Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/946/xiKin-JHEy6ydknOgmZerLEf0I4.roa
File:                     xiKin-JHEy6ydknOgmZerLEf0I4.roa (raw, json)
Hash identifier:          v7hxP03+AjnvHQdhGNPQDY2xke6fzzz52ykfo1chUKk=
Subject key identifier:   C6:22:A2:9F:E2:47:13:2E:B2:76:49:CE:82:66:5E:AC:B1:1F:D0:8E
Certificate issuer:       /CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2
Certificate serial:       0A
Authority key identifier: 9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/xiKin-JHEy6ydknOgmZerLEf0I4.roa
Signing time:             Tue 31 Mar 2026 08:48:20 +0000
ROA not before:           Tue 31 Mar 2026 08:48:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24278
IP address blocks:        125.63.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2
        Validity
            Not Before: Mar 31 08:48:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C622A29FE247132EB27649CE82665EACB11FD08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9d:0f:37:74:be:49:e1:d9:90:25:4c:11:69:
                    72:70:d7:f9:53:23:24:be:4f:e8:1f:30:2c:bd:9c:
                    86:1e:fd:d1:fb:1a:a2:30:a3:5d:8b:d3:bd:00:3d:
                    af:69:77:e4:60:e8:c9:52:b4:ca:46:13:92:dc:67:
                    55:6b:e1:33:ac:b8:fb:55:90:45:32:d0:5e:ed:8f:
                    2b:0f:33:38:de:08:78:ae:c3:67:35:cf:ed:cf:13:
                    32:d0:02:43:51:95:85:8a:6e:ba:5e:d4:91:a8:ea:
                    b1:d2:89:d8:4c:de:13:46:9a:02:ef:10:3f:d1:f0:
                    ab:ff:45:8e:e3:25:ac:e9:46:fe:e6:b2:db:65:36:
                    0a:a2:22:b6:50:36:34:f7:97:00:ae:14:88:aa:94:
                    f7:c5:56:93:d6:28:99:3c:b2:c0:50:14:18:6a:f8:
                    5c:23:c4:b5:49:c3:7e:7c:8e:65:53:7a:07:c2:26:
                    de:00:6f:55:da:39:cd:4b:8e:e1:c5:92:15:6d:35:
                    5e:09:95:77:65:12:af:c9:46:7b:a3:11:bf:99:e1:
                    f4:5b:c1:80:8d:a3:4a:41:7a:44:f0:75:b9:22:3c:
                    31:37:24:2c:de:80:7f:f4:94:4d:f4:d2:3a:79:a1:
                    c3:f1:de:d2:15:30:db:12:1f:e7:ff:02:cf:3f:89:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:22:A2:9F:E2:47:13:2E:B2:76:49:CE:82:66:5E:AC:B1:1F:D0:8E
            X509v3 Authority Key Identifier:
                keyid:9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/xiKin-JHEy6ydknOgmZerLEf0I4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.63.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:1d:55:8f:2b:7a:e8:98:71:74:62:a7:e8:b6:32:f1:42:9d:
         69:81:da:07:21:0c:8d:6a:d4:06:38:46:01:5c:34:5c:d3:bf:
         db:cc:c8:93:93:e2:ff:94:55:ae:31:8d:61:72:6a:83:f4:9b:
         71:9b:d5:2b:40:de:8e:b7:60:2b:33:2c:77:ae:8e:94:7d:db:
         4b:48:4e:6b:e9:4c:d2:47:20:1c:39:72:1e:b0:02:27:e8:34:
         96:63:af:d3:11:6a:0b:1b:56:86:fb:2a:c7:25:cb:4a:db:b3:
         28:34:a2:db:d7:2d:cb:78:71:97:87:2b:d8:7e:5d:03:c6:6c:
         bc:0c:ce:75:1e:84:b4:de:8a:b1:7e:cc:32:f0:7c:86:db:09:
         4e:37:4e:64:1e:59:7d:05:fc:ae:4d:1f:b7:5a:c5:ac:eb:e3:
         a5:9c:4e:56:a6:0a:0d:cc:a6:47:16:40:31:3d:b4:9b:ad:e5:
         3f:65:e3:49:4d:36:ea:c0:5a:50:ad:ac:7d:fb:24:32:e2:02:
         e0:1c:e9:86:10:4d:b7:6b:8d:90:db:4a:65:3f:93:d2:0a:22:
         76:1a:62:e8:ac:bb:f8:e8:5c:3c:08:44:24:40:bb:7b:1a:bf:
         c0:6c:58:71:52:c4:3c:c2:18:cd:c9:f3:ea:88:de:e3:d3:a2:
         b7:ab:09:1c
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REJC
Qjg4NUMzRDI5MzlEMUQ5N0IyNEVBRDhCRDA2NzE3MUFEMkIyMB4XDTI2MDMzMTA4
NDgyMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQzYyMkEyOUZFMjQ3MTMy
RUIyNzY0OUNFODI2NjVFQUNCMTFGRDA4RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPSdDzd0vknh2ZAlTBFpcnDX+VMjJL5P6B8wLL2chh790fsaojCj
XYvTvQA9r2l35GDoyVK0ykYTktxnVWvhM6y4+1WQRTLQXu2PKw8zON4IeK7DZzXP
7c8TMtACQ1GVhYpuul7UkajqsdKJ2EzeE0aaAu8QP9Hwq/9FjuMlrOlG/uay22U2
CqIitlA2NPeXAK4UiKqU98VWk9YomTyywFAUGGr4XCPEtUnDfnyOZVN6B8Im3gBv
Vdo5zUuO4cWSFW01XgmVd2USr8lGe6MRv5nh9FvBgI2jSkF6RPB1uSI8MTckLN6A
f/SUTfTSOnmhw/He0hUw2xIf5/8Czz+JZ1cCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTGIqKf4kcTLrJ2Sc6CZl6ssR/QjjAfBgNVHSMEGDAWgBSdu7iFw9KTnR2Xsk6t
i9BnFxrSsjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTQ2L25idTRoY1BTazUwZGw3Sk9yWXZRWnhjYTBySS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25idTRoY1BTazUwZGw3Sk9yWXZRWnhj
YTBySS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85NDYveGlLaW4tSkhFeTZ5ZGtuT2dtWmVyTEVmMEk0LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBH0/IDANBgkqhkiG9w0BAQsFAAOCAQEA
SR1Vjyt66JhxdGKn6LYy8UKdaYHaByEMjWrUBjhGAVw0XNO/28zIk5Pi/5RVrjGN
YXJqg/SbcZvVK0DejrdgKzMsd66OlH3bS0hOa+lM0kcgHDlyHrACJ+g0lmOv0xFq
CxtWhvsqxyXLStuzKDSi29cty3hxl4cr2H5dA8ZsvAzOdR6EtN6KsX7MMvB8htsJ
TjdOZB5ZfQX8rk0ft1rFrOvjpZxOVqYKDcymRxZAMT20m63lP2XjSU026sBaUK2s
ffskMuIC4BzphhBNt2uNkNtKZT+T0goidhpi6Ky7+OhcPAhEJEC7exq/wGxYcVLE
PMIYzcnz6oje49Oit6sJHA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:42 2026 by rpki-client