Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/OP5kt0JtzsTStTIIueCoX74J3XA.roa
File:                     OP5kt0JtzsTStTIIueCoX74J3XA.roa (raw, json)
Hash identifier:          ElEFOe+jiYhyH+9FeaghoHTa7Adt+9MResU/XgIJsYA=
Subject key identifier:   38:FE:64:B7:42:6D:CE:C4:D2:B5:32:08:B9:E0:A8:5F:BE:09:DD:70
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       9C
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/OP5kt0JtzsTStTIIueCoX74J3XA.roa
Signing time:             Tue 31 Mar 2026 07:47:30 +0000
ROA not before:           Tue 31 Mar 2026 07:47:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10019
IP address blocks:        218.185.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar 31 07:47:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=38FE64B7426DCEC4D2B53208B9E0A85FBE09DD70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:ae:78:1b:44:0b:11:85:71:02:6a:c3:40:
                    d7:5e:6a:55:55:17:9b:22:d5:b3:78:35:f5:c6:2a:
                    cf:71:3c:57:63:70:7f:97:9f:bd:1b:fe:46:f0:ba:
                    e3:a9:63:e5:1a:f0:94:ff:14:f5:6b:d4:66:36:6f:
                    90:ff:b4:7f:28:f3:e1:8a:2b:1e:0b:df:ec:46:bf:
                    da:22:e9:35:45:87:d4:4e:21:81:eb:3d:d0:15:25:
                    c4:fd:42:63:5c:dd:50:a9:26:0c:3c:ae:16:02:c7:
                    d9:24:5c:a3:22:1d:b6:6e:42:93:f6:27:d8:bc:d2:
                    61:4a:ad:f0:05:e1:84:1c:da:5c:2b:2c:b0:a5:fe:
                    c4:10:c9:e3:33:aa:57:54:d8:af:f3:0e:2d:e0:35:
                    ae:fc:fd:ba:c5:d5:10:1e:f4:10:42:08:7d:8e:1d:
                    46:eb:97:5c:9e:5d:08:1e:d0:f8:90:e0:cf:a5:2d:
                    13:b0:e5:80:9f:8f:d4:a2:16:0a:ce:40:c0:76:d0:
                    da:00:ab:07:7b:41:40:e7:bc:f1:bc:1d:fd:08:14:
                    76:dc:f4:32:0f:44:14:bf:ae:cf:f6:f6:02:d1:72:
                    a9:4e:97:dd:22:87:f9:c5:52:9e:68:32:67:2b:68:
                    05:c8:52:cb:ee:58:45:60:26:50:61:3f:e5:b2:c4:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FE:64:B7:42:6D:CE:C4:D2:B5:32:08:B9:E0:A8:5F:BE:09:DD:70
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/OP5kt0JtzsTStTIIueCoX74J3XA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.185.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:a2:15:a5:b3:9a:ce:09:6d:0a:b3:1c:ad:bc:ca:11:c4:b5:
         01:be:3a:15:8c:9b:22:3d:1f:b5:77:e5:a8:b3:3c:fa:1f:03:
         f8:2f:78:6d:87:cb:ad:1d:76:0a:4f:ea:03:c9:9d:e1:37:bc:
         17:17:97:69:bd:04:9d:f6:04:cb:7d:5f:e3:5b:63:f8:aa:a6:
         45:dc:95:69:e0:ed:bc:17:21:2d:23:fc:e3:b9:63:13:d6:99:
         ba:16:dd:a5:40:c8:34:74:f6:dc:3e:fa:a9:26:c7:be:ff:2c:
         4f:7b:4b:20:8c:18:77:21:73:6e:98:86:b0:62:6d:7f:42:ce:
         de:e7:bc:f4:c5:ab:fb:c0:59:dd:fb:fc:de:61:31:55:42:27:
         77:39:d9:fc:e7:72:18:bb:25:6b:48:45:41:60:44:a5:61:74:
         7f:e6:4c:fa:13:2f:72:cc:94:e6:f9:39:ab:69:4e:5f:de:86:
         e0:20:5f:0d:fe:b2:db:b5:a9:7e:d7:c6:bb:59:f1:54:a1:dc:
         8f:d4:ec:05:8f:53:15:77:dd:fe:e4:6e:26:a8:76:fa:0a:e8:
         d6:f6:72:9d:6e:ed:a3:fb:d2:7c:14:f7:49:1f:08:c4:56:36:
         ee:d3:7d:ba:00:b2:2c:67:30:57:a4:69:4b:46:5a:de:93:94:
         26:14:cb:04
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDM5
MTdCMjMwNzQ1MjRFOUU2RUE4RTQwRkE0QTA2NzJDOTYyMDMxODAeFw0yNjAzMzEw
NzQ3MzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM4RkU2NEI3NDI2RENF
QzREMkI1MzIwOEI5RTBBODVGQkUwOURENzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+7a54G0QLEYVxAmrDQNdealVVF5si1bN4NfXGKs9xPFdjcH+X
n70b/kbwuuOpY+Ua8JT/FPVr1GY2b5D/tH8o8+GKKx4L3+xGv9oi6TVFh9ROIYHr
PdAVJcT9QmNc3VCpJgw8rhYCx9kkXKMiHbZuQpP2J9i80mFKrfAF4YQc2lwrLLCl
/sQQyeMzqldU2K/zDi3gNa78/brF1RAe9BBCCH2OHUbrl1yeXQge0PiQ4M+lLROw
5YCfj9SiFgrOQMB20NoAqwd7QUDnvPG8Hf0IFHbc9DIPRBS/rs/29gLRcqlOl90i
h/nFUp5oMmcraAXIUsvuWEVgJlBhP+WyxOp7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUOP5kt0JtzsTStTIIueCoX74J3XAwHwYDVR0jBBgwFoAUQ5F7IwdFJOnm6o5A
+koGcsliAxgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2Mi9RNUY3SXdkRkpPbm02bzVBLWtvR2NzbGlBeGcuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RNUY3SXdkRkpPbm02bzVBLWtvR2Nz
bGlBeGcuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNDYyL09QNWt0MEp0enNUU3RUSUl1ZUNvWDc0SjNYQS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXauaAwDQYJKoZIhvcNAQELBQADggEB
AJKiFaWzms4JbQqzHK28yhHEtQG+OhWMmyI9H7V35aizPPofA/gveG2Hy60ddgpP
6gPJneE3vBcXl2m9BJ32BMt9X+NbY/iqpkXclWng7bwXIS0j/OO5YxPWmboW3aVA
yDR09tw++qkmx77/LE97SyCMGHchc26YhrBibX9Czt7nvPTFq/vAWd37/N5hMVVC
J3c52fznchi7JWtIRUFgRKVhdH/mTPoTL3LMlOb5OatpTl/ehuAgXw3+stu1qX7X
xrtZ8VSh3I/U7AWPUxV33f7kbiaodvoK6Nb2cp1u7aP70nwU90kfCMRWNu7TfboA
sixnMFekaUtGWt6TlCYUywQ=
-----END CERTIFICATE-----
Generated at Tue Apr 7 20:49:45 2026 by rpki-client