Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/wAM9d_YWtxyFVXgBfizxS7Qklgo.roa
File:                     wAM9d_YWtxyFVXgBfizxS7Qklgo.roa (raw, json)
Hash identifier:          lkt7W01NgxLRBpOjdIHA3cTogzy+lAA+b9Jr/8RC9fE=
Subject key identifier:   C0:03:3D:77:F6:16:B7:1C:85:55:78:01:7E:2C:F1:4B:B4:24:96:0A
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       3A
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/wAM9d_YWtxyFVXgBfizxS7Qklgo.roa
Signing time:             Tue 31 Mar 2026 08:49:23 +0000
ROA not before:           Tue 31 Mar 2026 08:49:23 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        121.80.0.0/14 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 31 08:49:23 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=C0033D77F616B71C855578017E2CF14BB424960A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:39:a1:27:66:d8:be:ba:00:a2:ca:66:b0:cd:
                    71:3d:fd:14:fc:a4:a6:61:9c:a3:b1:d0:ae:ce:2b:
                    40:fe:2f:8e:1d:b4:23:db:4c:9d:7d:78:2b:e9:74:
                    6d:91:d0:50:0a:46:43:4d:05:6a:43:7e:58:01:e7:
                    d7:d5:3e:28:7a:00:a6:b8:98:b7:41:a0:a6:f2:92:
                    bb:f5:df:fe:77:46:63:9e:1b:ed:e0:3d:29:b5:f9:
                    78:fb:21:7f:1b:55:9f:67:10:b2:d4:06:85:a5:97:
                    ad:e7:33:28:b2:68:14:f4:d3:ee:65:c2:82:7c:26:
                    5b:77:f8:24:87:10:c0:35:b1:7d:af:fe:25:78:9e:
                    61:62:83:35:a9:7e:2d:45:11:78:8f:b9:51:1d:c9:
                    95:2c:c1:d1:ad:c7:a5:a0:75:ad:3d:5e:e4:9f:5b:
                    e7:a2:1f:6e:04:e4:f3:e2:c2:fa:c8:81:54:55:0a:
                    ca:6b:c2:01:68:bf:96:2a:16:c8:b1:16:43:78:81:
                    c1:99:0d:14:a6:dc:62:a1:de:80:7b:94:4b:91:cf:
                    82:7b:aa:c1:cb:68:09:2a:eb:ee:f9:69:3f:cc:4d:
                    ff:a8:38:bf:3d:d2:89:3b:ec:d0:7d:4b:c4:b3:67:
                    89:2d:bb:21:29:40:b1:00:6f:06:30:8a:3a:3d:94:
                    5a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:03:3D:77:F6:16:B7:1C:85:55:78:01:7E:2C:F1:4B:B4:24:96:0A
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/wAM9d_YWtxyFVXgBfizxS7Qklgo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.80.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         8a:f2:9e:19:5f:2f:7d:2b:05:75:80:e7:f7:7c:2f:6b:2b:d9:
         61:98:32:ec:44:df:3e:34:bd:da:ae:e1:02:82:af:15:12:0e:
         74:16:71:89:2b:08:ab:b6:ea:f6:bd:87:46:6c:0d:45:e8:b6:
         db:08:41:82:ba:1f:ea:ab:91:15:6d:ed:81:7c:00:94:ed:88:
         c7:b9:32:87:d1:9f:56:6f:52:cf:50:10:8f:32:4f:10:f7:e1:
         de:46:b5:82:d0:d8:ba:d1:62:79:62:55:9b:3c:c1:ec:a4:14:
         3d:60:93:94:49:1c:a1:2d:c1:a1:55:ef:0b:5f:b7:73:e8:45:
         a7:30:ae:e4:91:e4:7e:b5:c3:d3:71:f3:8e:25:d4:c4:13:2a:
         0f:b0:c6:aa:e1:4e:54:d7:0d:fc:b1:2a:71:8e:f4:1d:ee:ba:
         44:8b:a3:1c:b6:9a:93:3b:e8:c7:68:93:ba:95:06:2f:2b:7c:
         07:ae:a7:56:07:b3:b2:47:3a:f0:0c:81:2b:df:39:5f:e7:c4:
         2e:c3:33:fc:11:02:26:9f:22:d1:52:0e:fa:0a:cb:70:41:81:
         2d:36:fa:4f:f1:d6:7e:15:fb:b9:43:df:8e:aa:88:13:67:0c:
         52:cb:9f:6c:6c:24:20:0b:05:97:0d:99:32:f9:2b:c3:22:b9:
         85:d7:d0:68
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx
OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMzMTA4
NDkyM1oXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoQzAwMzNENzdGNjE2Qjcx
Qzg1NTU3ODAxN0UyQ0YxNEJCNDI0OTYwQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOc5oSdm2L66AKLKZrDNcT39FPykpmGco7HQrs4rQP4vjh20I9tM
nX14K+l0bZHQUApGQ00FakN+WAHn19U+KHoApriYt0GgpvKSu/Xf/ndGY54b7eA9
KbX5ePshfxtVn2cQstQGhaWXreczKLJoFPTT7mXCgnwmW3f4JIcQwDWxfa/+JXie
YWKDNal+LUUReI+5UR3JlSzB0a3HpaB1rT1e5J9b56IfbgTk8+LC+siBVFUKymvC
AWi/lioWyLEWQ3iBwZkNFKbcYqHegHuUS5HPgnuqwctoCSrr7vlpP8xN/6g4vz3S
iTvs0H1LxLNniS27ISlAsQBvBjCKOj2UWlMCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBTAAz139ha3HIVVeAF+LPFLtCSWCjAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe
nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL
bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80OTMvd0FNOWRfWVd0eHlGVlhnQmZpenhTN1FrbGdvLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAnlQMA0GCSqGSIb3DQEBCwUAA4IBAQCK
8p4ZXy99KwV1gOf3fC9rK9lhmDLsRN8+NL3aruECgq8VEg50FnGJKwirtur2vYdG
bA1F6LbbCEGCuh/qq5EVbe2BfACU7YjHuTKH0Z9Wb1LPUBCPMk8Q9+HeRrWC0Ni6
0WJ5YlWbPMHspBQ9YJOUSRyhLcGhVe8LX7dz6EWnMK7kkeR+tcPTcfOOJdTEEyoP
sMaq4U5U1w38sSpxjvQd7rpEi6MctpqTO+jHaJO6lQYvK3wHrqdWB7OyRzrwDIEr
3zlf58QuwzP8EQImnyLRUg76CstwQYEtNvpP8dZ+Ffu5Q9+OqogTZwxSy59sbCQg
CwWXDZky+SvDIrmF19Bo
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:05 2026 by rpki-client