Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/dFEggPODUdOBK63Yof4E27bfkcE.roa
File:                     dFEggPODUdOBK63Yof4E27bfkcE.roa (raw, json)
Hash identifier:          bXiDTlnVVg/OdrFbeX1jPsJGv9DVJJUVmxRvLIzTkNk=
Subject key identifier:   74:51:20:80:F3:83:51:D3:81:2B:AD:D8:A1:FE:04:DB:B6:DF:91:C1
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       5E
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/dFEggPODUdOBK63Yof4E27bfkcE.roa
Signing time:             Tue 31 Mar 2026 08:36:41 +0000
ROA not before:           Tue 31 Mar 2026 08:36:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        202.244.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Mar 31 08:36:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=74512080F38351D3812BADD8A1FE04DBB6DF91C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:49:6e:44:c5:72:62:38:a9:20:8b:83:0c:
                    29:ba:2d:1d:c1:f0:16:77:bc:7f:92:85:2d:11:df:
                    21:8c:86:2b:c8:73:a2:d7:f2:da:15:96:42:b7:08:
                    e4:bb:43:71:55:4f:66:9a:21:14:6b:b1:ed:95:48:
                    49:bc:06:77:09:d8:34:50:fb:cc:fe:56:7e:7c:e7:
                    d2:e4:36:0e:79:bd:f3:9e:b9:73:4c:96:53:48:87:
                    67:dc:e7:10:ef:f1:c0:c7:be:4e:6d:a8:39:f7:3f:
                    88:80:8a:f8:7c:cf:df:6f:00:42:af:28:95:71:74:
                    f6:ca:67:3a:ad:dd:3b:35:0b:68:36:a5:de:0f:51:
                    52:00:51:3a:55:98:f9:57:52:46:63:6b:e8:51:16:
                    51:70:a1:a7:40:a9:7c:e6:bb:b8:3e:d9:9e:63:7e:
                    86:5f:47:23:ff:d3:1a:f5:35:1b:96:3b:c9:58:8c:
                    a3:42:9a:00:11:e1:65:d7:a5:f5:e5:b8:73:78:80:
                    90:d0:32:97:85:6e:8f:8f:74:93:d0:9b:45:a7:f9:
                    40:c6:e5:02:38:a2:f7:d3:b2:3f:77:80:e2:1c:40:
                    ea:9d:31:34:ec:18:c2:9c:f0:8f:55:e4:8d:56:18:
                    e7:bb:8e:c1:52:3a:6c:1b:06:93:73:61:73:64:7d:
                    e0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:51:20:80:F3:83:51:D3:81:2B:AD:D8:A1:FE:04:DB:B6:DF:91:C1
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/dFEggPODUdOBK63Yof4E27bfkcE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.244.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:34:dc:37:a7:df:dc:3f:f5:c6:17:e0:81:de:9a:c0:86:8d:
         ce:8c:7e:7d:b5:40:2a:ff:78:ce:0e:48:2f:0c:d5:e1:ae:3c:
         b7:40:5f:7e:e4:2b:96:18:bf:db:71:35:ec:31:5e:a6:f4:1c:
         95:e5:7d:3b:a7:61:bd:c8:80:af:30:aa:89:b4:21:67:0b:d1:
         25:cd:16:c7:e0:74:c4:97:30:4d:82:71:ef:14:65:c4:b7:0f:
         da:a6:0b:64:98:fd:b8:c0:4d:4d:cd:37:c5:c6:4d:20:86:dc:
         6f:cd:1e:ec:b4:cf:9c:7f:a2:25:df:69:8a:f1:c7:94:0f:5e:
         97:73:e0:ce:e4:30:d6:6d:17:b5:06:ce:57:8d:74:61:16:b2:
         26:10:64:4f:ab:c9:bd:95:42:e1:2e:50:d7:0b:92:a4:ae:a3:
         37:bb:12:d1:9c:a2:82:44:e8:e3:56:bd:80:1f:97:1c:b7:90:
         b8:b2:d9:48:74:63:9d:fa:79:7b:02:fb:90:da:3b:4c:99:c7:
         b7:30:e2:f2:0f:0b:42:90:c2:55:43:ab:25:1b:60:39:54:b5:
         4c:b6:b9:29:be:34:61:cd:c7:a7:85:f2:d4:20:c6:fa:be:7f:
         c2:10:89:8e:9d:94:80:ef:22:db:b8:69:fc:3f:7b:ae:0f:30:
         fd:95:2b:19
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw
NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI2MDMzMTA4
MzY0MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzQ1MTIwODBGMzgzNTFE
MzgxMkJBREQ4QTFGRTA0REJCNkRGOTFDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMRcSW5ExXJiOKkgi4MMKbotHcHwFne8f5KFLRHfIYyGK8hzotfy
2hWWQrcI5LtDcVVPZpohFGux7ZVISbwGdwnYNFD7zP5Wfnzn0uQ2Dnm98565c0yW
U0iHZ9znEO/xwMe+Tm2oOfc/iICK+HzP328AQq8olXF09spnOq3dOzULaDal3g9R
UgBROlWY+VdSRmNr6FEWUXChp0CpfOa7uD7ZnmN+hl9HI//TGvU1G5Y7yViMo0Ka
ABHhZdel9eW4c3iAkNAyl4Vuj490k9CbRaf5QMblAjii99OyP3eA4hxA6p0xNOwY
wpzwj1XkjVYY57uOwVI6bBsGk3Nhc2R94CMCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBR0USCA84NR04Errdih/gTbtt+RwTAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi
JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM
N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkzNy9kRkVnZ1BPRFVkT0JLNjNZb2Y0RTI3YmZrY0Uucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByvTKMA0GCSqGSIb3DQEBCwUAA4IB
AQB2NNw3p9/cP/XGF+CB3prAho3OjH59tUAq/3jODkgvDNXhrjy3QF9+5CuWGL/b
cTXsMV6m9ByV5X07p2G9yICvMKqJtCFnC9ElzRbH4HTElzBNgnHvFGXEtw/apgtk
mP24wE1NzTfFxk0ghtxvzR7stM+cf6Il32mK8ceUD16Xc+DO5DDWbRe1Bs5XjXRh
FrImEGRPq8m9lULhLlDXC5KkrqM3uxLRnKKCROjjVr2AH5cct5C4stlIdGOd+nl7
AvuQ2jtMmce3MOLyDwtCkMJVQ6slG2A5VLVMtrkpvjRhzcenhfLUIMb6vn/CEImO
nZSA7yLbuGn8P3uuDzD9lSsZ
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:49 2026 by rpki-client