Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/910/x-krJ-A3C_JeMNcFLxnXEbePmAQ.roa
File:                     x-krJ-A3C_JeMNcFLxnXEbePmAQ.roa (raw, json)
Hash identifier:          KXLOEXPd8BznTb2SvVR8443OvaV+vg5IapRDz4HEN8w=
Subject key identifier:   C7:E9:2B:27:E0:37:0B:F2:5E:30:D7:05:2F:19:D7:11:B7:8F:98:04
Certificate issuer:       /CN=8D53E0BD233DF0962808D396EAE952150C2A5BD8
Certificate serial:       22
Authority key identifier: 8D:53:E0:BD:23:3D:F0:96:28:08:D3:96:EA:E9:52:15:0C:2A:5B:D8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVPgvSM98JYoCNOW6ulSFQwqW9g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/910/x-krJ-A3C_JeMNcFLxnXEbePmAQ.roa
Signing time:             Tue 31 Mar 2026 08:41:14 +0000
ROA not before:           Tue 31 Mar 2026 08:41:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24262
IP address blocks:        202.122.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/910/jVPgvSM98JYoCNOW6ulSFQwqW9g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/910/jVPgvSM98JYoCNOW6ulSFQwqW9g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVPgvSM98JYoCNOW6ulSFQwqW9g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D53E0BD233DF0962808D396EAE952150C2A5BD8
        Validity
            Not Before: Mar 31 08:41:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C7E92B27E0370BF25E30D7052F19D711B78F9804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:54:80:d1:20:11:a3:8b:36:00:c2:88:75:3c:
                    73:1c:61:bf:e1:21:ad:16:ca:ff:c9:f1:c6:b5:15:
                    48:0b:14:c2:d0:46:3c:cb:3d:03:b3:60:3b:28:7a:
                    78:ea:01:5f:eb:28:c6:da:b2:82:01:c5:63:5f:58:
                    6d:6b:39:12:4b:a6:d4:be:82:30:b8:2f:f1:fb:bc:
                    b3:6f:10:da:b9:9f:c1:2f:00:12:f7:91:6c:ce:1b:
                    73:4d:3b:1f:f9:08:d4:ef:2c:cf:f7:4c:a2:86:c5:
                    92:c5:bc:ff:4a:92:f9:17:ce:40:7e:d6:16:56:58:
                    3e:82:31:9e:9f:3b:10:08:26:02:aa:25:2a:8f:9a:
                    8c:ed:18:af:01:eb:a6:3d:56:5e:9d:86:20:11:54:
                    6b:be:b4:a0:71:a3:7d:98:8b:46:31:4c:5a:69:d8:
                    9e:d9:72:53:eb:57:2c:75:f8:3e:1b:ba:30:0e:cb:
                    81:32:08:36:0d:80:01:db:d4:66:5c:de:25:0d:ee:
                    3c:2a:0a:84:c5:b6:1f:3e:ab:52:a2:40:c1:ba:c2:
                    c8:ab:cf:03:db:93:c0:11:46:e9:8a:b7:9b:c1:38:
                    2c:cd:06:f7:c6:9f:a6:47:da:41:58:69:c3:9c:90:
                    1a:d4:34:09:37:91:a8:bf:7f:4a:c3:75:c6:7b:fb:
                    ff:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E9:2B:27:E0:37:0B:F2:5E:30:D7:05:2F:19:D7:11:B7:8F:98:04
            X509v3 Authority Key Identifier:
