Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/YEbk2X2R05VwB2j2KmD3KYzNbJs.roa
File:                     YEbk2X2R05VwB2j2KmD3KYzNbJs.roa (raw, json)
Hash identifier:          6hOF/1Ss9yffgaUxZ+0+HkNRTCytRcUVXVkGHNKF5yU=
Subject key identifier:   60:46:E4:D9:7D:91:D3:95:70:07:68:F6:2A:60:F7:29:8C:CD:6C:9B
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       74
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/YEbk2X2R05VwB2j2KmD3KYzNbJs.roa
Signing time:             Tue 31 Mar 2026 07:33:19 +0000
ROA not before:           Tue 31 Mar 2026 07:33:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131971
IP address blocks:        202.1.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Mar 31 07:33:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6046E4D97D91D395700768F62A60F7298CCD6C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:48:02:52:1a:8e:df:34:19:04:17:46:27:
                    6b:d4:f6:fb:5b:dc:97:4a:08:dd:50:42:ed:35:7f:
                    c1:c6:89:67:db:a1:ac:66:7f:33:c1:50:93:b8:40:
                    eb:28:51:dd:72:67:0c:41:cf:05:ca:1c:74:69:8f:
                    af:78:12:d8:8b:e4:b8:c0:0b:a5:75:bb:25:3e:ea:
                    86:0a:bc:74:3b:26:7b:d7:99:14:09:cd:13:79:6f:
                    4e:2b:f5:e7:78:53:cb:73:d2:9b:9e:0d:46:3d:57:
                    03:f7:d8:0a:88:f2:9a:b4:51:9c:e1:8c:d1:71:d0:
                    d0:c0:5f:83:75:2d:b6:e0:e4:e0:76:4d:72:d0:80:
                    00:15:eb:7d:73:1d:6f:a7:61:57:c0:6b:4d:85:b1:
                    10:48:7b:e4:9f:69:1c:3c:7f:21:15:bc:21:ed:86:
                    38:7c:74:3d:54:f2:6d:42:c9:9a:c2:60:a8:58:5c:
                    74:49:c9:98:12:f1:0c:8a:b2:ba:de:19:ea:3a:8a:
                    2e:ca:f2:f2:cd:74:64:0b:38:4f:f2:5c:e3:bd:0a:
                    21:a2:8a:77:f9:ba:54:2c:1b:fa:79:dd:8f:e3:a0:
                    c9:03:f5:a8:28:17:59:5b:ec:d7:30:a0:fb:8d:29:
                    d1:ac:5d:02:78:b2:b7:82:7f:73:f5:4c:97:56:e7:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:46:E4:D9:7D:91:D3:95:70:07:68:F6:2A:60:F7:29:8C:CD:6C:9B
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/YEbk2X2R05VwB2j2KmD3KYzNbJs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:f2:ed:be:5b:20:0a:ce:e3:15:82:54:d5:7d:4a:87:a2:4a:
         2e:27:0e:23:94:dc:45:bd:29:55:72:79:10:73:92:4f:61:c1:
         6f:c6:8d:b0:19:d6:d8:a2:a5:d1:49:2d:23:81:09:62:8c:ff:
         bb:d3:fc:f4:3f:65:50:af:b4:da:a2:63:6d:cf:dc:ab:3c:4d:
         95:8f:45:85:32:66:1f:46:84:dd:59:34:08:46:e4:f3:c8:fb:
         47:bd:7a:31:06:1d:9a:c9:64:a5:17:05:4d:69:43:e7:58:ee:
         0d:33:90:7e:44:96:2e:08:aa:df:39:cb:73:40:f8:5e:70:39:
         06:18:f2:64:5f:3e:5e:9b:4e:fa:a7:5d:56:05:3a:8a:40:3c:
         f3:d6:cb:a4:bd:bf:83:ca:16:f1:89:e7:67:d8:be:58:87:a9:
         a0:ec:ac:1c:34:8e:38:f6:40:e2:41:4c:a9:c5:2c:86:aa:4e:
         eb:66:c0:f6:05:7b:29:0b:e0:ac:1b:eb:26:e8:bc:ee:b6:53:
         17:2d:4e:2c:5f:02:00:3d:56:c3:bd:e5:10:fb:35:de:66:e3:
         8a:98:0b:23:75:22:a6:5a:e3:89:73:08:7d:3f:9f:84:fb:a8:
         13:7c:5c:bc:6b:58:b4:76:bc:65:9e:51:c5:d4:08:6e:66:a0:
         de:1a:ca:b6
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTM1
RDVBRDMzREM2MzBDNDYxMTk4NzE0MEY1RTQ2OEI3MDgxRDExMB4XDTI2MDMzMTA3
MzMxOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjA0NkU0RDk3RDkxRDM5
NTcwMDc2OEY2MkE2MEY3Mjk4Q0NENkM5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKrXSAJSGo7fNBkEF0Yna9T2+1vcl0oI3VBC7TV/wcaJZ9uhrGZ/
M8FQk7hA6yhR3XJnDEHPBcocdGmPr3gS2IvkuMALpXW7JT7qhgq8dDsme9eZFAnN
E3lvTiv153hTy3PSm54NRj1XA/fYCojymrRRnOGM0XHQ0MBfg3UttuDk4HZNctCA
ABXrfXMdb6dhV8BrTYWxEEh75J9pHDx/IRW8Ie2GOHx0PVTybULJmsJgqFhcdEnJ
mBLxDIqyut4Z6jqKLsry8s10ZAs4T/Jc470KIaKKd/m6VCwb+nndj+OgyQP1qCgX
WVvs1zCg+40p0axdAniyt4J/c/VMl1bnS7sCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBRgRuTZfZHTlXAHaPYqYPcpjM1smzAfBgNVHSMEGDAWgBSpNdWtM9xjDEYRmHFA
9eRotwgdETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xVFhWclRQY1l3eEdFWmh4UVBYa2FM
Y0lIUkUuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvOTk5Ny9ZRWJrMlgyUjA1VndCMmoyS21EM0tZek5iSnMucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCygHQMA0GCSqGSIb3DQEBCwUAA4IB
AQCp8u2+WyAKzuMVglTVfUqHokouJw4jlNxFvSlVcnkQc5JPYcFvxo2wGdbYoqXR
SS0jgQlijP+70/z0P2VQr7TaomNtz9yrPE2Vj0WFMmYfRoTdWTQIRuTzyPtHvXox
Bh2ayWSlFwVNaUPnWO4NM5B+RJYuCKrfOctzQPhecDkGGPJkXz5em076p11WBTqK
QDzz1sukvb+Dyhbxiedn2L5Yh6mg7KwcNI449kDiQUypxSyGqk7rZsD2BXspC+Cs
G+sm6LzutlMXLU4sXwIAPVbDveUQ+zXeZuOKmAsjdSKmWuOJcwh9P5+E+6gTfFy8
a1i0drxlnlHF1AhuZqDeGsq2
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:47 2026 by rpki-client