Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/bCyr6NbKY170VVkXoewfJKzc0Ug.roa
File:                     bCyr6NbKY170VVkXoewfJKzc0Ug.roa (raw, json)
Hash identifier:          5yfZ5VTYAOLxbE/lBI0TtXevwKIdSD+Z+57dI1jAfpo=
Subject key identifier:   6C:2C:AB:E8:D6:CA:63:5E:F4:55:59:17:A1:EC:1F:24:AC:DC:D1:48
Certificate issuer:       /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial:       53
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/bCyr6NbKY170VVkXoewfJKzc0Ug.roa
Signing time:             Tue 31 Mar 2026 07:49:45 +0000
ROA not before:           Tue 31 Mar 2026 07:49:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18068
IP address blocks:        133.88.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
        Validity
            Not Before: Mar 31 07:49:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6C2CABE8D6CA635EF4555917A1EC1F24ACDCD148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:e2:71:28:c5:13:2a:93:5a:af:b2:69:92:
                    10:a2:0b:10:08:69:e2:54:e9:2b:8d:62:6f:e7:8a:
                    4d:ec:4b:0f:fb:79:d7:e7:97:f7:d6:01:53:cf:ab:
                    1d:7b:30:32:cb:0e:a2:7f:ea:b9:b2:42:42:fd:fb:
                    78:2f:1b:87:0f:95:5e:96:5e:65:a7:8a:57:68:1b:
                    67:4d:10:a2:5e:8e:08:c1:32:42:08:3f:b1:7c:fd:
                    34:ee:2b:54:1a:e7:83:7b:71:e2:6f:42:e3:0d:da:
                    62:aa:1b:9d:8f:06:5d:cf:2b:47:98:34:76:1f:c4:
                    ab:dc:8f:11:81:27:c9:bd:dc:82:d9:8c:96:35:21:
                    ca:f4:a4:33:e0:02:6c:16:11:eb:fe:c0:dc:6e:99:
                    29:51:f5:d2:89:08:fa:cc:40:3d:5d:a1:b0:0c:00:
                    5c:c6:cf:22:d0:6a:2a:c6:81:e1:48:f4:83:a7:4c:
                    ad:91:6b:53:c3:b3:2d:7b:b9:54:87:2d:2e:57:23:
                    a4:3c:14:1d:75:b6:94:21:b8:cb:a5:98:db:1f:b1:
                    4d:29:b0:8b:37:e3:68:66:f8:43:67:10:9f:9a:94:
                    5c:6b:9f:d5:6c:ef:02:dd:4c:7e:38:18:48:b5:31:
                    9a:8b:bf:50:53:fa:24:82:73:16:d5:dd:97:95:d6:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2C:AB:E8:D6:CA:63:5E:F4:55:59:17:A1:EC:1F:24:AC:DC:D1:48
            X509v3 Authority Key Identifier:
                keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/bCyr6NbKY170VVkXoewfJKzc0Ug.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:f2:a8:48:bd:8e:6e:db:18:23:c7:cf:68:ba:69:0b:7e:
         c5:54:72:2f:f6:46:e2:24:07:b6:36:3b:3f:91:93:29:57:e1:
         95:e6:de:39:93:20:45:c0:c5:5e:80:39:96:4f:c3:b7:6b:0d:
         05:23:02:c5:f5:06:36:fa:40:f3:1e:2d:5c:ab:42:7b:32:a0:
         ff:e1:ad:c7:c4:ae:5e:da:a4:fa:42:38:c8:8b:d3:69:9d:72:
         fc:04:bb:f4:29:97:64:37:f5:2c:a1:99:cb:ac:ac:3b:ee:63:
         20:2c:5c:d8:d3:64:5a:cf:c6:00:fb:57:cc:24:ec:2c:db:6b:
         63:47:45:6d:25:d6:30:d2:24:0a:b3:59:49:70:64:08:6f:1b:
         ad:a8:3c:06:ae:02:44:b9:29:69:c7:24:32:d7:f8:0d:c6:28:
         3d:2b:c1:f6:bd:bd:1a:a0:f5:10:09:40:9a:95:c8:1e:49:5c:
         78:fb:fc:fa:aa:c3:b8:10:cb:4a:13:96:fc:34:2c:4d:e7:b2:
         9e:18:35:d0:93:eb:32:38:9f:c3:08:7d:6b:b9:eb:a8:d2:4b:
         6e:e3:89:4c:55:ca:5f:fc:64:d5:c1:8a:21:9e:7b:0b:c2:57:
         1b:ff:c3:87:af:7f:d7:d4:cb:11:4a:93:07:21:f3:b5:17:5f:
         27:1f:04:cd
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw
N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI2MDMzMTA3
NDk0NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNkMyQ0FCRThENkNBNjM1
RUY0NTU1OTE3QTFFQzFGMjRBQ0RDRDE0ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALU54nEoxRMqk1qvsmmSEKILEAhp4lTpK41ib+eKTexLD/t51+eX
99YBU8+rHXswMssOon/qubJCQv37eC8bhw+VXpZeZaeKV2gbZ00Qol6OCMEyQgg/
sXz9NO4rVBrng3tx4m9C4w3aYqobnY8GXc8rR5g0dh/Eq9yPEYEnyb3cgtmMljUh
yvSkM+ACbBYR6/7A3G6ZKVH10okI+sxAPV2hsAwAXMbPItBqKsaB4Uj0g6dMrZFr
U8OzLXu5VIctLlcjpDwUHXW2lCG4y6WY2x+xTSmwizfjaGb4Q2cQn5qUXGuf1Wzv
At1MfjgYSLUxmou/UFP6JIJzFtXdl5XWn7kCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBRsLKvo1spjXvRVWReh7B8krNzRSDAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0
fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY
blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDc1L2JDeXI2TmJLWTE3MFZWa1hvZXdmSkt6YzBVZy5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKFWAwwDQYJKoZIhvcNAQELBQAD
ggEBAFoF8qhIvY5u2xgjx89oumkLfsVUci/2RuIkB7Y2Oz+RkylX4ZXm3jmTIEXA
xV6AOZZPw7drDQUjAsX1Bjb6QPMeLVyrQnsyoP/hrcfErl7apPpCOMiL02mdcvwE
u/Qpl2Q39SyhmcusrDvuYyAsXNjTZFrPxgD7V8wk7Czba2NHRW0l1jDSJAqzWUlw
ZAhvG62oPAauAkS5KWnHJDLX+A3GKD0rwfa9vRqg9RAJQJqVyB5JXHj7/Pqqw7gQ
y0oTlvw0LE3nsp4YNdCT6zI4n8MIfWu566jSS27jiUxVyl/8ZNXBiiGeewvCVxv/
w4evf9fUyxFKkwch87UXXycfBM0=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:53 2026 by rpki-client