Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/oS7rqjWjpfgGo3Hdu9f_2-8r8LE.roa
File:                     oS7rqjWjpfgGo3Hdu9f_2-8r8LE.roa (raw, json)
Hash identifier:          Vk1/vlkCmXdl4FkJHDFvxV8goLQOETmiKxtAL/+kY1Q=
Subject key identifier:   A1:2E:EB:AA:35:A3:A5:F8:06:A3:71:DD:BB:D7:FF:DB:EF:2B:F0:B1
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       64
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/oS7rqjWjpfgGo3Hdu9f_2-8r8LE.roa
Signing time:             Tue 31 Mar 2026 08:29:39 +0000
ROA not before:           Tue 31 Mar 2026 08:29:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7511
IP address blocks:        210.237.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Mar 31 08:29:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A12EEBAA35A3A5F806A371DDBBD7FFDBEF2BF0B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:81:a9:83:5e:5c:ec:89:a8:7f:db:32:c4:
                    85:17:53:ed:7d:f5:9a:96:4e:7b:5d:c4:2f:cb:4e:
                    27:c5:7e:cd:c6:fe:7c:0b:01:79:35:b3:b4:65:62:
                    98:1a:e2:ba:e6:4b:98:48:ca:47:c7:08:51:ac:84:
                    59:7b:2b:1c:80:75:5b:f4:bf:2a:6b:07:60:78:88:
                    79:6f:ae:6c:7b:ff:4c:a1:53:df:80:e6:64:0e:59:
                    42:60:d9:ce:f6:0b:79:85:a9:b2:ff:ad:0d:cc:fb:
                    2d:28:83:67:e3:62:d6:59:e2:6b:15:2f:a1:e2:79:
                    1e:b6:8b:aa:2c:e5:32:aa:15:a4:60:57:64:cd:14:
                    ab:e8:41:35:48:d5:8e:22:51:64:75:85:64:a7:e3:
                    94:09:52:8b:28:f7:87:de:db:c2:95:57:82:da:0c:
                    f4:6d:64:1b:46:f9:7c:56:fa:88:20:a2:93:85:0d:
                    da:ab:3e:55:06:14:86:52:43:c4:92:f2:82:83:80:
                    d2:5a:a9:db:f0:16:5a:b9:55:c3:3c:0f:63:6c:fd:
                    4f:0d:ef:d9:d9:b6:42:b2:dd:f0:ff:40:29:2e:e9:
                    56:1f:76:ce:98:89:e4:78:6b:a1:85:05:d0:34:ce:
                    10:da:a2:65:cb:36:22:46:34:f8:d2:52:92:94:16:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2E:EB:AA:35:A3:A5:F8:06:A3:71:DD:BB:D7:FF:DB:EF:2B:F0:B1
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/oS7rqjWjpfgGo3Hdu9f_2-8r8LE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.237.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3a:cb:d1:79:4d:e8:5a:fc:3f:12:9e:1c:3f:f7:03:04:07:86:
         49:f8:d3:f8:d8:e4:b2:98:1d:8f:71:89:42:18:24:50:31:ce:
         25:51:bd:c6:61:4a:fd:e9:f4:7a:e0:19:c3:92:3a:94:12:04:
         73:4f:ca:51:de:3c:3c:35:17:d5:58:82:9b:1e:38:8b:a4:d9:
         3d:32:07:73:54:75:27:89:e9:40:b7:50:61:09:85:7f:d6:f0:
         9e:8e:b3:2a:b3:32:4e:85:61:c5:dc:ad:20:60:93:93:f0:64:
         0d:31:2e:60:44:b2:e9:2f:09:c0:59:52:e3:1b:e2:1e:9c:d1:
         e4:32:46:fb:1f:93:3d:5a:8b:1c:7b:fb:cd:b5:e7:f4:cd:fe:
         2f:2e:ff:44:cb:4f:93:32:e5:45:11:2c:70:bf:63:35:6a:85:
         50:25:f8:46:70:04:34:95:c6:94:f8:14:3d:dd:f6:0f:d8:4f:
         03:62:8d:36:42:62:15:78:22:88:57:ae:8f:37:1f:73:a8:f7:
         f9:4f:00:f1:4a:2d:68:18:c2:02:52:2e:a4:c0:99:85:9e:f1:
         6f:53:f0:2b:0f:b4:ed:7c:5f:41:46:b1:ca:51:d5:7f:a0:2e:
         6f:4e:f1:24:fd:f0:98:16:bb:25:d9:cb:70:b6:7e:13:f6:58:
         37:6c:97:b0
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3NjQy
QTA3RDlBQzlEMjI3RUE0MkY3OUU2RDEzMUNCMUE5MjBFRENFMB4XDTI2MDMzMTA4
MjkzOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQTEyRUVCQUEzNUEzQTVG
ODA2QTM3MUREQkJEN0ZGREJFRjJCRjBCMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKp9gamDXlzsiah/2zLEhRdT7X31mpZOe13EL8tOJ8V+zcb+fAsB
eTWztGVimBriuuZLmEjKR8cIUayEWXsrHIB1W/S/KmsHYHiIeW+ubHv/TKFT34Dm
ZA5ZQmDZzvYLeYWpsv+tDcz7LSiDZ+Ni1lniaxUvoeJ5HraLqizlMqoVpGBXZM0U
q+hBNUjVjiJRZHWFZKfjlAlSiyj3h97bwpVXgtoM9G1kG0b5fFb6iCCik4UN2qs+
VQYUhlJDxJLygoOA0lqp2/AWWrlVwzwPY2z9Tw3v2dm2QrLd8P9AKS7pVh92zpiJ
5HhroYUF0DTOENqiZcs2IkY0+NJSkpQWUF8CAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBShLuuqNaOl+Aajcd271//b7yvwsTAfBgNVHSMEGDAWgBR2QqB9msnSJ+pC955t
ExyxqSDtzjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMzEvZGtLZ2ZackowaWZxUXZlZWJSTWNzYWtnN2M0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZGtLZ2ZackowaWZxUXZlZWJSTWNz
YWtnN2M0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDMxL29TN3JxaldqcGZnR28zSGR1OWZfMi04cjhMRS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXS7SAwDQYJKoZIhvcNAQELBQAD
ggEBADrL0XlN6Fr8PxKeHD/3AwQHhkn40/jY5LKYHY9xiUIYJFAxziVRvcZhSv3p
9HrgGcOSOpQSBHNPylHePDw1F9VYgpseOIuk2T0yB3NUdSeJ6UC3UGEJhX/W8J6O
syqzMk6FYcXcrSBgk5PwZA0xLmBEsukvCcBZUuMb4h6c0eQyRvsfkz1aixx7+821
5/TN/i8u/0TLT5My5UURLHC/YzVqhVAl+EZwBDSVxpT4FD3d9g/YTwNijTZCYhV4
IohXro83H3Oo9/lPAPFKLWgYwgJSLqTAmYWe8W9T8CsPtO18X0FGscpR1X+gLm9O
8ST98JgWuyXZy3C2fhP2WDdsl7A=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:16 2026 by rpki-client