Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/EyLfunBCtzVBSRG-D2eaGv9yXS0.roa
File:                     EyLfunBCtzVBSRG-D2eaGv9yXS0.roa (raw, json)
Hash identifier:          QYFT45QFtIAdEku0HMQRsf/bwPTdcApcjHi/eopsriA=
Subject key identifier:   13:22:DF:BA:70:42:B7:35:41:49:11:BE:0F:67:9A:1A:FF:72:5D:2D
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       5F
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/EyLfunBCtzVBSRG-D2eaGv9yXS0.roa
Signing time:             Tue 31 Mar 2026 08:29:37 +0000
ROA not before:           Tue 31 Mar 2026 08:29:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7511
IP address blocks:        203.111.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Mar 31 08:29:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1322DFBA7042B735414911BE0F679A1AFF725D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:ba:4b:31:ab:fb:65:a0:c9:12:1f:e5:79:
                    f6:e5:99:fa:af:bd:a2:4e:db:87:73:a5:88:20:22:
                    f5:5c:65:09:df:6d:4b:7b:21:ac:34:48:4b:65:6c:
                    fb:ec:ce:a6:47:d2:4a:b0:b1:00:d6:fa:cf:3f:05:
                    72:7c:a8:95:65:34:25:15:e2:bd:2f:a4:fa:6d:83:
                    38:92:c4:20:f7:a9:a1:7f:5d:9f:1a:cc:2d:e1:10:
                    d8:31:60:3d:da:67:ec:25:2e:3f:c2:72:11:e2:ce:
                    07:80:12:57:59:c2:3f:a5:15:c7:53:6f:c4:5a:7c:
                    14:14:b9:44:19:05:b3:c6:5d:16:f9:0a:8e:4d:ab:
                    a7:75:6a:cf:b1:c7:1f:a4:fe:7c:b4:f7:8b:a7:f9:
                    70:49:1a:74:91:52:1d:ea:8c:d4:ac:38:88:55:51:
                    b0:31:82:6e:5c:3e:73:72:2b:b4:7e:5d:d4:ed:2c:
                    67:4c:51:5b:9e:6d:21:51:5e:1d:58:88:31:1a:4f:
                    91:61:05:d0:4a:48:b7:73:44:a0:b4:20:b1:87:3f:
                    8b:ac:02:77:d2:6e:34:8e:45:83:00:d7:b0:cf:59:
                    d4:55:62:e8:e1:3b:01:4f:4d:4b:36:a0:20:69:43:
                    0e:79:b7:41:f9:a1:44:e0:4f:9b:98:0d:52:3f:ce:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:22:DF:BA:70:42:B7:35:41:49:11:BE:0F:67:9A:1A:FF:72:5D:2D
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/EyLfunBCtzVBSRG-D2eaGv9yXS0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.111.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:52:c0:a8:cc:d1:cd:3a:46:cc:ea:cd:fd:1b:9e:e0:89:ce:
         94:fa:f8:2b:fc:44:6a:01:37:d5:d1:c2:76:09:fb:c9:11:b4:
         35:2c:0d:e5:61:9a:6c:d1:4b:8a:84:5f:c9:2b:d0:a1:73:ea:
         25:26:f2:fb:af:94:04:35:38:c9:d8:2e:f9:3a:bd:44:0e:16:
         bf:08:e6:98:31:74:95:74:c3:0e:36:6f:69:19:9b:f6:01:a3:
         a2:12:a7:e8:55:64:a7:5e:37:f6:7e:9a:ae:17:b0:5c:40:a1:
         e6:3c:02:96:0a:41:24:40:17:db:95:c3:25:15:22:53:a8:38:
         a1:95:a1:fc:29:5c:67:ed:b1:fe:cf:d6:d7:17:f5:37:6f:31:
         a1:2b:23:66:c8:ce:36:2b:c6:25:a8:69:18:bd:d4:71:fe:4a:
         b7:30:b6:56:2d:c9:f3:cf:8b:ac:39:75:73:46:a4:25:a0:91:
         c4:e5:97:d8:a7:5d:71:0d:26:71:b7:3f:4d:f3:c1:4a:c2:98:
         08:85:c2:40:13:71:28:a2:9f:cd:a8:7d:56:7f:bd:fb:63:8e:
         55:78:6f:79:45:df:56:30:e0:35:eb:3d:13:6a:ef:34:9e:3f:
         b9:b9:9d:17:29:b9:b2:7d:c9:45:ac:be:0f:d7:4a:73:ed:76:
         1a:c1:7a:5a
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3NjQy
QTA3RDlBQzlEMjI3RUE0MkY3OUU2RDEzMUNCMUE5MjBFRENFMB4XDTI2MDMzMTA4
MjkzN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTMyMkRGQkE3MDQyQjcz
NTQxNDkxMUJFMEY2NzlBMUFGRjcyNUQyRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALi/uksxq/tloMkSH+V59uWZ+q+9ok7bh3OliCAi9VxlCd9tS3sh
rDRIS2Vs++zOpkfSSrCxANb6zz8FcnyolWU0JRXivS+k+m2DOJLEIPepoX9dnxrM
LeEQ2DFgPdpn7CUuP8JyEeLOB4ASV1nCP6UVx1NvxFp8FBS5RBkFs8ZdFvkKjk2r
p3Vqz7HHH6T+fLT3i6f5cEkadJFSHeqM1Kw4iFVRsDGCblw+c3IrtH5d1O0sZ0xR
W55tIVFeHViIMRpPkWEF0EpIt3NEoLQgsYc/i6wCd9JuNI5FgwDXsM9Z1FVi6OE7
AU9NSzagIGlDDnm3QfmhROBPm5gNUj/OFCECAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQTIt+6cEK3NUFJEb4PZ5oa/3JdLTAfBgNVHSMEGDAWgBR2QqB9msnSJ+pC955t
ExyxqSDtzjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMzEvZGtLZ2ZackowaWZxUXZlZWJSTWNzYWtnN2M0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZGtLZ2ZackowaWZxUXZlZWJSTWNz
YWtnN2M0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDMxL0V5TGZ1bkJDdHpWQlNSRy1EMmVhR3Y5eVhTMC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLb8AwDQYJKoZIhvcNAQELBQAD
ggEBABxSwKjM0c06Rszqzf0bnuCJzpT6+Cv8RGoBN9XRwnYJ+8kRtDUsDeVhmmzR
S4qEX8kr0KFz6iUm8vuvlAQ1OMnYLvk6vUQOFr8I5pgxdJV0ww42b2kZm/YBo6IS
p+hVZKdeN/Z+mq4XsFxAoeY8ApYKQSRAF9uVwyUVIlOoOKGVofwpXGftsf7P1tcX
9TdvMaErI2bIzjYrxiWoaRi91HH+SrcwtlYtyfPPi6w5dXNGpCWgkcTll9inXXEN
JnG3P03zwUrCmAiFwkATcSiin82ofVZ/vftjjlV4b3lF31Yw4DXrPRNq7zSeP7m5
nRcpubJ9yUWsvg/XSnPtdhrBelo=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:18 2026 by rpki-client