Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/650/ZZXwNCnaycYj0B-xxnSU5KM8dEk.roa
File:                     ZZXwNCnaycYj0B-xxnSU5KM8dEk.roa (raw, json)
Hash identifier:          NvCdF6n3n/ElVCWcOVrdrjzS5N+Nu1yCXMIFcHNpvXc=
Subject key identifier:   65:95:F0:34:29:DA:C9:C6:23:D0:1F:B1:C6:74:94:E4:A3:3C:74:49
Certificate issuer:       /CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Certificate serial:       22
Authority key identifier: 0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/ZZXwNCnaycYj0B-xxnSU5KM8dEk.roa
Signing time:             Tue 31 Mar 2026 08:44:15 +0000
ROA not before:           Tue 31 Mar 2026 08:44:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17936
IP address blocks:        203.104.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4E32227E13122FE80340BF3AED3D793D26B457
        Validity
            Not Before: Mar 31 08:44:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6595F03429DAC9C623D01FB1C67494E4A33C7449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c5:6a:a4:26:b8:2d:a6:65:1b:0c:f1:ba:fd:
                    85:48:ff:a4:b8:81:cb:d4:98:87:2e:f1:dc:49:34:
                    8e:43:2b:ef:b6:1f:92:57:6b:7a:32:f3:aa:df:04:
                    c8:08:df:03:29:48:72:11:29:79:31:db:20:88:ca:
                    f2:5e:c2:bb:d0:9b:1f:1b:d2:28:ba:30:dc:13:52:
                    ad:ac:cc:03:ec:5b:12:ad:26:e4:10:ac:d0:35:d5:
                    3f:20:0c:45:7b:5f:4a:c7:42:ec:34:90:26:cc:0c:
                    c2:fd:64:17:66:3b:bd:45:f5:cc:da:49:9e:bf:46:
                    4a:a7:ca:5e:78:21:2e:6a:e2:69:2c:43:6f:9f:00:
                    cc:72:18:22:e0:14:9f:87:5e:f3:ce:66:4c:0d:86:
                    9c:3f:c8:a0:98:09:f3:fb:ad:1d:7e:8c:98:74:b6:
                    24:ac:3b:90:d9:74:b6:0a:e4:b5:a1:74:19:19:66:
                    b9:b4:aa:56:26:89:a4:22:9a:42:1b:0b:00:94:1f:
                    a8:08:94:27:25:b7:68:1d:78:30:fb:fd:60:28:8a:
                    56:ae:70:64:a5:00:5e:1d:ed:a2:76:3b:dc:0b:f9:
                    65:c2:4d:df:73:c6:b4:47:de:7a:69:6d:bd:3c:58:
                    06:b6:38:74:46:2b:f2:e7:33:56:c9:c7:13:a5:88:
                    cb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:95:F0:34:29:DA:C9:C6:23:D0:1F:B1:C6:74:94:E4:A3:3C:74:49
            X509v3 Authority Key Identifier:
                keyid:0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/ZZXwNCnaycYj0B-xxnSU5KM8dEk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:5b:74:61:46:72:51:3c:78:96:b2:2b:9d:b9:93:48:25:
         f5:43:ab:8c:1a:3b:2a:0b:f0:ed:03:50:d8:ed:70:e6:16:ed:
         c0:f1:dc:97:ac:46:24:f2:53:a8:66:7f:6b:f3:f6:a5:65:3c:
         49:29:e1:27:77:c7:30:a6:5b:55:22:cd:e5:56:5a:6c:31:4a:
         f6:74:d8:43:4a:8b:6d:a7:a6:1c:be:28:a3:54:36:85:9c:dd:
         34:8b:03:9c:49:01:ea:f0:4f:e4:5e:6a:97:3e:7e:2e:23:83:
         45:f9:8b:88:2a:65:22:9a:a9:5e:81:a5:35:80:1b:db:df:90:
         5d:cd:86:62:87:34:10:f5:17:cb:c6:ae:f5:8c:3c:b7:23:5b:
         bc:7d:e3:ba:b7:8e:65:ff:3d:40:62:eb:41:c2:c1:85:82:2b:
         0a:48:cd:8f:81:76:c1:d0:c1:21:c1:b8:85:c7:06:fa:0f:0e:
         bf:d5:16:97:a7:7c:67:88:bb:b9:0e:a7:df:ca:95:ca:36:4c:
         dd:4d:eb:a2:67:a5:e5:ab:e6:3d:2c:9c:33:ff:71:c6:fd:56:
         a5:62:a5:6c:6c:d0:26:0d:b2:4f:6e:a4:19:e4:4f:44:e1:7a:
         06:f6:37:5b:d5:7f:3a:9e:9b:d5:07:43:79:55:c9:e1:bc:01:
         94:93:33:a7
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRTRF
MzIyMjdFMTMxMjJGRTgwMzQwQkYzQUVEM0Q3OTNEMjZCNDU3MB4XDTI2MDMzMTA4
NDQxNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjU5NUYwMzQyOURBQzlD
NjIzRDAxRkIxQzY3NDk0RTRBMzNDNzQ0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO3FaqQmuC2mZRsM8br9hUj/pLiBy9SYhy7x3Ek0jkMr77Yfkldr
ejLzqt8EyAjfAylIchEpeTHbIIjK8l7Cu9CbHxvSKLow3BNSrazMA+xbEq0m5BCs
0DXVPyAMRXtfSsdC7DSQJswMwv1kF2Y7vUX1zNpJnr9GSqfKXnghLmriaSxDb58A
zHIYIuAUn4de885mTA2GnD/IoJgJ8/utHX6MmHS2JKw7kNl0tgrktaF0GRlmubSq
ViaJpCKaQhsLAJQfqAiUJyW3aB14MPv9YCiKVq5wZKUAXh3tonY73Av5ZcJN33PG
tEfeemltvTxYBrY4dEYr8uczVsnHE6WIyzUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRllfA0KdrJxiPQH7HGdJTkozx0STAfBgNVHSMEGDAWgBQOTjIifhMSL+gDQL86
7T15PSa0VzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjUwL0RrNHlJbjRURWlfb0EwQ19PdTA5ZVQwbXRGYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RrNHlJbjRURWlfb0EwQ19PdTA5ZVQw
bXRGYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82NTAvWlpYd05DbmF5Y1lqMEIteHhuU1U1S004ZEVrLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMtocDANBgkqhkiG9w0BAQsFAAOCAQEA
BspbdGFGclE8eJayK525k0gl9UOrjBo7Kgvw7QNQ2O1w5hbtwPHcl6xGJPJTqGZ/
a/P2pWU8SSnhJ3fHMKZbVSLN5VZabDFK9nTYQ0qLbaemHL4oo1Q2hZzdNIsDnEkB
6vBP5F5qlz5+LiODRfmLiCplIpqpXoGlNYAb29+QXc2GYoc0EPUXy8au9Yw8tyNb
vH3jureOZf89QGLrQcLBhYIrCkjNj4F2wdDBIcG4hccG+g8Ov9UWl6d8Z4i7uQ6n
38qVyjZM3U3romel5avmPSycM/9xxv1WpWKlbGzQJg2yT26kGeRPROF6BvY3W9V/
Op6b1QdDeVXJ4bwBlJMzpw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:08 2026 by rpki-client