Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/908/vFjyvTF5wI8ooiYOkdESQMG_KYw.roa
File:                     vFjyvTF5wI8ooiYOkdESQMG_KYw.roa (raw, json)
Hash identifier:          aEUQvRa1BWHlaxn1dcQDugEHf2YXsa9TsecU0pnbSkw=
Subject key identifier:   BC:58:F2:BD:31:79:C0:8F:28:A2:26:0E:91:D1:12:40:C1:BF:29:8C
Certificate issuer:       /CN=D309646925B27B03DA591350A2DB39E49BF79E5D
Certificate serial:       15
Authority key identifier: D3:09:64:69:25:B2:7B:03:DA:59:13:50:A2:DB:39:E4:9B:F7:9E:5D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0wlkaSWyewPaWRNQots55Jv3nl0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/908/vFjyvTF5wI8ooiYOkdESQMG_KYw.roa
Signing time:             Tue 31 Mar 2026 08:45:21 +0000
ROA not before:           Tue 31 Mar 2026 08:45:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9607
IP address blocks:        202.183.80.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/908/0wlkaSWyewPaWRNQots55Jv3nl0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/908/0wlkaSWyewPaWRNQots55Jv3nl0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0wlkaSWyewPaWRNQots55Jv3nl0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D309646925B27B03DA591350A2DB39E49BF79E5D
        Validity
            Not Before: Mar 31 08:45:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BC58F2BD3179C08F28A2260E91D11240C1BF298C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:53:0d:6f:d9:51:ba:39:e9:9a:f4:ca:38:
                    e2:2c:48:72:35:d2:ae:3b:18:6f:3c:8e:c6:be:04:
                    29:d2:3b:d5:64:5f:79:da:21:32:1e:47:d3:fa:ba:
                    52:49:46:6d:18:51:d1:fd:bb:8c:1a:d0:ec:1e:b3:
                    6a:f6:a5:0c:24:cb:7a:c9:82:a3:d8:9a:d6:fe:3e:
                    b2:95:05:9b:d2:e0:21:1f:b0:69:3c:27:ce:f8:34:
                    cc:e4:c3:3f:a6:47:ce:00:c4:54:4a:1e:2b:e7:02:
                    58:0b:58:5b:4a:b9:0c:1f:4e:9a:1d:40:1b:fd:ac:
                    9a:f6:7f:99:68:65:5a:ec:40:bf:53:18:2f:db:27:
                    0a:71:ba:bc:8a:25:31:2b:d5:48:d2:84:05:ee:34:
                    f4:8c:3c:d9:19:ac:8c:58:70:f5:ff:bd:d6:85:62:
                    55:0b:3a:70:72:dc:e1:b4:39:de:3c:99:bf:3e:94:
                    ab:56:d9:93:d2:03:a4:12:55:11:67:da:28:48:fd:
                    da:78:93:06:b2:78:79:76:43:31:51:f8:f1:e6:c5:
                    75:dc:40:7f:5f:03:3c:45:4c:b9:40:8e:4b:6c:8a:
                    ad:f6:b2:af:94:42:db:67:4e:a7:da:bc:92:42:4f:
                    b7:7a:e5:2f:94:7b:06:14:9e:48:f4:eb:5d:e2:25:
                    b1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:58:F2:BD:31:79:C0:8F:28:A2:26:0E:91:D1:12:40:C1:BF:29:8C
            X509v3 Authority Key Identifier:
