Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/ptjjFWCdKZze-vcvw0suK9_Ir9c.roa
File:                     ptjjFWCdKZze-vcvw0suK9_Ir9c.roa (raw, json)
Hash identifier:          3pOm97oDXWno7uYEWdx23mJZ/6vaOQMmRzVO8ra4p48=
Subject key identifier:   A6:D8:E3:15:60:9D:29:9C:DE:FA:F7:2F:C3:4B:2E:2B:DF:C8:AF:D7
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       8D
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/ptjjFWCdKZze-vcvw0suK9_Ir9c.roa
Signing time:             Tue 31 Mar 2026 07:31:48 +0000
ROA not before:           Tue 31 Mar 2026 07:31:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     45680
IP address blocks:        183.81.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Mar 31 07:31:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A6D8E315609D299CDEFAF72FC34B2E2BDFC8AFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:1f:8e:04:7f:ca:7e:4a:fc:5f:ce:d9:ad:
                    a0:58:ce:ac:75:40:ad:5b:27:98:ec:96:29:7a:81:
                    37:7c:6b:8d:62:62:46:d4:3c:9e:f4:6a:d7:4d:a7:
                    45:88:0d:3e:d8:bd:05:8d:86:ef:39:6a:7e:4c:51:
                    98:d7:63:a2:77:05:87:91:74:5d:6f:ac:2a:0c:a4:
                    97:b8:e4:ad:44:7c:6e:8a:4a:9a:45:9e:3d:02:1d:
                    64:8c:90:a9:47:76:6e:5e:1c:fa:70:c8:ab:b0:b1:
                    d3:be:3a:54:dc:57:f4:77:83:24:ca:73:b8:27:c0:
                    b3:ea:50:c5:3f:56:11:8c:40:a2:63:fb:9b:a4:98:
                    99:33:0b:ba:1b:f9:27:3d:e5:0f:3e:3c:02:78:60:
                    9c:ce:6a:af:a9:be:7e:fe:e4:d5:21:b3:7f:30:ba:
                    18:22:8f:97:92:a5:4a:04:16:26:49:23:c0:c9:fb:
                    7d:50:24:dc:67:96:4f:17:d8:ec:0b:af:05:26:27:
                    80:d4:81:9d:ab:d2:ea:5c:40:ec:bd:9b:82:3c:a0:
                    6f:1b:35:39:c4:78:07:f8:f1:04:dd:85:e3:23:18:
                    24:16:97:c0:96:6a:ae:eb:58:ba:25:17:eb:8f:16:
                    f7:55:0e:98:1d:12:f7:ad:78:98:d2:70:cd:ea:be:
                    d6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D8:E3:15:60:9D:29:9C:DE:FA:F7:2F:C3:4B:2E:2B:DF:C8:AF:D7
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/ptjjFWCdKZze-vcvw0suK9_Ir9c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.81.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:05:6e:2a:70:a4:10:d6:d2:4e:c2:e8:36:cd:5f:78:f4:cc:
         16:06:48:f4:16:43:a8:2d:9f:a5:e7:f9:48:b1:7b:55:6e:35:
         8d:ad:e5:64:fc:14:1f:0a:a8:dd:9b:11:7f:70:11:82:d9:60:
         d9:cc:08:42:4b:6f:47:ec:77:39:c9:15:f7:e8:26:99:fb:c0:
         fd:57:9f:9a:50:c4:57:22:cd:61:a0:f3:51:70:05:81:d9:a8:
         9a:a9:82:9a:3f:5a:bd:ca:f8:c8:e2:35:75:45:44:bb:02:41:
         6e:d5:ab:2d:8f:3a:47:cb:d9:22:66:cf:1e:99:3a:4a:94:4d:
         c2:dd:f2:46:d9:37:ec:41:39:0b:24:4b:02:c4:5a:c4:bc:fa:
         e6:dc:9f:5b:69:36:a1:e5:f4:78:20:6f:ed:51:1f:25:5f:d0:
         b3:18:02:75:2c:73:a0:e7:39:7b:84:8a:19:4f:5e:04:b7:cb:
         46:bd:4a:8c:f6:70:2f:84:48:fd:59:85:27:a7:fa:3b:14:c0:
         31:a3:7a:4f:58:42:16:49:bd:ba:d3:a0:f3:46:55:6e:bc:bc:
         23:d9:3a:16:a0:90:57:ac:bf:39:71:2b:5e:fe:74:08:01:a5:
         dd:62:3a:1e:9b:26:eb:10:91:2a:be:21:e2:a9:34:d2:cb:bf:
         9e:82:1d:25
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQy
NkUwRDE3RTMwRDhCRjU3MTRGNEJBOTJFRUVCMEQyMkREREIxRDAeFw0yNjAzMzEw
NzMxNDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE2RDhFMzE1NjA5RDI5
OUNERUZBRjcyRkMzNEIyRTJCREZDOEFGRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLAB+OBH/Kfkr8X87ZraBYzqx1QK1bJ5jslil6gTd8a41iYkbU
PJ70atdNp0WIDT7YvQWNhu85an5MUZjXY6J3BYeRdF1vrCoMpJe45K1EfG6KSppF
nj0CHWSMkKlHdm5eHPpwyKuwsdO+OlTcV/R3gyTKc7gnwLPqUMU/VhGMQKJj+5uk
mJkzC7ob+Sc95Q8+PAJ4YJzOaq+pvn7+5NUhs38wuhgij5eSpUoEFiZJI8DJ+31Q
JNxnlk8X2OwLrwUmJ4DUgZ2r0upcQOy9m4I8oG8bNTnEeAf48QTdheMjGCQWl8CW
aq7rWLolF+uPFvdVDpgdEveteJjScM3qvtYxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUptjjFWCdKZze+vcvw0suK9/Ir9cwHwYDVR0jBBgwFoAUjSbg0X4w2L9XFPS6
ku7rDSLd2x0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzk4OS9qU2JnMFg0dzJMOVhGUFM2a3U3ckRTTGQyeDAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qU2JnMFg0dzJMOVhGUFM2a3U3ckRT
TGQyeDAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvOTg5L3B0ampGV0NkS1p6ZS12Y3Z3MHN1SzlfSXI5Yy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK3UbAwDQYJKoZIhvcNAQELBQADggEB
AJEFbipwpBDW0k7C6DbNX3j0zBYGSPQWQ6gtn6Xn+Uixe1VuNY2t5WT8FB8KqN2b
EX9wEYLZYNnMCEJLb0fsdznJFffoJpn7wP1Xn5pQxFcizWGg81FwBYHZqJqpgpo/
Wr3K+MjiNXVFRLsCQW7Vqy2POkfL2SJmzx6ZOkqUTcLd8kbZN+xBOQskSwLEWsS8
+ubcn1tpNqHl9Hggb+1RHyVf0LMYAnUsc6DnOXuEihlPXgS3y0a9Soz2cC+ESP1Z
hSen+jsUwDGjek9YQhZJvbrToPNGVW68vCPZOhagkFesvzlxK17+dAgBpd1iOh6b
JusQkSq+IeKpNNLLv56CHSU=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:21 2026 by rpki-client