Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/ImpN9ozI77lKeNCe09bR8RiYSW4.roa
File:                     ImpN9ozI77lKeNCe09bR8RiYSW4.roa (raw, json)
Hash identifier:          LyFA3UZIrf13ehMUVMsRowbP3hl+YHsTsKdwX3fgXWE=
Subject key identifier:   22:6A:4D:F6:8C:C8:EF:B9:4A:78:D0:9E:D3:D6:D1:F1:18:98:49:6E
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       AA
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/ImpN9ozI77lKeNCe09bR8RiYSW4.roa
Signing time:             Tue 31 Mar 2026 08:37:16 +0000
ROA not before:           Tue 31 Mar 2026 08:37:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        211.132.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=226A4DF68CC8EFB94A78D09ED3D6D1F11898496E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:50:b3:08:8b:2b:ad:20:c0:66:f3:82:3f:
                    36:13:19:8f:54:01:5d:d6:a2:f2:a4:75:12:d4:63:
                    82:3e:91:6a:89:e1:ba:0f:6a:cf:d0:61:9e:24:f1:
                    80:e7:83:e5:10:7e:59:e1:7e:95:49:8b:15:25:0b:
                    27:dc:25:5b:3d:27:5d:4d:90:f2:a3:e6:11:f2:a6:
                    a1:ef:b5:5c:ef:52:34:a7:ec:7a:18:bc:68:64:2e:
                    02:fa:44:7e:46:f2:f5:94:ec:13:78:34:70:3b:bb:
                    d2:1f:47:03:1c:21:3f:22:a5:55:b4:7d:cc:2c:e5:
                    a9:8e:62:d4:a4:24:1e:1f:87:a9:a2:10:26:28:6a:
                    ce:53:3c:23:55:23:01:b1:27:1b:96:aa:c7:f0:a6:
                    f5:94:a3:61:ba:2c:a3:4f:04:d0:e6:2c:10:60:b9:
                    b3:bd:8b:76:d3:ad:13:fc:52:27:10:74:51:dc:10:
                    91:d2:34:9b:e8:82:cf:75:22:24:5a:4c:53:5a:3b:
                    bb:2f:cb:7b:bb:ff:e1:1f:fa:c3:51:18:bc:8e:ab:
                    22:5c:f0:e9:8b:fd:bf:23:5d:73:c4:e8:81:34:48:
                    fc:c0:aa:10:21:4b:91:f7:2d:05:7d:fa:39:55:32:
                    ea:87:55:f2:6b:09:0d:0a:b4:a0:ca:38:27:67:eb:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6A:4D:F6:8C:C8:EF:B9:4A:78:D0:9E:D3:D6:D1:F1:18:98:49:6E
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/ImpN9ozI77lKeNCe09bR8RiYSW4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.132.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c0:4c:7b:da:ff:11:06:5d:f5:95:3b:3e:37:9d:8e:ac:e3:03:
         77:35:18:83:aa:62:63:f5:31:6d:31:4b:b0:80:01:d9:2f:df:
         45:5e:b0:5b:bd:82:fe:07:be:c0:b7:96:e8:8b:e5:4a:76:89:
         35:21:51:dc:cf:99:66:5f:df:57:c7:e4:f9:39:30:36:15:04:
         5c:56:f8:1b:82:e5:a1:2e:df:ba:cd:28:a1:4e:e0:84:7d:47:
         51:34:cc:6d:c5:bf:d1:fd:31:7a:f9:be:04:9b:1f:a1:f2:43:
         d7:eb:23:0b:4a:b1:63:ca:d3:b0:69:30:49:f8:0e:87:dc:0d:
         50:b6:27:6d:b4:c8:6c:12:f8:c2:ba:3a:72:c3:2c:b9:6d:5f:
         70:b0:a9:b5:93:a8:25:21:38:1d:ab:b6:f7:bc:f7:fe:76:ef:
         57:d0:bb:45:f3:2c:6e:35:0c:f8:2e:87:69:71:5c:69:73:d2:
         d4:84:db:9e:95:68:5c:69:85:9e:21:30:6a:87:b6:cc:fa:2e:
         d2:34:00:de:b7:d7:28:b6:9a:ea:1e:5a:73:30:2e:65:69:65:
         bf:51:98:58:f4:0d:e5:9a:2e:87:63:c6:63:6e:6a:c3:c6:92:
         98:2d:6d:18:9f:ab:a3:bc:b4:9c:d5:58:e7:19:eb:ec:ae:6d:
         d9:81:05:0a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjc1
RDk3ODJCMTNFOTkxMjhDRDM0RjIyQzA5RkU4RTdCNUNCQTcwQjAeFw0yNjAzMzEw
ODM3MTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIyNkE0REY2OENDOEVG
Qjk0QTc4RDA5RUQzRDZEMUYxMTg5ODQ5NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP61CzCIsrrSDAZvOCPzYTGY9UAV3WovKkdRLUY4I+kWqJ4boP
as/QYZ4k8YDng+UQflnhfpVJixUlCyfcJVs9J11NkPKj5hHypqHvtVzvUjSn7HoY
vGhkLgL6RH5G8vWU7BN4NHA7u9IfRwMcIT8ipVW0fcws5amOYtSkJB4fh6miECYo
as5TPCNVIwGxJxuWqsfwpvWUo2G6LKNPBNDmLBBgubO9i3bTrRP8UicQdFHcEJHS
NJvogs91IiRaTFNaO7svy3u7/+Ef+sNRGLyOqyJc8OmL/b8jXXPE6IE0SPzAqhAh
S5H3LQV9+jlVMuqHVfJrCQ0KtKDKOCdn6/GRAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUImpN9ozI77lKeNCe09bR8RiYSW4wHwYDVR0jBBgwFoAUJ12XgrE+mRKM008i
wJ/o57XLpwswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0OS9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3WExwd3MuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3
WExwd3MuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjQ5L0ltcE45b3pJNzdsS2VOQ2UwOWJSOFJpWVNXNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXThGAwDQYJKoZIhvcNAQELBQADggEB
AMBMe9r/EQZd9ZU7PjedjqzjA3c1GIOqYmP1MW0xS7CAAdkv30VesFu9gv4HvsC3
luiL5Up2iTUhUdzPmWZf31fH5Pk5MDYVBFxW+BuC5aEu37rNKKFO4IR9R1E0zG3F
v9H9MXr5vgSbH6HyQ9frIwtKsWPK07BpMEn4DofcDVC2J220yGwS+MK6OnLDLLlt
X3CwqbWTqCUhOB2rtve89/5271fQu0XzLG41DPguh2lxXGlz0tSE256VaFxphZ4h
MGqHtsz6LtI0AN631yi2muoeWnMwLmVpZb9RmFj0DeWaLodjxmNuasPGkpgtbRif
q6O8tJzVWOcZ6+yubdmBBQo=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:52 2026 by rpki-client