Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/8Roy5TjlHQYx5g3uW-H3rRsD_Ro.roa
File:                     8Roy5TjlHQYx5g3uW-H3rRsD_Ro.roa (raw, json)
Hash identifier:          M/wxvMUInSfBPdNnRNqEtgXxN46HSGg/tZTdVEqb8Ek=
Subject key identifier:   F1:1A:32:E5:38:E5:1D:06:31:E6:0D:EE:5B:E1:F7:AD:1B:03:FD:1A
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       90
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/8Roy5TjlHQYx5g3uW-H3rRsD_Ro.roa
Signing time:             Tue 31 Mar 2026 08:37:03 +0000
ROA not before:           Tue 31 Mar 2026 08:37:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        61.114.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F11A32E538E51D0631E60DEE5BE1F7AD1B03FD1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a2:ce:fa:64:ff:20:fd:c1:85:86:de:f4:36:
                    eb:6b:ab:0d:22:90:96:cf:c2:98:27:4d:d4:72:7b:
                    b7:12:f1:08:17:8a:55:25:cc:3a:e0:f3:f9:18:67:
                    a6:87:42:20:bc:fb:57:97:15:07:b4:aa:7e:79:95:
                    20:44:4e:d0:ef:de:22:27:6b:ac:76:dd:69:63:e0:
                    e2:d9:e5:50:65:e0:2f:6e:95:8c:63:52:ee:c3:eb:
                    c7:ac:c5:5e:65:2e:ad:10:bc:39:44:5c:40:17:86:
                    c6:69:ea:5b:42:23:93:ef:85:c2:88:d3:0c:d1:55:
                    a9:dc:29:d6:2e:60:f6:13:b6:23:82:cd:54:54:6d:
                    43:20:95:33:1c:13:76:d7:b2:5e:72:b8:6d:e4:11:
                    09:37:7c:a5:fa:6f:dd:fa:42:05:cf:b7:39:7f:ea:
                    ab:d6:df:9b:78:73:60:f2:98:53:e7:33:27:8d:fc:
                    69:75:b8:98:95:28:58:f8:cb:73:20:68:f1:bf:ad:
                    46:8c:69:92:0d:2c:05:db:67:8a:16:b9:37:de:a1:
                    8a:a3:9b:49:d9:e1:f2:e6:8d:85:61:75:e7:f2:78:
                    22:37:58:4e:bc:6d:e4:18:64:b5:78:57:ac:05:4e:
                    4e:1b:88:c3:42:77:d2:e5:6f:bf:0d:00:62:4c:3b:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1A:32:E5:38:E5:1D:06:31:E6:0D:EE:5B:E1:F7:AD:1B:03:FD:1A
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/8Roy5TjlHQYx5g3uW-H3rRsD_Ro.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:a9:50:d6:a0:0b:d2:fb:2c:b8:33:d1:7a:75:68:13:00:b0:
         88:cf:50:de:43:7e:84:39:c1:62:f3:36:14:e4:87:7d:e0:91:
         50:6e:03:a2:e9:81:d5:32:da:88:15:3d:1b:99:40:5b:52:24:
         a7:2f:76:cc:88:49:d1:ea:79:2b:b5:06:0c:ff:0b:29:ae:1b:
         5e:6f:4c:5a:1e:1c:c4:4e:cf:eb:cd:8a:07:bf:05:77:41:6c:
         6a:a5:82:97:b4:17:51:86:27:b8:1e:6b:07:6a:86:11:b1:d8:
         60:d4:3e:c7:5a:84:25:9b:47:98:c8:b2:bc:e0:3d:f6:45:75:
         cd:6a:11:bf:b3:34:dc:4c:79:b7:a7:02:fc:8c:94:11:b3:ec:
         1b:3e:77:68:42:d0:3d:14:3f:cf:cd:20:71:42:8f:c3:54:95:
         65:30:e9:a3:c5:87:2a:7a:0d:6c:77:8a:9a:ce:32:8e:86:56:
         10:53:be:db:06:fb:2d:be:6f:aa:f9:f5:61:7b:72:ec:b6:ae:
         d1:c1:d0:21:48:fe:0b:05:ff:d8:e9:4d:01:15:73:36:00:bc:
         a1:25:30:73:a7:08:94:d2:23:2e:63:54:f2:31:f4:a6:bd:a0:
         6e:fe:fd:2f:57:65:e5:86:36:47:10:95:56:a5:70:98:b5:82:
         d7:99:88:e5
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjc1
RDk3ODJCMTNFOTkxMjhDRDM0RjIyQzA5RkU4RTdCNUNCQTcwQjAeFw0yNjAzMzEw
ODM3MDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYxMUEzMkU1MzhFNTFE
MDYzMUU2MERFRTVCRTFGN0FEMUIwM0ZEMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvos76ZP8g/cGFht70Nutrqw0ikJbPwpgnTdRye7cS8QgXilUl
zDrg8/kYZ6aHQiC8+1eXFQe0qn55lSBETtDv3iIna6x23Wlj4OLZ5VBl4C9ulYxj
Uu7D68esxV5lLq0QvDlEXEAXhsZp6ltCI5PvhcKI0wzRVancKdYuYPYTtiOCzVRU
bUMglTMcE3bXsl5yuG3kEQk3fKX6b936QgXPtzl/6qvW35t4c2DymFPnMyeN/Gl1
uJiVKFj4y3MgaPG/rUaMaZINLAXbZ4oWuTfeoYqjm0nZ4fLmjYVhdefyeCI3WE68
beQYZLV4V6wFTk4biMNCd9Llb78NAGJMOw2VAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU8Roy5TjlHQYx5g3uW+H3rRsD/RowHwYDVR0jBBgwFoAUJ12XgrE+mRKM008i
wJ/o57XLpwswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0OS9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3WExwd3MuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3
WExwd3MuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjQ5LzhSb3k1VGpsSFFZeDVnM3VXLUgzclJzRF9Sby5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9coAwDQYJKoZIhvcNAQELBQADggEB
AHGpUNagC9L7LLgz0Xp1aBMAsIjPUN5DfoQ5wWLzNhTkh33gkVBuA6LpgdUy2ogV
PRuZQFtSJKcvdsyISdHqeSu1Bgz/CymuG15vTFoeHMROz+vNige/BXdBbGqlgpe0
F1GGJ7geawdqhhGx2GDUPsdahCWbR5jIsrzgPfZFdc1qEb+zNNxMebenAvyMlBGz
7Bs+d2hC0D0UP8/NIHFCj8NUlWUw6aPFhyp6DWx3iprOMo6GVhBTvtsG+y2+b6r5
9WF7cuy2rtHB0CFI/gsF/9jpTQEVczYAvKElMHOnCJTSIy5jVPIx9Ka9oG7+/S9X
ZeWGNkcQlValcJi1gteZiOU=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:31 2026 by rpki-client