Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/WJF6G3TpObwPKHAeM-jEMmfEpjU.roa
File:                     WJF6G3TpObwPKHAeM-jEMmfEpjU.roa (raw, json)
Hash identifier:          VclisQIdt2nIBhtUYplmXv3UkMedFeQSJJKD6dLcfRI=
Subject key identifier:   58:91:7A:1B:74:E9:39:BC:0F:28:70:1E:33:E8:C4:32:67:C4:A6:35
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       4D
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/WJF6G3TpObwPKHAeM-jEMmfEpjU.roa
Signing time:             Tue 31 Mar 2026 08:32:57 +0000
ROA not before:           Tue 31 Mar 2026 08:32:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9997
IP address blocks:        218.226.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Mar 31 08:32:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=58917A1B74E939BC0F28701E33E8C43267C4A635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7d:59:9c:94:1b:12:f1:a5:53:2d:b7:a8:57:
                    70:3b:ce:97:9e:77:9f:0e:df:21:06:bf:8a:54:3f:
                    2a:95:91:04:db:88:d1:d9:a6:85:fe:a3:90:5c:d9:
                    14:91:32:09:09:f3:f9:50:18:7b:ec:8a:b8:05:9d:
                    c9:53:da:ea:ca:01:51:0a:57:6f:46:a5:85:e1:84:
                    54:8a:b0:77:7e:78:93:93:aa:9c:ff:82:55:89:43:
                    fa:32:b1:de:d7:70:17:ff:2c:33:e7:d7:70:1d:27:
                    e7:81:59:ad:fe:37:a5:72:f5:da:21:8f:a9:56:e7:
                    f8:ed:e3:87:dd:88:cc:95:85:f3:11:25:f1:4b:78:
                    72:27:1c:29:27:fa:5f:9a:50:c5:b4:e6:9a:fb:40:
                    92:ed:1e:7e:66:41:02:09:25:ca:f7:4a:96:e1:02:
                    5b:a9:e5:bf:d3:ba:fc:be:46:ae:35:83:a3:e7:cc:
                    c1:6d:7b:90:66:07:4b:c5:ce:8a:61:2b:02:20:ec:
                    4e:1c:16:68:1c:ca:b8:08:29:0d:50:4c:db:93:a8:
                    52:db:27:15:53:22:95:a7:a0:39:bd:3a:bf:f9:c0:
                    ab:1a:13:29:80:81:fc:90:78:c1:4e:84:42:2a:31:
                    96:5c:39:59:ba:27:3f:40:e8:9c:97:c9:57:07:28:
                    12:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:91:7A:1B:74:E9:39:BC:0F:28:70:1E:33:E8:C4:32:67:C4:A6:35
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/WJF6G3TpObwPKHAeM-jEMmfEpjU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.226.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:72:a8:96:83:fa:29:0d:dc:f3:6a:46:29:10:21:75:97:cc:
         d3:d5:7c:9e:9e:4c:e8:28:2a:1f:c4:81:a6:3e:f7:84:89:89:
         1b:a6:e3:95:d7:5a:ef:35:66:d9:1c:64:9e:3c:8c:c9:e7:ce:
         9b:3c:f4:c5:b4:ba:20:bc:aa:d4:e0:3a:4a:79:1e:0b:0f:b3:
         c4:c5:fc:dc:81:91:eb:62:65:aa:52:36:e9:23:10:be:bc:4a:
         4e:cd:c3:5e:d7:65:61:ee:9a:04:3e:a9:0a:fe:cf:fa:f8:cb:
         c1:5e:43:44:e0:b2:59:93:c3:61:66:bf:d5:62:1e:52:74:5c:
         fa:02:6e:c4:38:c0:25:dd:42:22:81:36:c8:a1:94:f7:ac:9f:
         cf:94:5f:09:56:7f:66:cd:aa:5a:b6:b2:b9:cf:aa:ef:14:85:
         51:94:9d:f2:7f:11:8f:f3:4b:a3:7e:10:e5:ed:19:69:5f:84:
         60:66:20:4c:9c:ad:31:60:7b:82:44:ae:82:27:e8:ab:d9:0f:
         ff:ef:34:41:de:01:09:fa:df:8d:56:3f:00:46:77:47:9c:27:
         7a:d7:ce:73:0a:20:2e:e1:b5:17:5a:3d:31:1f:29:b6:8c:dd:
         a4:37:36:a0:9c:51:dd:90:18:65:f9:d3:44:18:79:39:1c:63:
         03:54:05:bd
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw
MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTI2MDMzMTA4
MzI1N1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTg5MTdBMUI3NEU5MzlC
QzBGMjg3MDFFMzNFOEM0MzI2N0M0QTYzNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPN9WZyUGxLxpVMtt6hXcDvOl553nw7fIQa/ilQ/KpWRBNuI0dmm
hf6jkFzZFJEyCQnz+VAYe+yKuAWdyVPa6soBUQpXb0alheGEVIqwd354k5OqnP+C
VYlD+jKx3tdwF/8sM+fXcB0n54FZrf43pXL12iGPqVbn+O3jh92IzJWF8xEl8Ut4
ciccKSf6X5pQxbTmmvtAku0efmZBAgklyvdKluECW6nlv9O6/L5GrjWDo+fMwW17
kGYHS8XOimErAiDsThwWaBzKuAgpDVBM25OoUtsnFVMilaegOb06v/nAqxoTKYCB
/JB4wU6EQioxllw5WbonP0DonJfJVwcoEmMCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBRYkXobdOk5vA8ocB4z6MQyZ8SmNTAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV
RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2
OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NDYvV0pGNkczVHBPYndQS0hBZU0takVNbWZFcGpVLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANriMA0GCSqGSIb3DQEBCwUAA4IBAQBI
cqiWg/opDdzzakYpECF1l8zT1XyenkzoKCofxIGmPveEiYkbpuOV11rvNWbZHGSe
PIzJ586bPPTFtLogvKrU4DpKeR4LD7PExfzcgZHrYmWqUjbpIxC+vEpOzcNe12Vh
7poEPqkK/s/6+MvBXkNE4LJZk8NhZr/VYh5SdFz6Am7EOMAl3UIigTbIoZT3rJ/P
lF8JVn9mzapatrK5z6rvFIVRlJ3yfxGP80ujfhDl7RlpX4RgZiBMnK0xYHuCRK6C
J+ir2Q//7zRB3gEJ+t+NVj8ARndHnCd6185zCiAu4bUXWj0xHym2jN2kNzagnFHd
kBhl+dNEGHk5HGMDVAW9
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:42 2026 by rpki-client