Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/O7L6r0C0nIIl8AeJ41C9q_nG6oo.roa
File:                     O7L6r0C0nIIl8AeJ41C9q_nG6oo.roa (raw, json)
Hash identifier:          UjeGpyvFJzcASAxMFYK44QJyochLiB6vFZLG76fwSPY=
Subject key identifier:   3B:B2:FA:AF:40:B4:9C:82:25:F0:07:89:E3:50:BD:AB:F9:C6:EA:8A
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       020E
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/O7L6r0C0nIIl8AeJ41C9q_nG6oo.roa
Signing time:             Tue 31 Mar 2026 07:35:37 +0000
ROA not before:           Tue 31 Mar 2026 07:35:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        49.239.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3BB2FAAF40B49C8225F00789E350BDABF9C6EA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:d6:38:69:e8:83:ba:39:4f:2c:6f:a3:ec:
                    45:a9:44:24:a3:4a:bc:5d:f8:7b:5e:e0:d6:4a:90:
                    2d:7c:13:22:71:fb:a6:92:5b:29:3f:0a:ca:a4:d0:
                    41:db:02:c5:c9:05:5d:c5:dc:01:de:6f:5c:04:7a:
                    0f:e4:dc:79:2d:cc:cc:4a:be:4d:5e:e4:3d:46:f3:
                    4c:b2:4a:d5:d1:c1:80:99:9e:7e:d0:37:1e:6c:f4:
                    ba:38:3b:30:12:10:94:6b:f8:4f:6e:41:91:f3:d9:
                    6d:94:77:e8:9c:20:db:8f:02:8a:96:b9:87:2a:82:
                    d5:fa:9a:44:61:60:91:b8:13:88:fa:29:2d:b3:ac:
                    be:cc:95:08:94:21:bd:33:ad:61:5a:38:5b:f0:8d:
                    f9:4c:24:77:92:2b:a1:7c:75:d7:33:48:10:7c:9b:
                    f9:42:2b:d4:20:55:02:a1:b9:44:ae:83:18:b3:34:
                    07:9e:c4:91:26:02:ae:3b:aa:32:72:49:5b:d1:90:
                    af:3b:04:6a:aa:ec:ad:36:0a:21:ac:cc:5c:b7:df:
                    1a:61:97:ed:65:bf:6c:96:8a:10:65:70:9a:68:14:
                    8b:36:6b:08:af:22:cd:b1:e8:91:24:ed:30:c4:54:
                    91:39:c1:e2:b3:58:41:7f:d1:d6:af:8a:73:92:c3:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B2:FA:AF:40:B4:9C:82:25:F0:07:89:E3:50:BD:AB:F9:C6:EA:8A
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/O7L6r0C0nIIl8AeJ41C9q_nG6oo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.239.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:b7:b5:90:1e:1d:1f:1b:e2:50:67:b4:27:33:dc:78:be:98:
         7e:d0:1a:31:1e:2a:cb:a7:78:da:50:76:51:d7:98:96:60:fb:
         4a:15:00:1c:5d:93:27:47:0b:91:2f:15:45:5a:e5:af:f8:92:
         64:44:21:80:63:f7:64:e2:dd:36:fb:f4:97:1a:0e:bf:68:20:
         3e:df:a6:4f:d8:39:1a:d5:de:1a:5d:e2:24:6e:fa:56:32:7f:
         3e:60:46:2d:3a:1e:5a:b9:92:ac:a0:d8:a1:3b:20:99:3f:90:
         ff:1c:98:90:ce:5b:a7:95:0b:ad:d3:16:ce:99:b5:14:1e:c2:
         b8:12:30:37:86:04:be:39:35:c0:da:35:13:82:37:5a:21:e4:
         57:5a:b2:01:9e:97:d9:54:5c:f1:4c:7c:87:fa:2d:b6:b3:ba:
         aa:70:39:11:fb:ff:e4:91:a8:b2:69:d6:b8:5a:7a:6b:7a:5b:
         88:da:c4:af:82:6c:74:01:c4:4c:8e:20:c5:3e:17:f4:64:c6:
         45:23:d1:51:3d:d6:a8:4a:4e:f7:a1:bb:be:84:c6:38:4e:92:
         61:18:ea:cf:a0:41:e0:13:5f:be:ed:ff:1a:bd:aa:9b:7f:c7:
         b9:df:12:43:7f:94:cb:1f:b2:f7:b0:ab:eb:82:a7:40:86:4c:
         78:14:47:a5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNjAzMzEw
NzM1MzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCQjJGQUFGNDBCNDlD
ODIyNUYwMDc4OUUzNTBCREFCRjlDNkVBOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxjtY4aeiDujlPLG+j7EWpRCSjSrxd+Hte4NZKkC18EyJx+6aS
Wyk/Csqk0EHbAsXJBV3F3AHeb1wEeg/k3HktzMxKvk1e5D1G80yyStXRwYCZnn7Q
Nx5s9Lo4OzASEJRr+E9uQZHz2W2Ud+icINuPAoqWuYcqgtX6mkRhYJG4E4j6KS2z
rL7MlQiUIb0zrWFaOFvwjflMJHeSK6F8ddczSBB8m/lCK9QgVQKhuUSugxizNAee
xJEmAq47qjJySVvRkK87BGqq7K02CiGszFy33xphl+1lv2yWihBlcJpoFIs2awiv
Is2x6JEk7TDEVJE5weKzWEF/0davinOSwwG/AgMBAAGjggHVMIIB0TAdBgNVHQ4E
FgQUO7L6r0C0nIIl8AeJ41C9q/nG6oowHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF
BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvTzdMNnIwQzBuSUlsOEFlSjQxQzlxX25HNm9vLnJvYTAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBjHvQDANBgkqhkiG9w0BAQsFAAOCAQEACLe1
kB4dHxviUGe0JzPceL6YftAaMR4qy6d42lB2UdeYlmD7ShUAHF2TJ0cLkS8VRVrl
r/iSZEQhgGP3ZOLdNvv0lxoOv2ggPt+mT9g5GtXeGl3iJG76VjJ/PmBGLToeWrmS
rKDYoTsgmT+Q/xyYkM5bp5ULrdMWzpm1FB7CuBIwN4YEvjk1wNo1E4I3WiHkV1qy
AZ6X2VRc8Ux8h/ottrO6qnA5Efv/5JGosmnWuFp6a3pbiNrEr4JsdAHETI4gxT4X
9GTGRSPRUT3WqEpO96G7voTGOE6SYRjqz6BB4BNfvu3/Gr2qm3/Hud8SQ3+Uyx+y
97Cr64KnQIZMeBRHpQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:24:54 2026 by rpki-client