                keyid:8D:53:E0:BD:23:3D:F0:96:28:08:D3:96:EA:E9:52:15:0C:2A:5B:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/910/jVPgvSM98JYoCNOW6ulSFQwqW9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVPgvSM98JYoCNOW6ulSFQwqW9g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/910/x-krJ-A3C_JeMNcFLxnXEbePmAQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.122.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:0f:c0:17:da:19:75:89:1b:18:db:e5:9d:39:fa:06:d1:1e:
         bc:ea:59:07:fc:af:eb:55:07:34:39:a0:f8:01:42:3e:13:bb:
         94:b4:f7:4f:4e:bf:08:7c:5d:b7:4d:90:e9:d0:78:8b:15:d8:
         f5:52:72:f7:57:6a:31:aa:fe:c3:58:cd:42:fd:84:8d:ff:8b:
         e9:e6:79:74:6f:c8:3d:f3:78:91:07:2e:00:c5:01:92:c2:96:
         82:4a:c9:33:2d:3f:f0:d9:38:b4:7b:08:42:25:99:17:cc:09:
         9e:03:49:0a:fa:dd:a9:0f:31:88:10:4d:78:ac:3f:bd:ba:62:
         30:7c:76:e4:01:2e:27:d9:cb:f8:b4:08:22:c7:b0:ad:f5:a4:
         fa:02:7c:03:c7:bb:a2:23:7d:82:15:1d:86:da:8f:3c:85:f2:
         5e:e6:2c:11:7d:e9:4f:b1:89:44:b5:73:92:88:8b:e5:13:ee:
         97:24:3f:79:a5:37:46:31:bd:85:52:66:58:40:69:39:e4:6a:
         65:97:6a:d4:26:dd:44:6a:7a:7d:c4:21:de:1f:6e:91:5a:24:
         6c:7a:d2:d5:f8:b4:ff:f1:75:3e:4c:a8:c4:ab:71:f4:d9:86:
         90:4d:77:64:b5:03:66:cf:4f:44:13:cb:ce:bb:95:03:98:3a:
         43:82:cd:fa
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDUz
RTBCRDIzM0RGMDk2MjgwOEQzOTZFQUU5NTIxNTBDMkE1QkQ4MB4XDTI2MDMzMTA4
NDExNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQzdFOTJCMjdFMDM3MEJG
MjVFMzBENzA1MkYxOUQ3MTFCNzhGOTgwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAONUgNEgEaOLNgDCiHU8cxxhv+EhrRbK/8nxxrUVSAsUwtBGPMs9
A7NgOyh6eOoBX+soxtqyggHFY19YbWs5Ekum1L6CMLgv8fu8s28Q2rmfwS8AEveR
bM4bc007H/kI1O8sz/dMoobFksW8/0qS+RfOQH7WFlZYPoIxnp87EAgmAqolKo+a
jO0YrwHrpj1WXp2GIBFUa760oHGjfZiLRjFMWmnYntlyU+tXLHX4Phu6MA7LgTII
Ng2AAdvUZlzeJQ3uPCoKhMW2Hz6rUqJAwbrCyKvPA9uTwBFG6Yq3m8E4LM0G98af
pkfaQVhpw5yQGtQ0CTeRqL9/SsN1xnv7/3kCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTH6Ssn4DcL8l4w1wUvGdcRt4+YBDAfBgNVHSMEGDAWgBSNU+C9Iz3wligI05bq
6VIVDCpb2DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTEwL2pWUGd2U005OEpZb0NOT1c2dWxTRlF3cVc5Zy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pWUGd2U005OEpZb0NOT1c2dWxTRlF3
cVc5Zy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MTAveC1rckotQTNDX0plTU5jRkx4blhFYmVQbUFRLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8p6iDANBgkqhkiG9w0BAQsFAAOCAQEA
bg/AF9oZdYkbGNvlnTn6BtEevOpZB/yv61UHNDmg+AFCPhO7lLT3T06/CHxdt02Q
6dB4ixXY9VJy91dqMar+w1jNQv2Ejf+L6eZ5dG/IPfN4kQcuAMUBksKWgkrJMy0/
8Nk4tHsIQiWZF8wJngNJCvrdqQ8xiBBNeKw/vbpiMHx25AEuJ9nL+LQIIsewrfWk
+gJ8A8e7oiN9ghUdhtqPPIXyXuYsEX3pT7GJRLVzkoiL5RPulyQ/eaU3RjG9hVJm
WEBpOeRqZZdq1CbdRGp6fcQh3h9ukVokbHrS1fi0//F1PkyoxKtx9NmGkE13ZLUD
Zs9PRBPLzruVA5g6Q4LN+g==
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:46 2026 by rpki-client