Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20189/XP8a4ptt_tAg94YQilfYbg-OaX4.roa
File:                     XP8a4ptt_tAg94YQilfYbg-OaX4.roa (raw, json)
Hash identifier:          i8a4q9DJMTBBD9ae1FcxnDb1bslxsujZxRYCd5gaMZw=
Subject key identifier:   5C:FF:1A:E2:9B:6D:FE:D0:20:F7:86:10:8A:57:D8:6E:0F:8E:69:7E
Certificate issuer:       /CN=E4543A3366CE0D6A5DA4DD46307D2993DDA026B4
Certificate serial:       3C
Authority key identifier: E4:54:3A:33:66:CE:0D:6A:5D:A4:DD:46:30:7D:29:93:DD:A0:26:B4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/XP8a4ptt_tAg94YQilfYbg-OaX4.roa
Signing time:             Tue 31 Mar 2026 08:18:35 +0000
ROA not before:           Tue 31 Mar 2026 08:18:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     146981
IP address blocks:        103.189.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4543A3366CE0D6A5DA4DD46307D2993DDA026B4
        Validity
            Not Before: Mar 31 08:18:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5CFF1AE29B6DFED020F786108A57D86E0F8E697E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:6d:9b:c8:e7:64:f6:bc:af:52:97:6d:16:
                    41:78:57:24:b6:6a:52:5c:d6:f3:51:23:2b:26:03:
                    17:90:89:bf:ea:89:d1:2f:32:dd:50:2a:96:07:0c:
                    6b:b4:ce:5d:e4:75:f7:68:c4:10:23:e1:f7:42:d4:
                    45:5e:33:7b:3f:4f:be:69:95:af:a2:ee:db:f9:17:
                    f6:8b:02:bc:44:ba:69:d2:8f:49:e3:bf:60:9a:84:
                    0c:aa:5d:77:39:a7:82:2d:58:42:05:89:79:0b:cd:
                    40:24:ff:e3:3a:39:d4:95:ac:9e:32:14:53:57:a3:
                    16:f4:d3:09:a5:40:40:cc:ae:e3:5b:15:68:5d:4e:
                    bd:7c:2a:71:b2:42:e6:30:62:58:03:08:eb:2d:ff:
                    fc:a2:02:5f:05:73:e8:8f:ad:89:45:29:90:91:e8:
                    a0:06:96:d2:74:5c:a1:be:fa:88:60:47:06:c8:fd:
                    fa:4d:80:83:8f:82:19:ab:65:99:ac:26:33:97:7a:
                    99:87:54:7f:29:21:20:b1:67:c5:6d:35:d7:b2:14:
                    05:6c:9d:3d:98:9d:52:8d:c1:ab:cd:fc:cb:c7:23:
                    d1:7f:5c:07:73:69:f0:eb:5f:4f:55:91:42:36:e2:
                    f8:e1:55:36:b8:ed:63:3b:0e:29:41:ab:d8:5d:04:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FF:1A:E2:9B:6D:FE:D0:20:F7:86:10:8A:57:D8:6E:0F:8E:69:7E
            X509v3 Authority Key Identifier:
                keyid:E4:54:3A:33:66:CE:0D:6A:5D:A4:DD:46:30:7D:29:93:DD:A0:26:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/XP8a4ptt_tAg94YQilfYbg-OaX4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:04:26:f8:73:cc:92:87:f2:1e:30:09:ad:19:10:ac:80:e2:
         ad:e4:f8:7c:22:36:a6:01:5c:61:80:01:c5:ca:1a:35:6c:46:
         99:2e:03:b2:6a:aa:14:19:69:32:cf:c5:4e:bc:d4:1d:10:68:
         03:99:68:7d:2e:00:40:61:f6:c3:33:b2:ef:14:60:3a:0c:77:
         35:e4:67:cf:7f:dc:dc:8c:08:4f:21:a2:a0:c2:91:44:76:1d:
         c0:a0:07:98:36:e3:62:5d:8e:59:1b:24:d5:9b:f9:4d:01:09:
         31:e6:c7:db:61:6d:da:8b:30:3f:39:4a:3d:b7:53:35:85:fa:
         aa:b3:f2:78:09:21:01:ae:e5:24:0a:c8:0f:05:3a:7d:79:b8:
         9a:8d:8a:97:ff:c2:f8:22:b1:6f:e4:cd:cc:e0:17:51:86:11:
         29:7c:3e:a1:b0:b2:ec:0b:d6:2c:94:5d:e2:9b:03:7c:3c:48:
         15:39:53:3d:ad:2c:ec:78:ae:d8:74:f9:4c:97:d2:cb:21:39:
         14:0e:12:e2:c2:09:c8:0f:44:e9:8a:ad:dd:df:01:24:4d:b3:
         bb:ec:63:b3:4f:d6:5a:53:f7:26:f8:bc:e2:27:b2:93:0e:28:
         0d:08:70:60:e0:f6:85:17:5e:6d:d1:85:e6:67:f6:5a:2b:f8:
         cf:01:8b:bf
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNDU0
M0EzMzY2Q0UwRDZBNURBNERENDYzMDdEMjk5M0REQTAyNkI0MB4XDTI2MDMzMTA4
MTgzNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNUNGRjFBRTI5QjZERkVE
MDIwRjc4NjEwOEE1N0Q4NkUwRjhFNjk3RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKqebZvI52T2vK9Sl20WQXhXJLZqUlzW81EjKyYDF5CJv+qJ0S8y
3VAqlgcMa7TOXeR192jEECPh90LURV4zez9PvmmVr6Lu2/kX9osCvES6adKPSeO/
YJqEDKpddzmngi1YQgWJeQvNQCT/4zo51JWsnjIUU1ejFvTTCaVAQMyu41sVaF1O
vXwqcbJC5jBiWAMI6y3//KICXwVz6I+tiUUpkJHooAaW0nRcob76iGBHBsj9+k2A
g4+CGatlmawmM5d6mYdUfykhILFnxW0117IUBWydPZidUo3Bq838y8cj0X9cB3Np
8OtfT1WRQjbi+OFVNrjtYzsOKUGr2F0EVucCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBRc/xrim23+0CD3hhCKV9huD45pfjAfBgNVHSMEGDAWgBTkVDozZs4Nal2k3UYw
fSmT3aAmtDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxODkvNUZRNk0yYk9EV3BkcE4xR01IMHBrOTJnSnJRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNUZRNk0yYk9EV3BkcE4xR01IMHBr
OTJnSnJRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMTg5L1hQOGE0cHR0X3RBZzk0WVFpbGZZYmctT2FYNC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnvbwwDQYJKoZIhvcNAQELBQAD
ggEBADsEJvhzzJKH8h4wCa0ZEKyA4q3k+HwiNqYBXGGAAcXKGjVsRpkuA7JqqhQZ
aTLPxU681B0QaAOZaH0uAEBh9sMzsu8UYDoMdzXkZ89/3NyMCE8hoqDCkUR2HcCg
B5g242JdjlkbJNWb+U0BCTHmx9thbdqLMD85Sj23UzWF+qqz8ngJIQGu5SQKyA8F
On15uJqNipf/wvgisW/kzczgF1GGESl8PqGwsuwL1iyUXeKbA3w8SBU5Uz2tLOx4
rth0+UyX0sshORQOEuLCCcgPROmKrd3fASRNs7vsY7NP1lpT9yb4vOInspMOKA0I
cGDg9oUXXm3RheZn9lor+M8Bi78=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:54 2026 by rpki-client