHWdtsTGIs6QQD/NhlbI3tmRHdZWnfl0Yhe9u7ej9z8BBcRIlkiBpuxO37CHEUr
rs7IWXr35BTueDyq00h4wjqb5z6jVwP8APjPPEm8xGdJnX5UAogjTEzo5+XbZThA
1bD7bbbU59hDjEQetEyHq3rx/yPE85wI1CjKUmOZDLpfFBZ6dFQcWKFGhXqffDc2
omHc3SMr8s0fPKdpydffoQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:42 2026 by rpki-client