Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/X5vVf2XjUOXJo1Rrob1Gij_uT_g.roa
File:                     X5vVf2XjUOXJo1Rrob1Gij_uT_g.roa (raw, json)
Hash identifier:          9cgvBfy5OvqnVsq1vx+667AkJiVCrVKIlrkM4K0UxQc=
Subject key identifier:   5F:9B:D5:7F:65:E3:50:E5:C9:A3:54:6B:A1:BD:46:8A:3F:EE:4F:F8
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       38
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/X5vVf2XjUOXJo1Rrob1Gij_uT_g.roa
Signing time:             Tue 31 Mar 2026 08:49:22 +0000
ROA not before:           Tue 31 Mar 2026 08:49:22 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        112.68.0.0/14 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 31 08:49:22 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=5F9BD57F65E350E5C9A3546BA1BD468A3FEE4FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:94:83:92:12:1e:93:87:51:13:be:e0:88:
                    e1:be:8d:5f:a7:c7:0b:f0:e1:a2:98:85:65:58:5e:
                    3e:88:f2:3b:2c:81:fb:0e:f2:a5:b1:90:58:35:9a:
                    b8:7a:90:fe:63:06:ab:c3:37:26:54:8e:e3:ee:8d:
                    ea:bb:95:b6:9e:c5:52:af:63:c1:67:9f:cc:4f:88:
                    0b:dd:d6:cd:06:d1:05:57:1c:95:aa:98:d4:9d:71:
                    3b:67:11:93:a7:da:46:4c:aa:a9:bc:08:92:8d:67:
                    66:5c:57:2d:04:68:1b:8a:7f:24:2a:10:0a:c1:01:
                    11:eb:3e:97:7e:39:20:dc:4a:8b:20:ca:bd:af:9c:
                    46:ff:83:2e:06:bb:be:88:7f:2e:cc:28:ca:64:e2:
                    19:60:12:3a:bb:b8:c9:0c:ad:a2:55:60:d3:5c:2b:
                    a4:55:f5:f4:a0:3e:11:96:4e:1b:b1:58:95:2d:15:
                    96:d5:9a:47:ae:f3:a4:c2:79:d6:fc:e3:76:c9:4a:
                    0c:b4:48:58:fe:5d:49:30:96:76:5e:2e:a4:fc:97:
                    a8:95:49:54:41:0a:70:90:3f:4c:8d:b2:53:29:21:
                    d9:51:ac:48:6d:4c:e5:1b:76:17:59:4b:b6:f4:9e:
                    f9:08:50:d1:5b:16:68:b7:9e:4a:3c:f1:3d:cf:97:
                    85:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9B:D5:7F:65:E3:50:E5:C9:A3:54:6B:A1:BD:46:8A:3F:EE:4F:F8
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/X5vVf2XjUOXJo1Rrob1Gij_uT_g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.68.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         7e:91:63:14:eb:ff:e3:41:37:3d:3a:6d:18:78:0a:7f:ff:62:
         4d:54:07:44:93:24:43:a5:7e:70:29:4f:1b:e3:83:c4:35:0c:
         83:bd:f9:48:23:ea:68:88:53:e4:8f:87:50:f8:8c:b2:e8:a9:
         5d:5d:11:0e:c1:62:26:17:3c:ae:20:76:3b:8e:5f:eb:84:c7:
         d6:a4:8c:84:ba:eb:1c:8c:64:57:d5:c0:d7:b4:0b:bc:cb:69:
         ab:8a:c1:ae:54:b1:07:09:74:24:32:23:20:9a:a1:89:60:44:
         d4:bf:81:1b:4e:67:22:0e:48:bd:10:fc:ea:09:36:fd:5a:b9:
         04:33:d9:ae:5a:af:bd:d9:9e:f7:77:be:f7:ee:07:e4:a1:af:
         08:8d:88:b4:28:3e:3d:e3:d4:53:19:1c:94:16:24:88:8b:d6:
         69:1c:d1:bc:b6:e7:0a:84:61:79:a0:eb:a9:dd:0e:49:e3:9b:
         29:11:0b:b4:d2:2c:f4:d7:3d:8c:84:a6:83:c5:aa:e8:fa:9d:
         0c:e0:9d:72:11:3b:2b:ef:1b:21:44:28:f8:6c:fd:ac:5d:ae:
         85:13:c5:1f:18:ae:be:a1:79:d1:91:f3:8a:cc:a5:27:58:fd:
         8f:37:67:af:32:73:bc:6e:f6:e9:ce:e0:57:72:5e:e8:e3:41:
         37:de:b7:54
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx
OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMzMTA4
NDkyMloXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoNUY5QkQ1N0Y2NUUzNTBF
NUM5QTM1NDZCQTFCRDQ2OEEzRkVFNEZGODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK4JlIOSEh6Th1ETvuCI4b6NX6fHC/DhopiFZVhePojyOyyB+w7y
pbGQWDWauHqQ/mMGq8M3JlSO4+6N6ruVtp7FUq9jwWefzE+IC93WzQbRBVcclaqY
1J1xO2cRk6faRkyqqbwIko1nZlxXLQRoG4p/JCoQCsEBEes+l345INxKiyDKva+c
Rv+DLga7voh/LswoymTiGWASOru4yQytolVg01wrpFX19KA+EZZOG7FYlS0VltWa
R67zpMJ51vzjdslKDLRIWP5dSTCWdl4upPyXqJVJVEEKcJA/TI2yUykh2VGsSG1M
5Rt2F1lLtvSe+QhQ0VsWaLeeSjzxPc+XhQUCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBRfm9V/ZeNQ5cmjVGuhvUaKP+5P+DAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe
nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL
bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80OTMvWDV2VmYyWGpVT1hKbzFScm9iMUdpal91VF9nLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAnBEMA0GCSqGSIb3DQEBCwUAA4IBAQB+
kWMU6//jQTc9Om0YeAp//2JNVAdEkyRDpX5wKU8b44PENQyDvflII+poiFPkj4dQ
+Iyy6KldXREOwWImFzyuIHY7jl/rhMfWpIyEuuscjGRX1cDXtAu8y2mrisGuVLEH
CXQkMiMgmqGJYETUv4EbTmciDki9EPzqCTb9WrkEM9muWq+92Z73d7737gfkoa8I
jYi0KD4949RTGRyUFiSIi9ZpHNG8tucKhGF5oOup3Q5J45spEQu00iz01z2MhKaD
xaro+p0M4J1yETsr7xshRCj4bP2sXa6FE8UfGK6+oXnRkfOKzKUnWP2PN2evMnO8
bvbpzuBXcl7o40E33rdU
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:34:01 2026 by rpki-client