Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/G5xJIzieZ6xkaYVq6W7obTsKB0E.roa
File:                     G5xJIzieZ6xkaYVq6W7obTsKB0E.roa (raw, json)
Hash identifier:          Gt/FA/xt+aFZ3GG0q9E+Gk3GyuQrVRrNxy7KBZAlJJE=
Subject key identifier:   1B:9C:49:23:38:9E:67:AC:64:69:85:6A:E9:6E:E8:6D:3B:0A:07:41
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       015B
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/G5xJIzieZ6xkaYVq6W7obTsKB0E.roa
Signing time:             Tue 31 Mar 2026 07:30:27 +0000
ROA not before:           Tue 31 Mar 2026 07:30:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9607
IP address blocks:        124.147.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Mar 31 07:30:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1B9C4923389E67AC6469856AE96EE86D3B0A0741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e0:5f:58:87:35:bd:16:c4:64:1d:e4:61:fe:
                    d5:e8:81:b8:60:39:98:ca:56:e5:c2:77:d3:5a:66:
                    2a:6b:74:b0:49:80:9d:2c:11:c4:7b:83:9d:b8:d0:
                    d8:11:95:a9:2a:e7:e2:d7:1c:78:c2:8f:8c:8f:2c:
                    99:4d:3e:d0:a3:69:e3:59:45:0b:76:66:71:bd:d8:
                    48:81:8c:24:e3:57:89:d8:9b:f7:81:c0:75:ab:f8:
                    f9:96:64:77:0c:48:ec:16:85:6e:6c:c8:95:d1:65:
                    01:57:4f:f5:d8:6d:51:65:a2:17:29:d9:6f:5e:4d:
                    ee:b2:e6:e6:42:f9:7c:16:d1:d0:98:0c:a4:d5:3e:
                    a4:bd:82:8d:51:31:e6:a7:b8:8b:20:9c:60:00:b3:
                    56:08:7c:88:56:d2:de:e7:1e:47:7d:da:40:38:ac:
                    cf:98:54:40:53:af:27:70:c5:68:84:a6:39:c1:24:
                    a5:dd:9b:1e:c7:64:4a:be:c5:b6:53:fd:9c:0a:5d:
                    ba:68:aa:49:8f:c0:49:62:6f:8b:b8:17:7f:88:a5:
                    be:4b:14:28:69:2b:85:c1:49:64:69:33:df:91:a7:
                    00:c6:fa:5b:ec:8b:cb:57:d3:43:a6:b4:bc:30:01:
                    52:16:cf:80:71:f9:7a:76:f2:a6:bb:46:dd:37:71:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9C:49:23:38:9E:67:AC:64:69:85:6A:E9:6E:E8:6D:3B:0A:07:41
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/G5xJIzieZ6xkaYVq6W7obTsKB0E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:bc:a8:7a:e8:0c:d8:a2:77:58:0d:13:3c:3e:35:b0:7f:3a:
         1f:8a:fe:3d:40:ec:b2:4e:c4:1a:0b:35:91:c9:9c:7b:1a:e8:
         44:9d:7a:a4:c4:aa:e6:ed:ff:4f:45:e9:93:c0:0b:13:2d:da:
         9a:b6:78:40:8d:d1:86:84:99:dd:e6:26:00:2e:53:3b:00:cb:
         2c:90:12:5b:3a:90:5a:b9:d8:ca:9e:58:ad:ad:56:35:17:ae:
         07:d0:4d:70:54:ff:36:03:22:36:78:85:ca:97:21:3e:5d:bb:
         eb:d1:a9:bc:9b:d6:69:eb:09:91:d2:f2:f6:dc:ed:3c:bc:15:
         21:65:11:bd:4d:b7:ce:d5:b3:6d:56:36:41:3f:e5:2a:83:6e:
         f9:48:65:1b:40:f3:e2:1b:bf:19:fc:df:b7:c1:8c:07:84:9b:
         98:7c:96:0f:23:c3:6b:d4:54:0c:c2:85:46:2d:98:e5:26:4c:
         a9:c3:7a:a2:a3:46:4b:14:ef:fe:3f:23:c2:21:ca:c0:aa:fc:
         7b:94:05:49:6c:06:e9:c6:91:0a:3e:6c:19:3d:d8:1c:b0:18:
         b7:62:f5:ab:c4:a5:f8:9b:95:79:24:72:31:0e:ac:bf:d1:c1:
         b5:a1:19:17:52:bc:07:81:b1:e7:b7:d5:8e:4d:c7:1d:46:2b:
         32:ab:c9:4d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAVswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNjAzMzEw
NzMwMjdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFCOUM0OTIzMzg5RTY3
QUM2NDY5ODU2QUU5NkVFODZEM0IwQTA3NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDh4F9YhzW9FsRkHeRh/tXogbhgOZjKVuXCd9NaZiprdLBJgJ0s
EcR7g5240NgRlakq5+LXHHjCj4yPLJlNPtCjaeNZRQt2ZnG92EiBjCTjV4nYm/eB
wHWr+PmWZHcMSOwWhW5syJXRZQFXT/XYbVFlohcp2W9eTe6y5uZC+XwW0dCYDKTV
PqS9go1RMeanuIsgnGAAs1YIfIhW0t7nHkd92kA4rM+YVEBTrydwxWiEpjnBJKXd
mx7HZEq+xbZT/ZwKXbpoqkmPwElib4u4F3+Ipb5LFChpK4XBSWRpM9+RpwDG+lvs
i8tX00OmtLwwAVIWz4Bx+Xp28qa7Rt03cTRZAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUG5xJIzieZ6xkaYVq6W7obTsKB0EwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzU0L0c1eEpJemllWjZ4a2FZVnE2VzdvYlRzS0IwRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN8kxAwDQYJKoZIhvcNAQELBQADggEB
AHS8qHroDNiid1gNEzw+NbB/Oh+K/j1A7LJOxBoLNZHJnHsa6ESdeqTEqubt/09F
6ZPACxMt2pq2eECN0YaEmd3mJgAuUzsAyyyQEls6kFq52MqeWK2tVjUXrgfQTXBU
/zYDIjZ4hcqXIT5du+vRqbyb1mnrCZHS8vbc7Ty8FSFlEb1Nt87Vs21WNkE/5SqD
bvlIZRtA8+Ibvxn837fBjAeEm5h8lg8jw2vUVAzChUYtmOUmTKnDeqKjRksU7/4/
I8IhysCq/HuUBUlsBunGkQo+bBk92BywGLdi9avEpfiblXkkcjEOrL/RwbWhGRdS
vAeBsee31Y5Nxx1GKzKryU0=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:32 2026 by rpki-client