Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/uiH72azvddwjWx_mKzwR2UAeNlU.roa
File:                     uiH72azvddwjWx_mKzwR2UAeNlU.roa (raw, json)
Hash identifier:          15Yl3tTNBXe+uyh/McPDH+u5JMZGeTPN4+3bZOaC+KM=
Subject key identifier:   BA:21:FB:D9:AC:EF:75:DC:23:5B:1F:E6:2B:3C:11:D9:40:1E:36:55
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       015C
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/uiH72azvddwjWx_mKzwR2UAeNlU.roa
Signing time:             Tue 31 Mar 2026 07:30:28 +0000
ROA not before:           Tue 31 Mar 2026 07:30:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7530
IP address blocks:        210.231.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Mar 31 07:30:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BA21FBD9ACEF75DC235B1FE62B3C11D9401E3655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:5b:59:c4:f3:7b:0b:bc:9c:5b:38:11:a7:
                    85:44:8c:66:2a:54:c8:01:da:36:c1:3b:23:48:65:
                    90:e8:10:35:6c:17:f8:7a:c5:86:df:3d:3c:03:fb:
                    b0:6c:b6:db:58:ea:a8:c9:63:fd:98:9a:f3:59:08:
                    54:1d:09:0f:70:46:87:39:75:58:3b:ea:4a:ab:d9:
                    99:9d:a5:6c:57:62:07:12:5f:dc:6f:17:a0:b1:9d:
                    42:a4:76:78:60:a3:17:bf:b5:24:02:0b:c1:64:0c:
                    69:3d:c4:34:f7:ec:db:25:23:0f:3d:61:a8:e2:e1:
                    7b:62:ff:36:73:f7:e7:5d:01:e2:d1:ad:bc:34:11:
                    f2:1a:d7:32:08:f2:0e:84:7c:9d:50:66:42:87:91:
                    c1:ea:6c:31:a9:5c:cb:92:eb:32:fe:f1:b1:3e:ef:
                    11:56:93:e0:19:41:9f:a0:03:36:cc:4b:bf:5f:3e:
                    79:d6:56:25:cc:2d:19:26:6f:60:48:26:a0:73:36:
                    3c:a4:bf:2e:66:a9:ce:58:2f:30:a4:db:bc:3e:fe:
                    64:57:e8:13:91:43:e9:37:33:c2:0d:09:8d:a2:d0:
                    f0:da:2d:57:ab:95:7a:3d:7a:3d:24:e8:c3:a9:05:
                    fd:cf:42:fb:3a:c0:3b:13:91:8b:9d:01:02:fd:fe:
                    e2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:21:FB:D9:AC:EF:75:DC:23:5B:1F:E6:2B:3C:11:D9:40:1E:36:55
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/uiH72azvddwjWx_mKzwR2UAeNlU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:bf:57:14:d4:91:a2:75:4a:89:c1:11:a5:b1:94:de:bd:c8:
         61:56:9c:04:0b:71:a5:22:2c:76:39:cb:20:00:c2:f5:16:b0:
         8d:6c:dd:42:69:12:e8:de:aa:47:69:4c:69:47:80:ac:1d:20:
         7f:f2:ee:a8:09:c2:1d:34:02:03:63:9a:39:cd:f1:38:22:3d:
         28:57:e6:6a:05:c9:b5:44:86:6d:e8:5f:21:04:39:e7:8b:3c:
         73:28:2d:2c:0e:5a:38:1b:30:20:fa:bd:5f:2c:0b:cb:48:fe:
         18:5d:d3:a6:f6:2e:19:27:91:86:fe:a6:fa:0d:66:8c:ca:97:
         30:df:5f:a9:a8:26:8d:5d:ee:94:d6:72:be:07:35:a9:d1:a1:
         8b:c3:29:e9:30:4e:a0:08:24:64:1c:ba:21:4d:97:df:9c:9c:
         ea:a8:22:ec:79:04:b3:6a:d3:c4:f9:f5:90:bd:c3:ee:cf:ae:
         85:21:d7:8b:82:b6:05:b6:76:42:2b:d1:85:29:c2:fc:a1:c3:
         8f:ff:0d:b9:86:d7:3c:07:08:5a:0d:f0:45:08:98:78:a9:2a:
         4f:08:55:50:84:83:1a:10:66:50:f0:56:2b:1e:eb:7e:b8:18:
         0f:a4:a4:d5:5c:36:0a:2f:f2:e1:9e:f5:00:5a:2b:d9:54:0f:
         63:0d:38:b0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNjAzMzEw
NzMwMjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJBMjFGQkQ5QUNFRjc1
REMyMzVCMUZFNjJCM0MxMUQ5NDAxRTM2NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFx1tZxPN7C7ycWzgRp4VEjGYqVMgB2jbBOyNIZZDoEDVsF/h6
xYbfPTwD+7BstttY6qjJY/2YmvNZCFQdCQ9wRoc5dVg76kqr2ZmdpWxXYgcSX9xv
F6CxnUKkdnhgoxe/tSQCC8FkDGk9xDT37NslIw89Yaji4Xti/zZz9+ddAeLRrbw0
EfIa1zII8g6EfJ1QZkKHkcHqbDGpXMuS6zL+8bE+7xFWk+AZQZ+gAzbMS79fPnnW
ViXMLRkmb2BIJqBzNjykvy5mqc5YLzCk27w+/mRX6BORQ+k3M8INCY2i0PDaLVer
lXo9ej0k6MOpBf3PQvs6wDsTkYudAQL9/uJ9AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUuiH72azvddwjWx/mKzwR2UAeNlUwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzU0L3VpSDcyYXp2ZGR3ald4X21LendSMlVBZU5sVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALS59QwDQYJKoZIhvcNAQELBQADggEB
AGm/VxTUkaJ1SonBEaWxlN69yGFWnAQLcaUiLHY5yyAAwvUWsI1s3UJpEujeqkdp
TGlHgKwdIH/y7qgJwh00AgNjmjnN8TgiPShX5moFybVEhm3oXyEEOeeLPHMoLSwO
WjgbMCD6vV8sC8tI/hhd06b2LhknkYb+pvoNZozKlzDfX6moJo1d7pTWcr4HNanR
oYvDKekwTqAIJGQcuiFNl9+cnOqoIux5BLNq08T59ZC9w+7ProUh14uCtgW2dkIr
0YUpwvyhw4//DbmG1zwHCFoN8EUImHipKk8IVVCEgxoQZlDwVise6364GA+kpNVc
Ngov8uGe9QBaK9lUD2MNOLA=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:17 2026 by rpki-client