Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/Yb_bd6k5smGYk4op28O7s_EB6lI.roa
File:                     Yb_bd6k5smGYk4op28O7s_EB6lI.roa (raw, json)
Hash identifier:          oLpWRlB/t/kESc+gq413JwP5cNgELLxZhc4mIkeRnXU=
Subject key identifier:   61:BF:DB:77:A9:39:B2:61:98:93:8A:29:DB:C3:BB:B3:F1:01:EA:52
Certificate issuer:       /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
Certificate serial:       5A
Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/Yb_bd6k5smGYk4op28O7s_EB6lI.roa
Signing time:             Tue 31 Mar 2026 08:14:56 +0000
ROA not before:           Tue 31 Mar 2026 08:14:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24271
IP address blocks:        202.177.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
        Validity
            Not Before: Mar 31 08:14:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=61BFDB77A939B26198938A29DBC3BBB3F101EA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:7f:af:83:6b:c6:87:bd:a2:0e:d4:cd:3f:
                    5e:6f:22:0f:9d:52:e5:19:f7:60:87:91:2f:69:fd:
                    aa:60:5d:e5:a4:4d:87:45:eb:0f:ec:c5:51:18:3d:
                    60:7d:c7:ca:6d:ff:03:fa:62:db:df:0b:d8:34:1c:
                    18:13:24:86:ae:0a:57:78:d6:77:8a:aa:10:69:f1:
                    28:96:3a:7e:b1:3e:40:03:dc:7b:0e:0f:b1:30:9b:
                    3f:ab:ce:db:9b:7b:3d:23:d4:d0:44:41:02:55:b3:
                    4e:88:c1:98:0e:4d:f3:b2:23:68:3d:4c:29:1a:89:
                    12:fe:01:45:3d:68:85:cb:9c:c0:38:67:01:9f:2f:
                    f2:a9:af:f3:2f:9e:b2:64:78:35:d7:1f:0f:25:b0:
                    50:f9:d9:75:69:e4:ba:42:42:83:89:4f:d3:b0:c2:
                    5d:34:fc:38:eb:68:1e:d8:5c:6b:ba:73:22:7a:2b:
                    0d:e9:c0:eb:5b:a9:20:04:93:63:44:0a:da:59:ad:
                    72:84:a6:0c:37:ff:7e:15:94:da:49:50:b7:ba:17:
                    41:b1:79:7e:49:de:85:cf:43:06:08:1d:7c:c8:20:
                    43:6e:c0:b3:ae:40:74:2f:aa:a5:10:83:ee:ff:df:
                    f5:95:b0:11:cd:cc:0a:0b:84:74:54:42:0d:84:d3:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BF:DB:77:A9:39:B2:61:98:93:8A:29:DB:C3:BB:B3:F1:01:EA:52
            X509v3 Authority Key Identifier:
                keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/Yb_bd6k5smGYk4op28O7s_EB6lI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.177.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:83:4c:dd:66:14:86:2a:58:e8:01:8f:2e:a6:30:dd:9a:94:
         37:9f:d5:33:39:07:2f:c7:67:64:82:b7:a4:e0:da:eb:9f:8b:
         23:0a:8b:76:c2:df:e5:3f:bf:d6:b5:cc:60:40:88:2d:5e:e9:
         ab:b3:c9:4b:5c:65:85:1a:37:78:06:cb:89:ae:2d:16:c4:45:
         df:af:d4:b6:72:da:fb:d2:9d:ce:7f:00:05:3d:9a:ac:ac:22:
         f4:b2:07:6f:5a:bf:e5:24:ec:90:7a:3b:c6:ab:1f:d1:8b:fe:
         7c:74:b2:ed:6b:74:b9:80:4f:10:29:5e:8b:16:d5:44:86:59:
         f7:68:e1:f7:e6:94:0f:75:cb:bc:f8:93:a0:d9:b9:c7:d3:e9:
         8e:27:53:b0:6d:52:1f:96:41:95:24:1b:97:68:55:2a:a2:9c:
         77:61:b1:37:ba:97:ef:b8:6c:7f:f1:13:23:cb:21:80:2a:c6:
         e7:e6:e2:f0:26:62:d4:ec:a5:74:15:70:94:c7:40:45:eb:c7:
         2d:93:f7:3c:ad:d5:f6:17:9b:df:3e:0c:4c:ed:c5:31:41:e7:
         5f:ab:5f:5e:25:ce:ff:21:29:c5:f6:27:ed:59:e5:b0:87:6a:
         41:60:10:bd:2e:92:cd:8e:c5:76:c9:98:bd:aa:85:11:10:d1:
         07:5b:be:66
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDA5
NjJFREUwRjVFMjFBN0U4RjlFMUFCMDA2RkY5NDBFMDRFRDQ2MB4XDTI2MDMzMTA4
MTQ1NloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjFCRkRCNzdBOTM5QjI2
MTk4OTM4QTI5REJDM0JCQjNGMTAxRUE1MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALXnf6+Da8aHvaIO1M0/Xm8iD51S5Rn3YIeRL2n9qmBd5aRNh0Xr
D+zFURg9YH3Hym3/A/pi298L2DQcGBMkhq4KV3jWd4qqEGnxKJY6frE+QAPcew4P
sTCbP6vO25t7PSPU0ERBAlWzTojBmA5N87IjaD1MKRqJEv4BRT1ohcucwDhnAZ8v
8qmv8y+esmR4NdcfDyWwUPnZdWnkukJCg4lP07DCXTT8OOtoHthca7pzInorDenA
61upIASTY0QK2lmtcoSmDDf/fhWU2klQt7oXQbF5fknehc9DBggdfMggQ27As65A
dC+qpRCD7v/f9ZWwEc3MCguEdFRCDYTTLJcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRhv9t3qTmyYZiTiinbw7uz8QHqUjAfBgNVHSMEGDAWgBSNCWLt4PXiGn6Pnhqw
Bv+UDgTtRjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODY4L2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0RTdVWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0
RTdVWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84NjgvWWJfYmQ2azVzbUdZazRvcDI4TzdzX0VCNmxJLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMqxcDANBgkqhkiG9w0BAQsFAAOCAQEA
doNM3WYUhipY6AGPLqYw3ZqUN5/VMzkHL8dnZIK3pODa65+LIwqLdsLf5T+/1rXM
YECILV7pq7PJS1xlhRo3eAbLia4tFsRF36/UtnLa+9Kdzn8ABT2arKwi9LIHb1q/
5STskHo7xqsf0Yv+fHSy7Wt0uYBPECleixbVRIZZ92jh9+aUD3XLvPiToNm5x9Pp
jidTsG1SH5ZBlSQbl2hVKqKcd2GxN7qX77hsf/ETI8shgCrG5+bi8CZi1OyldBVw
lMdARevHLZP3PK3V9heb3z4MTO3FMUHnX6tfXiXO/yEpxfYn7VnlsIdqQWAQvS6S
zY7FdsmYvaqFERDRB1u+Zg==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:17 2026 by rpki-client