Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/820/NecwlLcXSC2oaqugfZg96kr57nI.roa
File:                     NecwlLcXSC2oaqugfZg96kr57nI.roa (raw, json)
Hash identifier:          0Oo8zg6XG9iUgtoHJxmamCtSzpg5BhjJZ4Bl0EEfOQQ=
Subject key identifier:   35:E7:30:94:B7:17:48:2D:A8:6A:AB:A0:7D:98:3D:EA:4A:F9:EE:72
Certificate issuer:       /CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
Certificate serial:       49
Authority key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/NecwlLcXSC2oaqugfZg96kr57nI.roa
Signing time:             Tue 31 Mar 2026 08:22:54 +0000
ROA not before:           Tue 31 Mar 2026 08:22:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23614
IP address blocks:        210.158.181.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
        Validity
            Not Before: Mar 31 08:22:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=35E73094B717482DA86AABA07D983DEA4AF9EE72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:a0:d0:81:a9:fe:ab:05:c7:a3:a7:98:72:
                    5f:42:15:8a:f1:5d:76:76:f4:ba:df:48:f6:bb:e8:
                    01:d4:13:00:ec:1b:87:e7:9d:56:ad:25:a7:bc:f8:
                    87:9b:b2:ef:4e:32:f7:c3:4a:a2:1a:e8:6e:63:ea:
                    c7:cf:1f:7b:fb:b8:66:5c:ed:45:dc:fe:a8:07:5e:
                    5e:72:3c:6f:73:96:5d:1b:7f:9a:f3:a0:21:8d:1c:
                    2d:1d:fe:06:02:ca:97:88:1d:c8:93:08:2b:48:79:
                    97:08:aa:60:e5:7e:b9:68:3e:f7:8e:86:72:8d:2c:
                    f6:0c:a7:23:94:e4:24:e5:ba:a8:6e:4c:24:84:8c:
                    96:e7:92:64:a0:57:37:a2:5b:4d:f2:0b:cb:86:73:
                    56:a5:c7:10:0d:89:95:4c:de:6f:50:42:3d:06:9e:
                    dc:5f:17:5d:a5:91:d8:66:be:5b:99:3f:37:c7:62:
                    b5:3f:7d:5f:0c:73:bc:ad:b9:fc:81:5e:bb:6c:a2:
                    d8:a2:ac:83:e1:a2:90:c4:92:fc:90:39:85:61:af:
                    eb:df:87:21:51:42:d7:a3:1b:1a:40:cf:cc:b4:63:
                    ad:de:9a:8e:09:97:f0:5e:9c:5c:6e:3c:e1:fb:28:
                    b6:f3:71:ea:bc:3c:d8:3b:3d:3e:ad:7d:b8:bc:a7:
                    19:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E7:30:94:B7:17:48:2D:A8:6A:AB:A0:7D:98:3D:EA:4A:F9:EE:72
            X509v3 Authority Key Identifier:
                keyid:9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/NecwlLcXSC2oaqugfZg96kr57nI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:07:6d:3a:37:6c:ae:bb:55:3c:36:14:37:5e:46:bc:30:4d:
         54:c2:60:b6:a0:ad:d2:27:b5:f0:ef:67:c9:04:3d:e9:fe:85:
         12:5b:7d:42:8a:6a:ca:5c:48:c6:c8:02:94:bd:db:f2:a9:4d:
         fe:e7:0b:aa:0b:97:80:b1:24:38:ea:64:e1:5f:e0:e9:d1:b4:
         b9:95:ee:fd:0c:9b:22:0a:1a:a3:76:d1:05:9e:f7:97:8d:3d:
         1b:4e:ee:07:c0:1e:f0:9b:be:23:76:82:3f:4a:e8:ac:45:d9:
         da:bc:3a:2b:71:25:c5:99:bb:a8:bf:44:c3:56:2c:b0:fe:a2:
         07:21:9b:0c:48:85:2b:da:37:78:a0:c4:5c:4c:49:9e:21:4a:
         6e:3d:ca:d3:4c:e9:c3:02:11:89:d6:da:26:ad:83:fc:55:ef:
         0c:f2:8d:f3:53:1d:a0:22:75:2e:30:3e:8c:cc:ff:e1:c3:34:
         e8:2e:ea:34:b0:52:6c:07:8f:a7:a8:57:4e:41:28:92:8a:d0:
         a7:c7:c0:b0:e6:51:a9:ad:c0:35:b5:14:4a:89:e9:d4:ef:75:
         67:84:82:74:a5:c4:ea:1b:3d:d3:50:8d:b4:b4:3f:aa:e1:60:
         29:af:59:6b:b8:f0:ce:cc:05:d3:c4:e8:13:ff:69:67:99:b8:
         09:6e:89:c4
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RkVC
MTA1QzY3RTVGRDVDOUUxQUZEMDZBMzQzQzg0MUYwNUE3RjE1MB4XDTI2MDMzMTA4
MjI1NFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzVFNzMwOTRCNzE3NDgy
REE4NkFBQkEwN0Q5ODNERUE0QUY5RUU3MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM37oNCBqf6rBcejp5hyX0IVivFddnb0ut9I9rvoAdQTAOwbh+ed
Vq0lp7z4h5uy704y98NKohrobmPqx88fe/u4ZlztRdz+qAdeXnI8b3OWXRt/mvOg
IY0cLR3+BgLKl4gdyJMIK0h5lwiqYOV+uWg+946Gco0s9gynI5TkJOW6qG5MJISM
lueSZKBXN6JbTfILy4ZzVqXHEA2JlUzeb1BCPQae3F8XXaWR2Ga+W5k/N8ditT99
XwxzvK25/IFeu2yi2KKsg+GikMSS/JA5hWGv69+HIVFC16MbGkDPzLRjrd6ajgmX
8F6cXG484fsotvNx6rw82Ds9Pq19uLynGakCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQ15zCUtxdILahqq6B9mD3qSvnucjAfBgNVHSMEGDAWgBSf6xBcZ+X9XJ4a/Qaj
Q8hB8Fp/FTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODIwL24tc1FYR2ZsX1Z5ZUd2MEdvMFBJUWZCYWZ4VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL24tc1FYR2ZsX1Z5ZUd2MEdvMFBJUWZC
YWZ4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84MjAvTmVjd2xMY1hTQzJvYXF1Z2ZaZzk2a3I1N25JLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANKetTANBgkqhkiG9w0BAQsFAAOCAQEA
KwdtOjdsrrtVPDYUN15GvDBNVMJgtqCt0ie18O9nyQQ96f6FElt9QopqylxIxsgC
lL3b8qlN/ucLqguXgLEkOOpk4V/g6dG0uZXu/QybIgoao3bRBZ73l409G07uB8Ae
8Ju+I3aCP0rorEXZ2rw6K3ElxZm7qL9Ew1YssP6iByGbDEiFK9o3eKDEXExJniFK
bj3K00zpwwIRidbaJq2D/FXvDPKN81MdoCJ1LjA+jMz/4cM06C7qNLBSbAePp6hX
TkEokorQp8fAsOZRqa3ANbUUSonp1O91Z4SCdKXE6hs901CNtLQ/quFgKa9Za7jw
zswF08ToE/9pZ5m4CW6JxA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:17 2026 by rpki-client