Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20217/VtkAbdb0yLUofq_h_6iG5JnJa9I.roa
File:                     VtkAbdb0yLUofq_h_6iG5JnJa9I.roa (raw, json)
Hash identifier:          ZxmpFsxz1YK3ukt6H7/5HO9BMpOyzL7pK2r05KqVw/k=
Subject key identifier:   56:D9:00:6D:D6:F4:C8:B5:28:7E:AF:E1:FF:A8:86:E4:99:C9:6B:D2
Certificate issuer:       /CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
Certificate serial:       31
Authority key identifier: 44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/VtkAbdb0yLUofq_h_6iG5JnJa9I.roa
Signing time:             Tue 31 Mar 2026 08:34:54 +0000
ROA not before:           Tue 31 Mar 2026 08:34:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     150362
IP address blocks:        103.149.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
        Validity
            Not Before: Mar 31 08:34:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=56D9006DD6F4C8B5287EAFE1FFA886E499C96BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:eb:e8:59:35:88:96:80:f2:41:fb:12:9f:
                    be:1a:92:cc:10:8e:d8:87:8e:0f:38:1b:01:38:4e:
                    9d:b8:6a:60:cc:cb:12:f3:0b:b7:ff:68:8e:1d:f5:
                    75:5f:20:8e:d4:9c:d7:c8:8c:7e:11:5d:6e:d3:27:
                    08:76:fc:9d:69:41:e7:e0:7f:95:50:49:f7:c4:9d:
                    99:34:2b:54:c7:9a:6c:c1:1e:80:85:4e:66:76:cf:
                    ed:fa:f9:3a:fb:0e:c8:38:6b:0f:8a:7a:c9:8b:15:
                    38:92:af:6f:bf:8b:d5:2d:5a:b2:1d:c6:0c:9b:66:
                    24:dc:82:22:6f:39:98:5e:2a:cd:f4:4a:19:58:31:
                    f1:6c:b8:db:a1:d4:86:42:23:50:2a:40:5e:6b:b8:
                    26:2f:a2:7f:5b:1e:7a:71:ac:3f:a0:6c:8d:03:36:
                    dd:b2:3b:e4:a7:dd:cb:75:0e:04:0c:e3:18:8e:79:
                    51:62:e5:ea:b4:6b:e7:8c:12:a5:88:89:fb:ed:a4:
                    b4:22:96:cd:fc:84:88:60:60:97:0b:70:83:32:be:
                    7e:c4:8f:fa:51:f6:b6:87:2b:ab:41:d7:e2:b8:9b:
                    a7:a5:f7:2f:81:55:2c:68:a5:ed:b3:7b:52:64:a5:
                    50:91:b7:f0:b9:96:dd:5a:a7:90:84:c5:e3:83:d0:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D9:00:6D:D6:F4:C8:B5:28:7E:AF:E1:FF:A8:86:E4:99:C9:6B:D2
            X509v3 Authority Key Identifier:
                keyid:44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/VtkAbdb0yLUofq_h_6iG5JnJa9I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:88:b3:3b:65:48:42:81:0d:22:ad:66:b2:8a:0c:50:fd:78:
         a2:63:65:a9:e8:11:df:6c:1b:6c:5e:75:ce:91:39:15:33:8f:
         06:8f:1b:3b:f6:18:c1:be:98:91:13:3a:a3:61:ab:ef:ce:cf:
         47:a0:ee:17:4e:49:a7:2e:8d:a5:a5:3b:0f:48:96:71:53:cc:
         22:4c:98:4b:55:73:ae:8e:3a:14:3c:5b:54:91:d5:de:fc:d5:
         a4:f1:69:fe:cb:c2:c1:f0:2e:3a:9a:64:44:69:3e:68:56:46:
         1d:bd:b0:c1:0f:d2:d2:df:ff:0b:14:e9:44:09:c8:be:c7:85:
         fe:74:4a:86:17:f9:89:f8:d5:11:01:36:8e:d2:39:b2:52:f7:
         99:6b:f8:85:6c:b3:0e:b9:20:fd:77:d8:fc:4e:4a:20:3f:5c:
         c3:c9:e3:ff:99:4f:92:01:ea:e0:5c:ef:20:cf:8b:60:f7:64:
         32:42:51:af:31:da:9c:76:a9:de:b1:15:fb:ab:57:7b:2d:0f:
         b9:05:e1:03:ce:59:b7:6c:e8:1b:45:0c:5d:d1:1a:b0:cd:bc:
         01:40:a9:c4:26:c8:86:ec:c7:6c:05:67:dd:0f:e1:81:d6:91:
         e7:05:e1:da:05:72:ab:cd:f3:ac:8e:3b:86:10:b8:81:af:9d:
         7e:aa:73:3a
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0NDZD
NjVCN0FGOTE3QUZGQTc0RjZCMDlFNDM3QUMwRjM2NTM3NDFEMB4XDTI2MDMzMTA4
MzQ1NFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTZEOTAwNkRENkY0QzhC
NTI4N0VBRkUxRkZBODg2RTQ5OUM5NkJEMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMEt6+hZNYiWgPJB+xKfvhqSzBCO2IeODzgbAThOnbhqYMzLEvML
t/9ojh31dV8gjtSc18iMfhFdbtMnCHb8nWlB5+B/lVBJ98SdmTQrVMeabMEegIVO
ZnbP7fr5OvsOyDhrD4p6yYsVOJKvb7+L1S1ash3GDJtmJNyCIm85mF4qzfRKGVgx
8Wy426HUhkIjUCpAXmu4Ji+if1seenGsP6BsjQM23bI75Kfdy3UOBAzjGI55UWLl
6rRr54wSpYiJ++2ktCKWzfyEiGBglwtwgzK+fsSP+lH2tocrq0HX4ribp6X3L4FV
LGil7bN7UmSlUJG38LmW3VqnkITF44PQa1kCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBRW2QBt1vTItSh+r+H/qIbkmclr0jAfBgNVHSMEGDAWgBREbGW3r5F6/6dPawnk
N6wPNlN0HTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMTcvUkd4bHQ2LVJldi1uVDJzSjVEZXNEelpUZEIwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUkd4bHQ2LVJldi1uVDJzSjVEZXNE
elpUZEIwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjE3L1Z0a0FiZGIweUxVb2ZxX2hfNmlHNUpuSmE5SS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlQQwDQYJKoZIhvcNAQELBQAD
ggEBAH6IsztlSEKBDSKtZrKKDFD9eKJjZanoEd9sG2xedc6RORUzjwaPGzv2GMG+
mJETOqNhq+/Oz0eg7hdOSacujaWlOw9IlnFTzCJMmEtVc66OOhQ8W1SR1d781aTx
af7LwsHwLjqaZERpPmhWRh29sMEP0tLf/wsU6UQJyL7Hhf50SoYX+Yn41REBNo7S
ObJS95lr+IVssw65IP132PxOSiA/XMPJ4/+ZT5IB6uBc7yDPi2D3ZDJCUa8x2px2
qd6xFfurV3stD7kF4QPOWbds6BtFDF3RGrDNvAFAqcQmyIbsx2wFZ90P4YHWkecF
4doFcqvN86yOO4YQuIGvnX6qczo=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:56 2026 by rpki-client