Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2344/x_OpMwqs2xaBiCHRxLsU6vVO45U.roa
File:                     x_OpMwqs2xaBiCHRxLsU6vVO45U.roa (raw, json)
Hash identifier:          wcD0lcS3qSszUPjiQxhi/LT09K5JrKhJ/Q84LdsPRHQ=
Subject key identifier:   C7:F3:A9:33:0A:AC:DB:16:81:88:21:D1:C4:BB:14:EA:F5:4E:E3:95
Certificate issuer:       /CN=9B4EA0A4C71099FCC5034753E8F8BF1AB66101D7
Certificate serial:       0A
Authority key identifier: 9B:4E:A0:A4:C7:10:99:FC:C5:03:47:53:E8:F8:BF:1A:B6:61:01:D7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m06gpMcQmfzFA0dT6Pi_GrZhAdc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/x_OpMwqs2xaBiCHRxLsU6vVO45U.roa
Signing time:             Tue 31 Mar 2026 08:47:37 +0000
ROA not before:           Tue 31 Mar 2026 08:47:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        133.194.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/m06gpMcQmfzFA0dT6Pi_GrZhAdc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/m06gpMcQmfzFA0dT6Pi_GrZhAdc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m06gpMcQmfzFA0dT6Pi_GrZhAdc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B4EA0A4C71099FCC5034753E8F8BF1AB66101D7
        Validity
            Not Before: Mar 31 08:47:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C7F3A9330AACDB16818821D1C4BB14EAF54EE395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:e4:11:0e:fd:cd:83:49:7d:1c:4c:ea:ff:
                    f3:98:2d:74:0c:6f:9f:b2:7e:11:75:8d:c0:a3:3c:
                    1f:9e:28:37:f9:25:9d:e3:b3:0f:db:77:d9:64:c0:
                    ce:05:05:6a:b2:e3:55:c2:c2:d0:df:e0:45:49:8d:
                    c5:87:e5:f8:f4:7b:26:f3:65:f8:7d:50:88:b7:15:
                    b7:1c:52:52:42:67:99:c2:02:b9:4a:d6:8f:90:74:
                    2d:9f:58:78:9f:30:7f:46:4f:e3:2d:70:a5:c3:ad:
                    25:84:22:25:50:7c:f1:d8:a1:c0:d8:7a:2d:91:99:
                    98:a3:03:2b:8b:3a:98:25:79:f4:a6:52:71:18:76:
                    76:61:a0:82:38:59:c4:58:96:d9:f2:32:1c:ee:7c:
                    98:7e:dc:ad:78:27:59:a9:c4:3b:3f:a5:c0:0a:df:
                    d7:2f:89:c5:07:0c:0a:7d:b5:87:86:c2:6d:b6:c7:
                    45:2d:88:73:81:7b:05:e4:c4:54:52:a1:30:d8:fd:
                    35:f3:0a:6e:38:76:7b:88:54:f7:49:c0:27:80:87:
                    37:d3:09:d5:52:a4:b5:14:a1:dd:82:67:f4:5a:f3:
                    7b:4e:f4:6f:18:88:8b:9c:e2:58:21:84:d6:6d:f8:
                    13:d3:ac:76:3b:3a:c2:9b:4c:58:4a:bd:97:6f:dc:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F3:A9:33:0A:AC:DB:16:81:88:21:D1:C4:BB:14:EA:F5:4E:E3:95
            X509v3 Authority Key Identifier:
