Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/Js4NjVpStRyRfke4297llAQQ6m8.roa
File:                     Js4NjVpStRyRfke4297llAQQ6m8.roa (raw, json)
Hash identifier:          C8arN/ykTc2LL88e+jiu/CiGPnDV7W9AYgTf4+dWCZI=
Subject key identifier:   26:CE:0D:8D:5A:52:B5:1C:91:7E:47:B8:DB:DE:E5:94:04:10:EA:6F
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       95
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Js4NjVpStRyRfke4297llAQQ6m8.roa
Signing time:             Tue 31 Mar 2026 08:37:05 +0000
ROA not before:           Tue 31 Mar 2026 08:37:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        115.124.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=26CE0D8D5A52B51C917E47B8DBDEE5940410EA6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:66:94:48:17:ec:f8:3f:3c:70:9f:16:1a:
                    94:0b:ec:ac:3d:e1:39:41:26:ce:ea:3a:fc:ac:6f:
                    2e:11:94:ac:18:58:51:6b:7a:14:69:16:77:bc:b2:
                    43:a7:d5:da:0d:78:d0:ab:f0:6d:46:97:34:e2:3a:
                    6a:d0:47:8e:af:c1:fe:7f:16:8f:4c:ef:bc:f8:df:
                    ce:42:a3:96:45:aa:0f:6d:7c:b1:61:40:1d:c9:87:
                    fb:cb:cd:5d:73:55:a5:fa:87:e9:63:c8:8e:7c:c9:
                    9d:a3:b3:a7:cc:6d:c9:b7:37:05:a6:c8:4c:83:ca:
                    5d:f7:5a:4d:32:38:6f:07:44:10:a2:ad:2a:99:60:
                    5f:eb:ae:c2:69:43:94:e9:1a:2c:30:32:25:e4:a5:
                    9c:03:45:83:33:d7:f1:e1:c7:d2:38:5a:4a:11:d5:
                    b6:fe:83:b4:b1:bc:08:e0:6f:aa:2e:e1:4e:d2:72:
                    ca:61:c9:ab:9c:01:1f:9c:e0:48:4d:f4:e3:a2:84:
                    3b:a5:8c:bb:ca:89:d7:2b:aa:0f:eb:fa:3f:30:63:
                    26:80:95:c6:34:0e:8b:c8:0a:f5:f3:9c:14:68:c4:
                    21:93:00:73:84:db:b0:f7:e3:0a:50:4e:8b:d9:6b:
                    16:75:d2:d3:4a:b7:fd:85:cb:dc:49:b7:df:6a:02:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CE:0D:8D:5A:52:B5:1C:91:7E:47:B8:DB:DE:E5:94:04:10:EA:6F
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Js4NjVpStRyRfke4297llAQQ6m8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6e:4b:86:e6:9a:fb:ba:9f:be:d8:d8:34:7a:c2:77:59:06:7f:
         59:52:de:4f:7d:85:43:a2:41:a5:e3:58:3f:c2:7e:8a:ee:fb:
         4d:de:dd:dc:35:bb:ff:0e:19:35:6d:bd:7d:b3:1e:e8:1e:0d:
         e4:8f:8e:b6:29:9a:06:7c:64:b0:00:8e:91:b4:e6:5e:94:8d:
         82:4f:f6:9c:f0:30:c1:44:88:b1:e0:7c:0b:e5:14:cb:23:f2:
         a1:05:b9:cd:48:37:e0:b0:ef:8d:e5:35:25:77:0f:83:03:b1:
         b6:b8:29:55:8c:68:42:01:fe:c2:73:4f:52:cc:ea:c1:0c:86:
         a1:b2:09:8c:38:37:54:dc:70:3f:46:79:73:29:fe:87:8d:3f:
         db:fb:5b:38:d7:ab:98:e0:e1:c4:14:d2:2e:26:b2:8d:17:24:
         58:d6:33:e9:8c:e6:ba:25:67:06:7d:9e:3c:51:be:c2:b1:24:
         cb:6e:93:a6:29:87:29:9f:96:93:7f:cc:8f:c1:8e:bd:14:a8:
         c5:a3:f0:83:72:e1:9d:7a:40:34:90:97:02:45:ed:ba:bb:76:
         7e:a0:e5:31:bc:f8:1b:57:67:1c:4b:0a:3c:76:f3:e9:85:2a:
         c0:35:8a:97:09:e9:61:da:5a:02:14:d5:25:fe:4a:70:72:7a:
         67:ba:6c:00
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjc1
RDk3ODJCMTNFOTkxMjhDRDM0RjIyQzA5RkU4RTdCNUNCQTcwQjAeFw0yNjAzMzEw
ODM3MDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI2Q0UwRDhENUE1MkI1
MUM5MTdFNDdCOERCREVFNTk0MDQxMEVBNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdqWaUSBfs+D88cJ8WGpQL7Kw94TlBJs7qOvysby4RlKwYWFFr
ehRpFne8skOn1doNeNCr8G1GlzTiOmrQR46vwf5/Fo9M77z4385Co5ZFqg9tfLFh
QB3Jh/vLzV1zVaX6h+ljyI58yZ2js6fMbcm3NwWmyEyDyl33Wk0yOG8HRBCirSqZ
YF/rrsJpQ5TpGiwwMiXkpZwDRYMz1/Hhx9I4WkoR1bb+g7SxvAjgb6ou4U7Scsph
yaucAR+c4EhN9OOihDuljLvKidcrqg/r+j8wYyaAlcY0DovICvXznBRoxCGTAHOE
27D34wpQTovZaxZ10tNKt/2Fy9xJt99qAgmVAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUJs4NjVpStRyRfke4297llAQQ6m8wHwYDVR0jBBgwFoAUJ12XgrE+mRKM008i
wJ/o57XLpwswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0OS9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3WExwd3MuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3
WExwd3MuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjQ5L0pzNE5qVnBTdFJ5UmZrZTQyOTdsbEFRUTZtOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdzfIAwDQYJKoZIhvcNAQELBQADggEB
AG5Lhuaa+7qfvtjYNHrCd1kGf1lS3k99hUOiQaXjWD/Cforu+03e3dw1u/8OGTVt
vX2zHugeDeSPjrYpmgZ8ZLAAjpG05l6UjYJP9pzwMMFEiLHgfAvlFMsj8qEFuc1I
N+Cw743lNSV3D4MDsba4KVWMaEIB/sJzT1LM6sEMhqGyCYw4N1TccD9GeXMp/oeN
P9v7WzjXq5jg4cQU0i4mso0XJFjWM+mM5rolZwZ9njxRvsKxJMtuk6YphymflpN/
zI/Bjr0UqMWj8INy4Z16QDSQlwJF7bq7dn6g5TG8+BtXZxxLCjx28+mFKsA1ipcJ
6WHaWgIU1SX+SnByeme6bAA=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:42 2026 by rpki-client