Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/t5X5N7Xbga6YUAvSVNq_pudvd00.roa
File:                     t5X5N7Xbga6YUAvSVNq_pudvd00.roa (raw, json)
Hash identifier:          yHzXqH+S5ev7JrvX7QC7TAG1yyX4LqZE7QDSrZZqQTc=
Subject key identifier:   B7:95:F9:37:B5:DB:81:AE:98:50:0B:D2:54:DA:BF:A6:E7:6F:77:4D
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0283
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/t5X5N7Xbga6YUAvSVNq_pudvd00.roa
Signing time:             Tue 31 Mar 2026 07:33:35 +0000
ROA not before:           Tue 31 Mar 2026 07:33:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        122.16.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B795F937B5DB81AE98500BD254DABFA6E76F774D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:3e:43:d4:f0:39:ef:06:71:be:42:5e:ea:
                    c2:f8:3f:65:01:54:c9:be:70:91:79:4a:c9:c8:d6:
                    5b:93:db:a3:aa:b9:d5:dd:00:11:23:37:99:8b:eb:
                    55:58:7a:e4:5c:08:47:fa:41:23:d3:80:89:55:ab:
                    25:14:d8:48:c2:cd:49:5a:a8:8d:7d:68:6d:82:99:
                    f9:0e:29:6d:45:51:93:83:2e:02:40:38:b3:cc:d0:
                    78:d0:09:0a:48:9d:b6:97:b5:13:7e:25:cf:bb:48:
                    c6:91:90:05:93:07:97:72:1c:b2:ed:0e:fc:f1:b5:
                    e8:52:8a:e7:37:84:b0:3e:27:85:a0:72:45:9a:72:
                    74:11:93:21:cd:4a:46:e1:f1:29:41:c6:05:e3:4d:
                    25:f0:4d:49:ae:a4:8e:a8:d0:47:79:7c:17:b1:b4:
                    ee:8a:62:8f:a5:e9:b2:5b:cd:85:9a:08:22:51:35:
                    88:4c:cd:f8:b7:6e:c3:06:12:66:69:50:6f:4b:71:
                    97:c9:35:f8:13:95:7e:97:57:1d:d2:6a:58:34:35:
                    64:c5:24:0a:79:7a:c9:82:7a:6d:98:67:ab:32:c5:
                    4e:f9:08:5a:50:89:21:8a:72:d8:2e:65:de:60:16:
                    e0:43:4a:ff:9d:1b:69:66:07:0f:c1:b8:4b:c3:0b:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:95:F9:37:B5:DB:81:AE:98:50:0B:D2:54:DA:BF:A6:E7:6F:77:4D
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/t5X5N7Xbga6YUAvSVNq_pudvd00.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.16.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:86:3f:a6:79:54:63:95:8d:9f:e1:5a:60:ce:05:ff:71:
         f2:21:20:69:49:f0:7f:68:67:8b:96:9d:63:13:2b:ae:30:6b:
         f7:c2:58:bb:ad:2b:c8:31:12:73:03:88:1b:37:61:df:df:cc:
         ce:e5:b1:12:8d:89:64:81:12:b5:c6:92:5b:55:f4:4f:a4:fd:
         78:0f:40:d8:12:36:b4:58:a9:c1:15:bd:27:9d:64:ca:fa:0e:
         14:c2:34:d5:bb:c5:b0:b0:ae:8a:f9:72:0c:73:be:c8:fa:c8:
         72:95:76:f9:50:cd:f1:20:e7:b8:09:70:c7:d8:8e:e2:e2:61:
         2b:7f:fa:85:f9:fe:e6:72:cc:04:b9:40:fa:c4:6e:30:ee:d5:
         7d:62:c3:cc:17:24:95:1a:36:4d:24:25:8d:c8:bf:f3:95:99:
         06:85:bc:6c:ac:e2:46:7d:35:22:e9:79:2e:b6:05:12:a9:25:
         d3:97:66:eb:3a:df:1e:95:8e:2f:a2:a0:e0:ed:b4:53:c2:75:
         61:7e:ba:d9:ff:fd:db:19:51:c6:cf:4c:97:9c:91:b0:dc:db:
         f4:89:7a:6c:55:90:b8:8e:3e:ce:2f:a0:52:bf:37:44:9c:7f:
         97:b6:31:84:68:a9:f1:c6:63:0e:17:30:97:e3:6a:5e:de:98:
         ac:9a:f9:a2
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw
NzMzMzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI3OTVGOTM3QjVEQjgx
QUU5ODUwMEJEMjU0REFCRkE2RTc2Rjc3NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMVT5D1PA57wZxvkJe6sL4P2UBVMm+cJF5SsnI1luT26OqudXd
ABEjN5mL61VYeuRcCEf6QSPTgIlVqyUU2EjCzUlaqI19aG2CmfkOKW1FUZODLgJA
OLPM0HjQCQpInbaXtRN+Jc+7SMaRkAWTB5dyHLLtDvzxtehSiuc3hLA+J4WgckWa
cnQRkyHNSkbh8SlBxgXjTSXwTUmupI6o0Ed5fBextO6KYo+l6bJbzYWaCCJRNYhM
zfi3bsMGEmZpUG9LcZfJNfgTlX6XVx3Salg0NWTFJAp5esmCem2YZ6syxU75CFpQ
iSGKctguZd5gFuBDSv+dG2lmBw/BuEvDC0ELAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUt5X5N7Xbga6YUAvSVNq/pudvd00wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL3Q1WDVON1hiZ2E2WVVBdlNWTnFfcHVkdmQwMC5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwR6EDANBgkqhkiG9w0BAQsFAAOCAQEA
PRWGP6Z5VGOVjZ/hWmDOBf9x8iEgaUnwf2hni5adYxMrrjBr98JYu60ryDEScwOI
Gzdh39/MzuWxEo2JZIEStcaSW1X0T6T9eA9A2BI2tFipwRW9J51kyvoOFMI01bvF
sLCuivlyDHO+yPrIcpV2+VDN8SDnuAlwx9iO4uJhK3/6hfn+5nLMBLlA+sRuMO7V
fWLDzBcklRo2TSQljci/85WZBoW8bKziRn01Iul5LrYFEqkl05dm6zrfHpWOL6Kg
4O20U8J1YX662f/92xlRxs9Ml5yRsNzb9Il6bFWQuI4+zi+gUr83RJx/l7YxhGip
8cZjDhcwl+NqXt6YrJr5og==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:29 2026 by rpki-client