Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/EDhsjE2FftK02nHKRbl_4Ryrkgw.roa
File:                     EDhsjE2FftK02nHKRbl_4Ryrkgw.roa (raw, json)
Hash identifier:          N17uj0k7iv8jy6Tjf9YfUd+TRe4DCiHfIcYefPvulLE=
Subject key identifier:   10:38:6C:8C:4D:85:7E:D2:B4:DA:71:CA:45:B9:7F:E1:1C:AB:92:0C
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       75
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/EDhsjE2FftK02nHKRbl_4Ryrkgw.roa
Signing time:             Tue 31 Mar 2026 08:07:19 +0000
ROA not before:           Tue 31 Mar 2026 08:07:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        14.102.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Mar 31 08:07:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=10386C8C4D857ED2B4DA71CA45B97FE11CAB920C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c4:e6:b2:51:94:1c:d5:51:f7:a6:a9:4b:4a:
                    c8:68:42:f9:62:4a:cb:23:b6:19:b6:c6:49:97:42:
                    79:32:11:7c:10:80:2e:37:67:67:01:80:13:09:07:
                    26:91:d6:f0:f7:93:ca:f8:d7:f3:f9:07:cf:3d:4e:
                    e1:74:64:cb:e1:d1:a5:f5:2d:02:98:60:34:0f:c4:
                    ab:3a:79:4e:37:73:9e:41:28:9d:60:7d:69:f2:65:
                    a9:11:1d:ff:f8:1e:34:f8:f4:63:ba:50:c1:53:b6:
                    56:02:b4:72:90:00:6a:ab:c4:0b:0a:0a:40:c0:03:
                    98:78:25:91:cd:83:d1:19:ce:3f:7f:92:ed:2c:25:
                    d2:27:a0:1c:65:88:87:8a:bc:2c:63:88:36:50:1f:
                    37:05:e7:27:59:6d:21:db:b4:58:8e:69:a3:81:90:
                    42:41:e0:54:85:bc:ad:d9:07:02:00:ba:fe:bc:45:
                    24:18:2d:6c:e0:35:37:b4:2b:4e:86:e2:31:47:7c:
                    94:b1:8f:76:cb:eb:fa:65:9d:0f:0d:1f:ab:84:e5:
                    87:a1:93:d4:84:30:12:e9:14:7d:c7:ff:ed:27:ff:
                    96:36:44:17:6d:d1:5e:d6:e4:36:c1:6f:ce:92:a1:
                    9f:8f:f2:2a:55:aa:c5:2f:eb:dc:46:b7:1c:6d:49:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:38:6C:8C:4D:85:7E:D2:B4:DA:71:CA:45:B9:7F:E1:1C:AB:92:0C
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/EDhsjE2FftK02nHKRbl_4Ryrkgw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:a6:cf:79:5d:74:2a:b9:c7:56:dc:e8:0a:14:40:a6:98:ec:
         e6:6c:a4:f3:76:1a:65:60:2a:45:f4:0c:df:1b:00:27:10:53:
         c7:6a:11:af:6a:6d:2f:4c:63:f0:41:51:5c:b4:92:18:67:5b:
         8e:c8:37:9a:0b:a1:05:3e:7e:51:10:13:d5:b5:db:8d:22:6b:
         84:3e:5d:15:2d:6a:7b:10:d6:95:ff:f2:4f:a1:01:af:be:2c:
         bc:7f:af:7b:75:df:49:d9:cf:29:2d:ea:30:ce:ef:46:1f:2e:
         74:f3:29:1c:a1:63:76:e9:fa:ca:ac:f2:36:ce:c3:55:da:de:
         5a:03:c7:f6:3c:0d:ce:62:f1:6b:d2:ec:1a:9b:31:67:0b:d9:
         96:e1:37:3b:38:4c:66:37:1c:70:c8:13:20:ab:d3:ac:3d:98:
         3a:79:16:7f:25:79:2d:a4:a8:b2:82:0d:05:77:d6:ac:e5:64:
         5a:d9:30:4d:b6:98:00:46:b9:1d:a8:1b:f8:f0:2e:73:e0:e8:
         ed:2c:61:54:0a:9a:d5:3c:b6:e4:a5:54:fb:b7:47:74:77:1b:
         1d:c9:c4:f2:ef:ee:40:e1:48:45:34:78:0c:21:48:87:b4:83:
         18:36:c6:70:ff:74:1c:f5:c0:59:e3:60:0b:68:7f:82:15:05:
         a6:04:e4:73
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF
NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTI2MDMzMTA4
MDcxOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTAzODZDOEM0RDg1N0VE
MkI0REE3MUNBNDVCOTdGRTExQ0FCOTIwQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOrE5rJRlBzVUfemqUtKyGhC+WJKyyO2GbbGSZdCeTIRfBCALjdn
ZwGAEwkHJpHW8PeTyvjX8/kHzz1O4XRky+HRpfUtAphgNA/Eqzp5TjdznkEonWB9
afJlqREd//geNPj0Y7pQwVO2VgK0cpAAaqvECwoKQMADmHglkc2D0RnOP3+S7Swl
0iegHGWIh4q8LGOINlAfNwXnJ1ltIdu0WI5po4GQQkHgVIW8rdkHAgC6/rxFJBgt
bOA1N7QrTobiMUd8lLGPdsvr+mWdDw0fq4Tlh6GT1IQwEukUfcf/7Sf/ljZEF23R
XtbkNsFvzpKhn4/yKlWqxS/r3Ea3HG1J2QcCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQQOGyMTYV+0rTaccpFuX/hHKuSDDAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n
oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z
Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIxMDQyL0VEaHNqRTJGZnRLMDJuSEtSYmxfNFJ5cmtndy5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUOZsAwDQYJKoZIhvcNAQELBQAD
ggEBAHumz3lddCq5x1bc6AoUQKaY7OZspPN2GmVgKkX0DN8bACcQU8dqEa9qbS9M
Y/BBUVy0khhnW47IN5oLoQU+flEQE9W1240ia4Q+XRUtansQ1pX/8k+hAa++LLx/
r3t130nZzykt6jDO70YfLnTzKRyhY3bp+sqs8jbOw1Xa3loDx/Y8Dc5i8WvS7Bqb
MWcL2ZbhNzs4TGY3HHDIEyCr06w9mDp5Fn8leS2kqLKCDQV31qzlZFrZME22mABG
uR2oG/jwLnPg6O0sYVQKmtU8tuSlVPu3R3R3Gx3JxPLv7kDhSEU0eAwhSIe0gxg2
xnD/dBz1wFnjYAtof4IVBaYE5HM=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:20 2026 by rpki-client