Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/0x4NwPxI4VrS3DfkO0_7SAMlJjo.roa
File:                     0x4NwPxI4VrS3DfkO0_7SAMlJjo.roa (raw, json)
Hash identifier:          3u2BlfhgEHA3jAS/ZVct+507kBobrg66Vdf08ibxbAs=
Subject key identifier:   D3:1E:0D:C0:FC:48:E1:5A:D2:DC:37:E4:3B:4F:FB:48:03:25:26:3A
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0209
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/0x4NwPxI4VrS3DfkO0_7SAMlJjo.roa
Signing time:             Tue 31 Mar 2026 07:35:36 +0000
ROA not before:           Tue 31 Mar 2026 07:35:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        202.48.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D31E0DC0FC48E15AD2DC37E43B4FFB480325263A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:37:9f:d9:92:dd:da:f3:16:a4:b2:e3:79:
                    c2:dc:84:93:84:e6:cd:df:e1:de:59:a9:45:7c:6e:
                    a1:04:8b:fb:4e:85:0c:c5:e6:c1:4b:93:c6:48:6d:
                    c3:29:4c:21:df:c4:02:c0:59:e8:f7:8d:19:1e:00:
                    b4:ad:ea:e4:ac:7f:93:92:4a:b2:56:74:0a:c7:3e:
                    73:32:43:03:30:e4:8b:0b:cf:63:6c:19:96:22:b0:
                    95:8c:49:9e:e6:20:52:4a:1e:fe:b7:ce:b9:0e:07:
                    5a:58:a3:f8:d0:60:49:bf:e2:f1:86:8e:d3:b7:1e:
                    40:39:09:89:c6:0a:71:d9:c4:5c:d9:5e:0b:46:cf:
                    35:69:c2:bb:f4:05:e9:bb:a6:46:84:27:d2:04:cd:
                    ad:41:a7:59:a5:e7:ef:35:97:44:f3:04:b4:b9:eb:
                    f1:7c:01:f6:ec:cd:1b:89:28:5d:ba:28:28:f2:33:
                    b2:e6:b3:1d:39:d7:5f:da:dc:51:6b:96:3e:cf:88:
                    36:45:73:7c:de:52:9f:40:6b:ad:98:7c:e9:b8:51:
                    67:fb:f0:c6:46:03:08:f8:5b:05:dc:4f:4f:5e:3b:
                    6d:2f:a2:0a:27:1a:6d:6c:ca:56:90:70:63:a1:ab:
                    c0:97:88:b2:78:cb:23:6b:5b:fc:91:88:ec:d4:e6:
                    e6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1E:0D:C0:FC:48:E1:5A:D2:DC:37:E4:3B:4F:FB:48:03:25:26:3A
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/0x4NwPxI4VrS3DfkO0_7SAMlJjo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.48.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:95:55:9f:02:7d:55:b3:6b:b0:84:10:df:eb:0c:dc:5c:38:
         63:79:3c:4b:51:cd:47:fd:2e:f2:d9:e6:a0:f6:34:3a:37:87:
         b7:65:27:64:22:99:d1:1b:81:9f:9b:fd:5d:22:7c:ff:ab:08:
         f8:a0:04:80:8c:35:32:ae:13:d2:7a:cd:3f:2f:9e:9f:cf:2d:
         51:e2:5e:f5:0e:db:59:da:c3:3f:b6:ad:1f:20:eb:49:d6:81:
         3f:f3:cb:ad:28:47:97:df:3b:27:65:77:72:ab:b9:ba:c6:98:
         67:26:6d:fc:9a:3a:74:0b:69:ea:f3:64:86:ee:87:61:e4:2b:
         f3:97:8a:ac:3e:30:38:5a:d7:f2:97:a3:88:03:b4:53:e6:5f:
         b6:5f:71:5e:2f:3d:bb:26:36:65:25:e1:b3:95:5d:e9:c2:5b:
         b1:00:b0:3c:ac:6f:8d:72:e1:15:0b:14:04:23:83:2e:68:d4:
         b6:1b:3e:67:76:c8:fc:ba:fc:e1:dd:68:58:66:b5:65:ba:1e:
         c9:b9:b7:09:40:43:38:b1:5f:f5:20:04:b5:72:e9:c4:97:3f:
         30:6d:8c:82:dd:6c:78:5a:86:5b:19:86:d1:ef:de:60:27:0a:
         1d:3a:7d:8b:1b:ec:75:5b:7e:e9:e5:fc:4e:d3:41:c7:67:36:
         e5:6d:e0:6d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNjAzMzEw
NzM1MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQzMUUwREMwRkM0OEUx
NUFEMkRDMzdFNDNCNEZGQjQ4MDMyNTI2M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC98Tef2ZLd2vMWpLLjecLchJOE5s3f4d5ZqUV8bqEEi/tOhQzF
5sFLk8ZIbcMpTCHfxALAWej3jRkeALSt6uSsf5OSSrJWdArHPnMyQwMw5IsLz2Ns
GZYisJWMSZ7mIFJKHv63zrkOB1pYo/jQYEm/4vGGjtO3HkA5CYnGCnHZxFzZXgtG
zzVpwrv0Bem7pkaEJ9IEza1Bp1ml5+81l0TzBLS56/F8AfbszRuJKF26KCjyM7Lm
sx0511/a3FFrlj7PiDZFc3zeUp9Aa62YfOm4UWf78MZGAwj4WwXcT09eO20vogon
Gm1sylaQcGOhq8CXiLJ4yyNrW/yRiOzU5uYxAgMBAAGjggHVMIIB0TAdBgNVHQ4E
FgQU0x4NwPxI4VrS3DfkO0/7SAMlJjowHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF
BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvMHg0TndQeEk0VnJTM0Rma08wXzdTQU1sSmpvLnJvYTAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcowbDANBgkqhkiG9w0BAQsFAAOCAQEAWpVV
nwJ9VbNrsIQQ3+sM3Fw4Y3k8S1HNR/0u8tnmoPY0OjeHt2UnZCKZ0RuBn5v9XSJ8
/6sI+KAEgIw1Mq4T0nrNPy+en88tUeJe9Q7bWdrDP7atHyDrSdaBP/PLrShHl987
J2V3cqu5usaYZyZt/Jo6dAtp6vNkhu6HYeQr85eKrD4wOFrX8pejiAO0U+Zftl9x
Xi89uyY2ZSXhs5Vd6cJbsQCwPKxvjXLhFQsUBCODLmjUths+Z3bI/Lr84d1oWGa1
Zboeybm3CUBDOLFf9SAEtXLpxJc/MG2Mgt1seFqGWxmG0e/eYCcKHTp9ixvsdVt+
6eX8TtNBx2c25W3gbQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:00 2026 by rpki-client