                keyid:9B:4E:A0:A4:C7:10:99:FC:C5:03:47:53:E8:F8:BF:1A:B6:61:01:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/m06gpMcQmfzFA0dT6Pi_GrZhAdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m06gpMcQmfzFA0dT6Pi_GrZhAdc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/x_OpMwqs2xaBiCHRxLsU6vVO45U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.194.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:86:42:66:d2:3d:da:6a:70:d8:ce:bb:49:d0:52:3f:92:f2:
         b5:22:51:12:01:36:55:79:16:c0:25:72:a8:63:c7:76:08:f2:
         8a:cf:99:f9:91:1b:36:dc:dd:6f:d0:2d:22:7d:81:77:ee:b3:
         5f:43:2b:d3:03:34:0c:e1:16:4a:a8:c1:f2:e3:7c:04:73:87:
         3a:23:0c:87:f8:fd:48:b4:0f:85:5a:aa:e1:19:4d:f0:65:d1:
         ef:4d:e1:e8:3e:7b:2b:18:60:02:5f:63:8d:88:d0:d0:b9:da:
         7d:a3:02:50:95:5b:3c:cd:15:54:a2:3c:c7:2f:90:d8:39:08:
         12:d6:00:d3:f4:f5:e0:01:78:1b:35:f6:a2:29:09:1c:2c:2d:
         d7:be:c3:6e:81:d1:36:76:02:de:99:08:06:5a:2d:75:7d:76:
         8f:c6:dd:df:74:50:c2:05:8c:c2:47:d3:83:eb:af:da:c3:7a:
         b4:e6:8a:7e:d8:5e:db:57:80:a7:a7:d7:10:eb:57:a6:70:4a:
         97:43:39:28:f4:b5:82:2f:6e:a4:86:31:a5:b5:2a:d4:c7:88:
         0c:64:17:6d:97:33:1a:1b:c3:af:47:ac:e8:ce:9f:b5:8a:0c:
         41:33:d2:16:9d:d5:8a:7e:ba:d4:b3:88:44:59:79:f3:a9:21:
         32:29:7f:e1
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5QjRF
QTBBNEM3MTA5OUZDQzUwMzQ3NTNFOEY4QkYxQUI2NjEwMUQ3MB4XDTI2MDMzMTA4
NDczN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQzdGM0E5MzMwQUFDREIx
NjgxODgyMUQxQzRCQjE0RUFGNTRFRTM5NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALRO5BEO/c2DSX0cTOr/85gtdAxvn7J+EXWNwKM8H54oN/klneOz
D9t32WTAzgUFarLjVcLC0N/gRUmNxYfl+PR7JvNl+H1QiLcVtxxSUkJnmcICuUrW
j5B0LZ9YeJ8wf0ZP4y1wpcOtJYQiJVB88dihwNh6LZGZmKMDK4s6mCV59KZScRh2
dmGggjhZxFiW2fIyHO58mH7crXgnWanEOz+lwArf1y+JxQcMCn21h4bCbbbHRS2I
c4F7BeTEVFKhMNj9NfMKbjh2e4hU90nAJ4CHN9MJ1VKktRSh3YJn9Frze070bxiI
i5ziWCGE1m34E9Osdjs6wptMWEq9l2/cORcCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBTH86kzCqzbFoGIIdHEuxTq9U7jlTAfBgNVHSMEGDAWgBSbTqCkxxCZ/MUDR1Po
+L8atmEB1zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjM0NC9tMDZncE1jUW1mekZBMGRUNlBpX0dyWmhBZGMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9tMDZncE1jUW1mekZBMGRUNlBpX0dy
WmhBZGMuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjM0NC94X09wTXdxczJ4YUJpQ0hSeExzVTZ2Vk80NVUucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhcL/MA0GCSqGSIb3DQEBCwUAA4IB
AQA0hkJm0j3aanDYzrtJ0FI/kvK1IlESATZVeRbAJXKoY8d2CPKKz5n5kRs23N1v
0C0ifYF37rNfQyvTAzQM4RZKqMHy43wEc4c6IwyH+P1ItA+FWqrhGU3wZdHvTeHo
PnsrGGACX2ONiNDQudp9owJQlVs8zRVUojzHL5DYOQgS1gDT9PXgAXgbNfaiKQkc
LC3XvsNugdE2dgLemQgGWi11fXaPxt3fdFDCBYzCR9OD66/aw3q05op+2F7bV4Cn
p9cQ61emcEqXQzko9LWCL26khjGltSrUx4gMZBdtlzMaG8OvR6zozp+1igxBM9IW
ndWKfrrUs4hEWXnzqSEyKX/h
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:02 2026 by rpki-client