Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/kqMlFspQHJV0kirqIM7OO03uHhs.roa
File:                     kqMlFspQHJV0kirqIM7OO03uHhs.roa (raw, json)
Hash identifier:          nlHFYA6lNbCK6a7yx1JLxm7rxoUvWeUCJ+Kevhi+70g=
Subject key identifier:   92:A3:25:16:CA:50:1C:95:74:92:2A:EA:20:CE:CE:3B:4D:EE:1E:1B
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       93
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/kqMlFspQHJV0kirqIM7OO03uHhs.roa
Signing time:             Tue 31 Mar 2026 07:50:41 +0000
ROA not before:           Tue 31 Mar 2026 07:50:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18144
IP address blocks:        36.52.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Mar 31 07:50:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=92A32516CA501C9574922AEA20CECE3B4DEE1E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:41:97:be:0b:9f:64:86:4e:76:5b:ba:c4:
                    b9:f1:33:df:d3:23:ed:fd:25:d0:4f:41:a6:0a:20:
                    16:44:53:b4:ac:5f:0d:bf:29:e4:f4:65:8f:65:e5:
                    22:45:32:bb:34:fc:be:8a:cc:1f:b6:5e:4b:08:da:
                    9e:63:5e:b4:dc:f5:7f:08:75:7c:b5:7d:7d:f1:52:
                    59:7d:b6:59:79:f1:5f:24:40:7d:3d:79:d1:a2:f1:
                    4c:0f:2c:a7:ea:0b:db:d8:55:3b:fe:59:ba:9e:56:
                    4c:0d:78:be:95:04:43:81:8b:c9:53:19:f3:49:ae:
                    58:52:fc:de:34:55:4e:62:94:5d:9d:75:fd:c8:6d:
                    e8:a6:5c:1d:3c:0f:f6:31:91:7e:f4:e9:52:3a:7a:
                    dd:21:b9:34:53:f2:8e:e3:95:71:a8:20:33:f0:70:
                    d3:0a:86:7e:42:29:47:e1:80:74:6b:0d:fa:32:1e:
                    07:7f:4f:6e:36:2c:d1:a7:81:47:4c:c7:4e:1c:f4:
                    a3:1b:53:0c:ed:a9:8a:ea:76:f9:75:eb:e4:ac:74:
                    4c:7e:3e:54:af:7c:63:48:58:56:f7:7b:68:e3:0d:
                    d4:a1:bc:ed:a2:18:72:d8:82:5e:fc:e6:54:69:f2:
                    85:c9:9f:0a:30:9a:c6:96:95:49:23:51:83:91:23:
                    71:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A3:25:16:CA:50:1C:95:74:92:2A:EA:20:CE:CE:3B:4D:EE:1E:1B
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/kqMlFspQHJV0kirqIM7OO03uHhs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:85:b6:d5:bf:f2:26:a4:31:f5:12:77:87:bc:13:c2:f6:d1:
         ab:af:31:91:07:62:1d:26:5c:d1:ca:89:55:de:f3:87:1f:5e:
         c8:1c:d4:b7:66:c9:6c:bf:41:b0:13:34:2e:5b:87:4e:8a:80:
         d5:57:9c:19:60:7c:21:95:bf:d5:a7:00:44:b4:1d:a8:af:ac:
         d2:30:a1:61:d6:ca:07:a3:9f:98:8b:d2:00:2a:2e:69:69:8e:
         74:5d:39:11:af:1b:c8:8a:c6:4b:2c:b9:65:79:95:1b:81:a4:
         8b:5f:b9:f1:80:e5:db:43:b3:5c:2a:d6:57:df:c5:fb:a6:ff:
         8f:5f:f7:8c:13:23:e4:2b:06:d2:c4:65:68:5b:8a:1e:ab:46:
         b4:f1:9b:98:45:25:74:49:34:16:2f:5a:b3:d5:4d:89:c4:c7:
         da:c8:67:cd:dc:a1:12:15:c9:a4:51:de:2b:58:c7:06:c3:46:
         f8:f6:22:56:6c:0e:ef:4a:ba:65:95:88:0f:3a:7d:6d:e6:10:
         5d:91:82:05:0b:9d:f6:cf:23:cc:92:58:20:78:fc:b1:e9:fd:
         f1:49:ef:17:d1:7e:29:e8:77:66:a2:ae:4a:c2:f4:9e:e9:b6:
         0f:34:bd:a1:c2:09:a8:d7:58:6d:5c:f7:85:1b:24:a7:06:b6:
         90:75:6b:40
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0I4
MzAwQjIwNjU5QkI5NTEwNjBGNjBCMUY0QkM2MDkxQUYyNzYzOTAeFw0yNjAzMzEw
NzUwNDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkyQTMyNTE2Q0E1MDFD
OTU3NDkyMkFFQTIwQ0VDRTNCNERFRTFFMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCukEGXvgufZIZOdlu6xLnxM9/TI+39JdBPQaYKIBZEU7SsXw2/
KeT0ZY9l5SJFMrs0/L6KzB+2XksI2p5jXrTc9X8IdXy1fX3xUll9tll58V8kQH09
edGi8UwPLKfqC9vYVTv+WbqeVkwNeL6VBEOBi8lTGfNJrlhS/N40VU5ilF2ddf3I
beimXB08D/YxkX706VI6et0huTRT8o7jlXGoIDPwcNMKhn5CKUfhgHRrDfoyHgd/
T242LNGngUdMx04c9KMbUwztqYrqdvl16+SsdEx+PlSvfGNIWFb3e2jjDdShvO2i
GHLYgl785lRp8oXJnwowmsaWlUkjUYORI3FXAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUkqMlFspQHJV0kirqIM7OO03uHhswHwYDVR0jBBgwFoAUy4MAsgZZu5UQYPYL
H0vGCRrydjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzc4My95NE1Bc2daWnU1VVFZUFlMSDB2R0NScnlkamsuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95NE1Bc2daWnU1VVFZUFlMSDB2R0NS
cnlkamsuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNzgzL2txTWxGc3BRSEpWMGtpcnFJTTdPTzAzdUhocy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMkNJgwDQYJKoZIhvcNAQELBQADggEB
ACKFttW/8iakMfUSd4e8E8L20auvMZEHYh0mXNHKiVXe84cfXsgc1LdmyWy/QbAT
NC5bh06KgNVXnBlgfCGVv9WnAES0HaivrNIwoWHWygejn5iL0gAqLmlpjnRdORGv
G8iKxkssuWV5lRuBpItfufGA5dtDs1wq1lffxfum/49f94wTI+QrBtLEZWhbih6r
RrTxm5hFJXRJNBYvWrPVTYnEx9rIZ83coRIVyaRR3itYxwbDRvj2IlZsDu9KumWV
iA86fW3mEF2RggULnfbPI8ySWCB4/LHp/fFJ7xfRfinod2airkrC9J7ptg80vaHC
CajXWG1c94UbJKcGtpB1a0A=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:45 2026 by rpki-client