Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/UqcFJ4iW9fZklm7RH-NZQ5rIi0E.roa
File:                     UqcFJ4iW9fZklm7RH-NZQ5rIi0E.roa (raw, json)
Hash identifier:          m/K9UDuZdVW9k474RO6vtERfwaKdZZQcjicLfLiOsvo=
Subject key identifier:   52:A7:05:27:88:96:F5:F6:64:96:6E:D1:1F:E3:59:43:9A:C8:8B:41
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0264
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UqcFJ4iW9fZklm7RH-NZQ5rIi0E.roa
Signing time:             Sun 01 Feb 2026 01:31:49 +0000
ROA not before:           Sun 01 Feb 2026 01:31:49 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        123.224.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Feb  1 01:31:49 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=52A705278896F5F664966ED11FE359439AC88B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:90:0c:4f:cc:19:99:93:55:af:06:36:76:e0:
                    30:99:1a:f1:cc:a9:ee:f7:f5:12:cc:37:64:1e:07:
                    60:ba:2d:97:d7:8a:3f:60:8b:f7:e8:54:a0:58:6c:
                    ec:3e:3f:7a:bf:a4:bf:1d:a1:b2:85:1b:c2:9e:87:
                    2e:01:6f:2c:7c:8b:d0:48:72:02:62:66:1d:d2:98:
                    89:ca:de:a7:cf:18:cd:78:b7:9f:52:a9:70:ee:6f:
                    e2:48:f4:e2:c2:75:d8:07:ee:b3:eb:7d:48:af:6d:
                    7b:f6:b9:60:8d:d3:d1:fc:da:34:ec:b3:b4:b4:45:
                    70:8c:f5:6c:74:6b:56:2b:77:0c:48:18:06:8b:e9:
                    e4:8b:e3:4e:db:79:57:9e:ca:39:95:73:71:24:33:
                    09:2c:34:ff:fe:a9:f0:9a:75:7d:34:61:66:84:d5:
                    7a:34:53:73:c4:18:dd:51:e6:4f:6e:b2:3b:2e:50:
                    ef:8d:5a:46:31:e6:c9:2f:d4:f3:72:67:85:dc:43:
                    ad:32:20:3f:41:fc:25:1b:a5:2a:66:ad:ee:f9:3d:
                    c4:4e:39:c0:7c:ba:a5:96:93:21:fb:b5:86:87:38:
                    6b:c2:33:45:a7:7b:a0:61:4e:80:49:e9:d0:ff:48:
                    2d:21:1f:38:b3:c1:bf:97:20:8e:0c:a1:de:b6:88:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A7:05:27:88:96:F5:F6:64:96:6E:D1:1F:E3:59:43:9A:C8:8B:41
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UqcFJ4iW9fZklm7RH-NZQ5rIi0E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.224.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b3:e6:06:aa:2d:1e:23:a0:dd:23:91:f6:69:77:48:3c:82:d7:
         f4:6e:e5:9b:3b:3f:f7:a3:12:92:5b:fe:a7:92:36:e1:a2:70:
         c4:aa:ef:b7:13:87:d5:0b:9a:49:0d:61:44:62:41:54:bb:dc:
         cf:3e:75:9d:eb:d6:a9:ec:76:21:26:b8:50:21:dd:32:52:35:
         5b:a0:82:5e:ce:16:c2:8a:3a:85:d4:11:97:55:a2:1e:3e:87:
         59:e4:32:07:22:8a:9a:92:35:6b:eb:af:a7:b0:18:f5:0b:d4:
         09:51:52:ed:92:a7:e5:6b:77:b7:cd:2a:ec:06:59:25:58:15:
         23:c2:65:17:f8:4a:ae:0b:b5:ba:24:5d:24:df:15:40:8a:a6:
         73:2a:12:66:b6:49:e9:5e:de:11:24:66:7b:54:a3:c8:cb:59:
         79:1b:a3:20:8b:fe:44:a8:f0:36:cf:c1:c0:22:4e:34:f6:47:
         a0:e9:fd:8e:27:26:e1:ff:94:cd:1e:60:e4:4c:7d:48:38:91:
         97:48:3b:25:3c:5c:48:b9:98:19:de:9e:1f:fd:5d:8b:87:10:
         38:3b:a3:95:25:d2:2f:bd:da:77:a7:7e:23:a8:06:5a:04:e7:
         34:e6:25:c3:9f:23:db:34:99:68:f9:16:f3:58:a8:8e:9b:85:
         de:0c:37:d4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAyMDEw
MTMxNDlaFw0yNzAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUyQTcwNTI3ODg5NkY1
RjY2NDk2NkVEMTFGRTM1OTQzOUFDODhCNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDykAxPzBmZk1WvBjZ24DCZGvHMqe739RLMN2QeB2C6LZfXij9g
i/foVKBYbOw+P3q/pL8dobKFG8Kehy4Bbyx8i9BIcgJiZh3SmInK3qfPGM14t59S
qXDub+JI9OLCddgH7rPrfUivbXv2uWCN09H82jTss7S0RXCM9Wx0a1YrdwxIGAaL
6eSL407beVeeyjmVc3EkMwksNP/+qfCadX00YWaE1Xo0U3PEGN1R5k9usjsuUO+N
WkYx5skv1PNyZ4XcQ60yID9B/CUbpSpmre75PcROOcB8uqWWkyH7tYaHOGvCM0Wn
e6BhToBJ6dD/SC0hHzizwb+XII4Mod62iNCfAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUUqcFJ4iW9fZklm7RH+NZQ5rIi0EwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL1VxY0ZKNGlXOWZaa2xtN1JILU5aUTVySWkwRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwJ74DANBgkqhkiG9w0BAQsFAAOCAQEAs+YGqi0eI6DdI5H2aXdIPILX9G7l
mzs/96MSklv+p5I24aJwxKrvtxOH1QuaSQ1hRGJBVLvczz51nevWqex2ISa4UCHd
MlI1W6CCXs4Wwoo6hdQRl1WiHj6HWeQyByKKmpI1a+uvp7AY9QvUCVFS7ZKn5Wt3
t80q7AZZJVgVI8JlF/hKrgu1uiRdJN8VQIqmcyoSZrZJ6V7eESRme1SjyMtZeRuj
IIv+RKjwNs/BwCJONPZHoOn9jicm4f+UzR5g5Ex9SDiRl0g7JTxcSLmYGd6eH/1d
i4cQODujlSXSL73ad6d+I6gGWgTnNOYlw58j2zSZaPkW81iojpuF3gw31A==
-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:11 2026 by rpki-client