Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/QQG_uxRC45Sqxyqiz5ZJdpGYsr8.roa
File:                     QQG_uxRC45Sqxyqiz5ZJdpGYsr8.roa (raw, json)
Hash identifier:          z0hnVyxeBZBI6+r2MzAY3/P1rqO4IAaOj9zc3aJVLjg=
Subject key identifier:   41:01:BF:BB:14:42:E3:94:AA:C7:2A:A2:CF:96:49:76:91:98:B2:BF
Certificate issuer:       /CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Certificate serial:       31
Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/QQG_uxRC45Sqxyqiz5ZJdpGYsr8.roa
Signing time:             Tue 31 Mar 2026 08:38:57 +0000
ROA not before:           Tue 31 Mar 2026 08:38:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23827
IP address blocks:        202.84.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0
        Validity
            Not Before: Mar 31 08:38:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4101BFBB1442E394AAC72AA2CF9649769198B2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:cc:8a:9e:06:33:42:f0:3e:fe:ad:29:db:
                    74:56:7c:c5:67:d7:b0:21:5d:9c:08:66:d5:aa:ba:
                    62:a4:1d:1a:79:35:d9:cf:f3:7e:39:da:cc:c7:59:
                    c9:98:d1:a5:27:bf:c8:40:a4:47:bd:93:b7:87:07:
                    39:ba:27:d2:47:a3:d3:bc:5f:77:45:77:e7:45:89:
                    60:70:f9:ab:be:ac:5a:56:52:41:40:2f:95:04:a5:
                    0d:6c:2b:07:f0:c0:da:fb:d8:5a:48:e0:ad:39:84:
                    3e:41:2c:1e:25:8d:19:aa:63:0a:aa:e3:27:b9:94:
                    f4:1a:5d:5b:0a:5d:2b:fc:a2:a1:67:02:1e:5f:ec:
                    46:e5:46:4d:92:ca:7c:2f:9f:73:61:11:fe:b7:b6:
                    1c:88:b2:25:6d:4f:69:90:35:12:8f:01:d9:ca:d6:
                    e0:c7:ac:16:b9:30:32:88:f3:18:af:48:39:1e:f2:
                    ee:d1:21:5a:b2:83:8a:b8:e7:1f:92:75:9c:bd:33:
                    0e:21:a2:6b:4a:3f:da:35:d5:48:f0:b2:cb:d3:08:
                    b8:ae:e0:d8:20:99:ab:13:1c:7f:07:84:3b:1a:1c:
                    a3:93:77:4b:0e:e3:19:07:e2:70:84:b3:26:a0:bb:
                    71:3d:be:6c:fa:f4:75:3d:69:92:42:5b:4d:87:5d:
                    d4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:01:BF:BB:14:42:E3:94:AA:C7:2A:A2:CF:96:49:76:91:98:B2:BF
            X509v3 Authority Key Identifier:
                keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/QQG_uxRC45Sqxyqiz5ZJdpGYsr8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.84.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:5e:40:f6:f4:2f:32:33:39:21:0d:5f:9c:d2:fb:d1:12:
         e2:a9:78:46:60:2a:49:a4:ff:4b:ef:64:37:9a:eb:9c:ae:b8:
         3e:d4:63:71:08:6a:10:4e:28:52:d9:ed:0f:8a:e4:57:ed:f0:
         4a:5f:90:41:b7:10:ce:ad:8d:d3:9f:a8:86:37:7b:b3:9d:fd:
         e6:da:9c:8c:ba:f7:14:8e:f4:89:d2:4d:d7:d0:80:e9:44:ed:
         a0:8a:79:76:fa:5d:d1:55:b4:e3:9b:6c:4f:f9:1c:52:3c:d9:
         79:8e:76:04:29:7d:90:0d:be:f9:1a:88:db:c7:e2:8f:06:e9:
         fd:c8:c9:93:95:16:ae:eb:d7:df:87:d8:5d:22:6b:b5:96:31:
         5b:77:58:54:81:a4:ae:60:16:ed:34:1b:ce:38:bb:26:01:27:
         de:8d:a2:65:f5:bc:1e:4d:cd:8a:74:1d:ae:e9:6a:ee:88:4d:
         61:52:8e:8d:5a:86:db:1f:0a:a5:83:9b:ac:38:41:a2:52:71:
         c4:b3:64:53:90:58:39:a6:d2:3b:dc:a8:78:d1:47:fa:bc:39:
         93:04:38:a0:92:13:d0:8a:c0:0a:53:ac:fb:b1:34:b1:4c:56:
         28:87:fd:2c:f2:e7:eb:73:e3:c4:7d:41:6c:bd:77:fc:52:ce:
         8b:d0:5e:2a
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERDgy
OUQ2NDZENTNFQ0YyOTg5NTBCNjg3NTMyREU5MjZFQzdFQkMwMB4XDTI2MDMzMTA4
Mzg1N1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDEwMUJGQkIxNDQyRTM5
NEFBQzcyQUEyQ0Y5NjQ5NzY5MTk4QjJCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL9TzIqeBjNC8D7+rSnbdFZ8xWfXsCFdnAhm1aq6YqQdGnk12c/z
fjnazMdZyZjRpSe/yECkR72Tt4cHObon0kej07xfd0V350WJYHD5q76sWlZSQUAv
lQSlDWwrB/DA2vvYWkjgrTmEPkEsHiWNGapjCqrjJ7mU9BpdWwpdK/yioWcCHl/s
RuVGTZLKfC+fc2ER/re2HIiyJW1PaZA1Eo8B2crW4MesFrkwMojzGK9IOR7y7tEh
WrKDirjnH5J1nL0zDiGia0o/2jXVSPCyy9MIuK7g2CCZqxMcfweEOxoco5N3Sw7j
GQficISzJqC7cT2+bPr0dT1pkkJbTYdd1CcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRBAb+7FELjlKrHKqLPlkl2kZiyvzAfBgNVHSMEGDAWgBTdgp1kbVPs8piVC2h1
Mt6SbsfrwDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODkxLzNZS2RaRzFUN1BLWWxRdG9kVExla203SDY4QS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzNZS2RaRzFUN1BLWWxRdG9kVExla203
SDY4QS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84OTEvUVFHX3V4UkM0NVNxeHlxaXo1WkpkcEdZc3I4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMpUMDANBgkqhkiG9w0BAQsFAAOCAQEA
M/9eQPb0LzIzOSENX5zS+9ES4ql4RmAqSaT/S+9kN5rrnK64PtRjcQhqEE4oUtnt
D4rkV+3wSl+QQbcQzq2N05+ohjd7s5395tqcjLr3FI70idJN19CA6UTtoIp5dvpd
0VW045tsT/kcUjzZeY52BCl9kA2++RqI28fijwbp/cjJk5UWruvX34fYXSJrtZYx
W3dYVIGkrmAW7TQbzji7JgEn3o2iZfW8Hk3NinQdrulq7ohNYVKOjVqG2x8KpYOb
rDhBolJxxLNkU5BYOabSO9yoeNFH+rw5kwQ4oJIT0IrAClOs+7E0sUxWKIf9LPLn
63PjxH1BbL13/FLOi9BeKg==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:34 2026 by rpki-client