Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/8sH-QKPaI7FKCVDCf4XxanuHBDU.roa
File:                     8sH-QKPaI7FKCVDCf4XxanuHBDU.roa (raw, json)
Hash identifier:          GFV82wZKHKzE8cDEwGaWJVx9NcmYq/GRTc2CbLHrNlk=
Subject key identifier:   F2:C1:FE:40:A3:DA:23:B1:4A:09:50:C2:7F:85:F1:6A:7B:87:04:35
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       A5
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/8sH-QKPaI7FKCVDCf4XxanuHBDU.roa
Signing time:             Tue 31 Mar 2026 07:37:17 +0000
ROA not before:           Tue 31 Mar 2026 07:37:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55900
IP address blocks:        180.131.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Mar 31 07:37:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F2C1FE40A3DA23B14A0950C27F85F16A7B870435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:12:9e:81:17:f0:89:7b:54:b9:a9:a4:5f:
                    72:b5:d9:5b:b4:e9:94:a4:a2:97:30:ff:05:4c:06:
                    f0:8c:d0:b8:29:95:1a:60:63:4e:77:4a:5e:93:42:
                    2f:ab:df:60:65:74:b7:27:d6:f8:3e:b7:e0:3b:80:
                    04:3a:73:8e:09:2e:fc:f0:2d:8b:19:02:dd:f6:16:
                    ae:64:b9:1a:05:7c:41:45:f8:e7:75:38:76:77:55:
                    89:65:20:0a:cb:62:0c:c8:9a:05:1b:ee:a6:6a:cd:
                    7e:32:4a:64:df:b5:db:38:27:9a:6d:a7:2d:ca:91:
                    d2:a7:17:42:6d:e1:be:62:92:6d:57:3a:ba:30:32:
                    db:9e:91:9e:ef:b6:55:42:3d:a3:59:2c:86:6c:4b:
                    ca:43:0b:e0:97:17:e2:ef:0e:80:0e:3f:5c:2a:91:
                    50:96:4f:69:00:6f:15:fa:f3:0c:19:6d:90:dd:09:
                    e0:de:2f:33:c1:87:ea:30:96:d5:de:3f:8a:bc:25:
                    e5:52:a5:95:10:72:0e:2c:6f:98:43:db:2e:71:ad:
                    af:31:21:92:fb:84:c6:ef:36:6a:d3:ce:0c:d9:6a:
                    fd:c9:5f:45:bb:52:56:4d:d0:20:bf:00:08:be:44:
                    f9:2a:0b:36:4f:52:85:c2:42:75:cd:92:58:83:90:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C1:FE:40:A3:DA:23:B1:4A:09:50:C2:7F:85:F1:6A:7B:87:04:35
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/8sH-QKPaI7FKCVDCf4XxanuHBDU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:44:cd:7d:06:35:f1:26:ee:c2:0d:8d:73:c5:47:62:a9:c4:
         95:cb:21:65:ad:b8:02:33:87:b4:ba:94:a8:66:3b:fe:e0:6c:
         25:1b:cc:c0:21:cf:59:ec:2c:f6:eb:c4:97:8b:c5:99:d9:9b:
         75:01:6e:47:37:8b:61:9f:fc:60:ac:29:14:bd:8b:2b:e0:52:
         0d:36:d3:e9:cb:56:ba:ad:63:f2:97:b4:04:45:e9:fc:a6:97:
         6b:4f:30:09:84:02:2c:14:3b:d5:ab:19:8b:5c:8d:d1:a8:19:
         34:d5:d1:80:96:95:ba:9c:64:56:f2:3d:b6:b4:69:6d:e1:71:
         8b:a2:4a:0a:02:6d:bd:5d:05:1a:6b:ae:cd:33:21:19:2d:a0:
         a1:e1:9d:d7:d9:e5:7f:ee:f8:6a:03:37:fe:fa:86:a1:c8:6b:
         e0:8f:a4:ff:bb:22:e2:bd:e6:b2:ee:f4:69:30:00:ec:56:f0:
         fa:30:02:e1:89:01:ac:18:7d:12:04:4e:c4:6d:23:7f:18:e6:
         84:27:28:3d:47:9e:02:bd:a9:20:d6:2c:ea:92:20:3f:c3:31:
         26:f5:39:e4:8c:3d:40:87:4c:b7:ff:b8:d7:6a:02:49:6f:70:
         6a:15:e2:0e:4b:5c:24:3a:33:ac:7a:5e:06:67:96:c5:bb:ea:
         d4:6e:45:04
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUIw
RDcyRjlGNDMwQjdENDAwMzM3NUYxMEQ1MDI1QjlFNUMwMDQzNzAeFw0yNjAzMzEw
NzM3MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYyQzFGRTQwQTNEQTIz
QjE0QTA5NTBDMjdGODVGMTZBN0I4NzA0MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC80RKegRfwiXtUuamkX3K12Vu06ZSkopcw/wVMBvCM0LgplRpg
Y053Sl6TQi+r32BldLcn1vg+t+A7gAQ6c44JLvzwLYsZAt32Fq5kuRoFfEFF+Od1
OHZ3VYllIArLYgzImgUb7qZqzX4ySmTftds4J5ptpy3KkdKnF0Jt4b5ikm1XOrow
MtuekZ7vtlVCPaNZLIZsS8pDC+CXF+LvDoAOP1wqkVCWT2kAbxX68wwZbZDdCeDe
LzPBh+owltXeP4q8JeVSpZUQcg4sb5hD2y5xra8xIZL7hMbvNmrTzgzZav3JX0W7
UlZN0CC/AAi+RPkqCzZPUoXCQnXNkliDkC3JAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU8sH+QKPaI7FKCVDCf4XxanuHBDUwHwYDVR0jBBgwFoAUWw1y+fQwt9QAM3Xx
DVAlueXABDcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUzOS9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVlWEFCRGMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVl
WEFCRGMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTM5LzhzSC1RS1BhSTdGS0NWRENmNFh4YW51SEJEVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW0g+AwDQYJKoZIhvcNAQELBQADggEB
AGJEzX0GNfEm7sINjXPFR2KpxJXLIWWtuAIzh7S6lKhmO/7gbCUbzMAhz1nsLPbr
xJeLxZnZm3UBbkc3i2Gf/GCsKRS9iyvgUg020+nLVrqtY/KXtARF6fyml2tPMAmE
AiwUO9WrGYtcjdGoGTTV0YCWlbqcZFbyPba0aW3hcYuiSgoCbb1dBRprrs0zIRkt
oKHhndfZ5X/u+GoDN/76hqHIa+CPpP+7IuK95rLu9GkwAOxW8PowAuGJAawYfRIE
TsRtI38Y5oQnKD1HngK9qSDWLOqSID/DMSb1OeSMPUCHTLf/uNdqAklvcGoV4g5L
XCQ6M6x6XgZnlsW76tRuRQQ=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:47 2026 by rpki-client