Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/sZj_j8Byok3besewLy4MekTGhAo.roa
File:                     sZj_j8Byok3besewLy4MekTGhAo.roa (raw, json)
Hash identifier:          j24eaGKXFl5WXsVZpnIYU75hWv471vAPLixKucqRfNY=
Subject key identifier:   B1:98:FF:8F:C0:72:A2:4D:DB:7A:C7:B0:2F:2E:0C:7A:44:C6:84:0A
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       93
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/sZj_j8Byok3besewLy4MekTGhAo.roa
Signing time:             Tue 31 Mar 2026 07:47:25 +0000
ROA not before:           Tue 31 Mar 2026 07:47:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10019
IP address blocks:        103.26.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar 31 07:47:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B198FF8FC072A24DDB7AC7B02F2E0C7A44C6840A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:de:fc:7b:3b:8e:2f:58:7d:7c:5d:18:ed:71:
                    26:4e:ef:f4:a2:2b:70:7e:fd:ce:50:44:82:8d:d4:
                    5b:f9:eb:5a:df:96:82:0c:f4:15:40:ba:4c:29:a6:
                    e8:72:d9:fc:c0:d7:ba:04:f9:24:d2:d2:e4:eb:a1:
                    74:c6:41:d8:ce:c2:ad:80:15:13:5f:47:94:c0:43:
                    e9:67:5f:00:cd:0a:0f:ca:0d:6f:b2:c6:1b:65:22:
                    9d:7a:be:8d:d9:8a:cc:af:5c:fa:36:2b:c4:ff:ad:
                    2b:60:be:79:26:3b:49:4d:f1:3f:18:f9:35:19:74:
                    6c:d0:cd:12:85:ee:91:81:3a:27:7c:ee:d9:3d:a1:
                    f3:71:22:55:e6:f1:a0:62:3e:2b:3e:73:99:ba:51:
                    be:4d:51:63:53:09:b5:83:0d:0a:7c:72:ef:73:8d:
                    eb:4a:ad:26:00:60:d4:49:68:76:7b:a8:03:22:6a:
                    6f:48:52:4b:2c:0e:b1:0e:a1:58:b7:1f:8a:20:55:
                    f3:39:d7:cf:82:0a:95:57:ea:4b:30:fa:75:d8:c2:
                    bb:88:04:41:0f:aa:fd:35:57:a9:c6:07:0e:d6:e3:
                    3c:2f:00:00:eb:1b:34:fb:6b:2c:f2:1e:e8:ac:71:
                    12:d4:25:50:90:17:aa:b0:d7:99:70:b5:ac:bc:56:
                    01:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:98:FF:8F:C0:72:A2:4D:DB:7A:C7:B0:2F:2E:0C:7A:44:C6:84:0A
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/sZj_j8Byok3besewLy4MekTGhAo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:18:cb:a3:90:58:13:93:48:b8:14:37:60:2b:0f:43:bf:
         c9:5a:01:07:80:4f:e2:6c:77:62:7c:14:83:f9:67:bc:cc:23:
         5e:7d:f4:84:f1:e4:ba:19:de:cc:38:02:44:4d:6e:d5:c9:be:
         86:8e:9e:62:19:99:d3:2f:37:57:46:51:b2:78:45:e4:b1:d0:
         1a:d4:72:fd:d5:57:2c:2b:ab:f6:cf:58:ed:6b:bc:1d:c0:f8:
         30:a7:7a:a2:fc:67:c0:33:00:87:24:f4:91:cf:9e:1e:e9:6f:
         13:40:9a:7c:43:c3:32:88:25:36:44:5f:8f:ac:85:b2:44:8a:
         b3:19:ed:cc:5b:30:0d:d0:99:98:ef:c4:76:3f:34:71:bc:9f:
         12:5d:0e:2e:fe:53:a1:80:e2:7f:8b:6f:0c:d3:5e:37:d6:71:
         1e:aa:25:a5:2c:a6:a6:71:75:ee:6b:21:26:fa:77:4c:b4:f4:
         f1:7e:a0:6d:29:06:68:08:4f:1c:c2:cc:b5:93:4d:a6:4b:07:
         02:04:54:1b:fc:2f:e7:34:43:4d:fa:60:7d:08:25:a3:7b:f9:
         71:66:2e:1a:c1:79:49:03:2b:df:45:87:34:9f:32:0f:6f:e4:
         9a:ef:88:9c:59:70:b9:a4:4b:39:f6:39:a7:e8:a2:25:dc:bc:
         db:3c:27:c9
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDM5
MTdCMjMwNzQ1MjRFOUU2RUE4RTQwRkE0QTA2NzJDOTYyMDMxODAeFw0yNjAzMzEw
NzQ3MjVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxOThGRjhGQzA3MkEy
NEREQjdBQzdCMDJGMkUwQzdBNDRDNjg0MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDf3vx7O44vWH18XRjtcSZO7/SiK3B+/c5QRIKN1Fv561rfloIM
9BVAukwppuhy2fzA17oE+STS0uTroXTGQdjOwq2AFRNfR5TAQ+lnXwDNCg/KDW+y
xhtlIp16vo3ZisyvXPo2K8T/rStgvnkmO0lN8T8Y+TUZdGzQzRKF7pGBOid87tk9
ofNxIlXm8aBiPis+c5m6Ub5NUWNTCbWDDQp8cu9zjetKrSYAYNRJaHZ7qAMiam9I
UkssDrEOoVi3H4ogVfM518+CCpVX6ksw+nXYwruIBEEPqv01V6nGBw7W4zwvAADr
GzT7ayzyHuiscRLUJVCQF6qw15lwtay8VgE7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUsZj/j8Byok3besewLy4MekTGhAowHwYDVR0jBBgwFoAUQ5F7IwdFJOnm6o5A
+koGcsliAxgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2Mi9RNUY3SXdkRkpPbm02bzVBLWtvR2NzbGlBeGcuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RNUY3SXdkRkpPbm02bzVBLWtvR2Nz
bGlBeGcuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNDYyL3Naal9qOEJ5b2szYmVzZXdMeTRNZWtUR2hBby5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnGpgwDQYJKoZIhvcNAQELBQADggEB
ABrjGMujkFgTk0i4FDdgKw9Dv8laAQeAT+Jsd2J8FIP5Z7zMI1599ITx5LoZ3sw4
AkRNbtXJvoaOnmIZmdMvN1dGUbJ4ReSx0BrUcv3VVywrq/bPWO1rvB3A+DCneqL8
Z8AzAIck9JHPnh7pbxNAmnxDwzKIJTZEX4+shbJEirMZ7cxbMA3QmZjvxHY/NHG8
nxJdDi7+U6GA4n+LbwzTXjfWcR6qJaUspqZxde5rISb6d0y09PF+oG0pBmgITxzC
zLWTTaZLBwIEVBv8L+c0Q036YH0IJaN7+XFmLhrBeUkDK99FhzSfMg9v5JrviJxZ
cLmkSzn2OafooiXcvNs8J8k=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:05 2026 by rpki-client