                keyid:D3:09:64:69:25:B2:7B:03:DA:59:13:50:A2:DB:39:E4:9B:F7:9E:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/908/0wlkaSWyewPaWRNQots55Jv3nl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0wlkaSWyewPaWRNQots55Jv3nl0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/908/vFjyvTF5wI8ooiYOkdESQMG_KYw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:7c:a8:92:d7:8f:67:2f:a7:8f:7e:6c:51:c5:ae:9d:2a:f8:
         56:6e:67:88:53:ef:ab:6f:15:91:7f:fb:73:6d:34:3f:23:82:
         19:9f:57:fb:28:6f:33:f9:ce:ef:0b:cc:c9:6d:63:f1:e1:74:
         61:af:e8:e2:1c:88:d8:3f:da:21:06:a5:df:4d:06:e7:2d:ed:
         74:ea:04:d0:7a:3c:70:f3:90:0f:d5:82:1f:89:1a:3d:52:9d:
         43:71:58:6d:a0:05:80:bc:98:a9:a2:28:fa:bb:99:ca:66:93:
         cc:45:c8:2d:c7:fe:0e:cc:62:4f:4b:49:e1:66:98:ac:e9:0e:
         12:05:1d:21:73:69:4f:24:69:39:95:fa:d4:ad:b3:d0:b8:5d:
         5e:5c:08:a5:54:7f:28:f1:9f:09:3e:79:91:dd:ed:10:a8:b0:
         b4:8a:17:54:ab:c4:ac:22:2a:69:cb:9c:24:9b:65:05:7a:20:
         a1:7e:db:d4:a5:6d:44:e0:3d:6a:9d:47:27:2b:22:e0:81:0a:
         96:fb:a0:43:17:40:9d:be:14:a0:92:c6:c7:f4:c2:43:f1:9d:
         61:cc:b3:02:6f:0f:c5:38:e8:5a:57:83:44:63:46:a5:f4:1a:
         7a:ca:3a:72:7a:60:91:d5:ef:7b:c3:51:d1:31:8d:18:eb:01:
         7e:47:70:b0
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMzA5
NjQ2OTI1QjI3QjAzREE1OTEzNTBBMkRCMzlFNDlCRjc5RTVEMB4XDTI2MDMzMTA4
NDUyMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQkM1OEYyQkQzMTc5QzA4
RjI4QTIyNjBFOTFEMTEyNDBDMUJGMjk4QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMxfUw1v2VG6Oema9Mo44ixIcjXSrjsYbzyOxr4EKdI71WRfedoh
Mh5H0/q6UklGbRhR0f27jBrQ7B6zavalDCTLesmCo9ia1v4+spUFm9LgIR+waTwn
zvg0zOTDP6ZHzgDEVEoeK+cCWAtYW0q5DB9Omh1AG/2smvZ/mWhlWuxAv1MYL9sn
CnG6vIolMSvVSNKEBe409Iw82RmsjFhw9f+91oViVQs6cHLc4bQ53jyZvz6Uq1bZ
k9IDpBJVEWfaKEj92niTBrJ4eXZDMVH48ebFddxAf18DPEVMuUCOS2yKrfayr5RC
22dOp9q8kkJPt3rlL5R7BhSeSPTrXeIlsa0CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBS8WPK9MXnAjyiiJg6R0RJAwb8pjDAfBgNVHSMEGDAWgBTTCWRpJbJ7A9pZE1Ci
2znkm/eeXTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA4LzB3bGthU1d5ZXdQYVdSTlFvdHM1NUp2M25sMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzB3bGthU1d5ZXdQYVdSTlFvdHM1NUp2
M25sMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MDgvdkZqeXZURjV3SThvb2lZT2tkRVNRTUdfS1l3LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8q3UDANBgkqhkiG9w0BAQsFAAOCAQEA
KHyoktePZy+nj35sUcWunSr4Vm5niFPvq28VkX/7c200PyOCGZ9X+yhvM/nO7wvM
yW1j8eF0Ya/o4hyI2D/aIQal300G5y3tdOoE0Ho8cPOQD9WCH4kaPVKdQ3FYbaAF
gLyYqaIo+ruZymaTzEXILcf+DsxiT0tJ4WaYrOkOEgUdIXNpTyRpOZX61K2z0Lhd
XlwIpVR/KPGfCT55kd3tEKiwtIoXVKvErCIqacucJJtlBXogoX7b1KVtROA9ap1H
Jysi4IEKlvugQxdAnb4UoJLGx/TCQ/GdYcyzAm8PxTjoWleDRGNGpfQaeso6cnpg
kdXve8NR0TGNGOsBfkdwsA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:03 2026 by rpki-client