Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/1888/8jQtKPESypEjUPaWcLnJ3J4MENQ.roa
File:                     8jQtKPESypEjUPaWcLnJ3J4MENQ.roa (raw, json)
Hash identifier:          jlrDUnFAWXvY+QBMiAghSTyGgY1gT/Zfc38f54VcDpQ=
Subject key identifier:   F2:34:2D:28:F1:12:CA:91:23:50:F6:96:70:B9:C9:DC:9E:0C:10:D4
Certificate issuer:       /CN=A5E5BFE82DFA5D90E01422FC6D873697E2A0693D
Certificate serial:       04
Authority key identifier: A5:E5:BF:E8:2D:FA:5D:90:E0:14:22:FC:6D:87:36:97:E2:A0:69:3D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/peW_6C36XZDgFCL8bYc2l-KgaT0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/8jQtKPESypEjUPaWcLnJ3J4MENQ.roa
Signing time:             Tue 01 Sep 2026 03:11:29 +0000
ROA not before:           Tue 01 Sep 2026 03:11:29 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     131158
IP address blocks:        163.221.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/peW_6C36XZDgFCL8bYc2l-KgaT0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/peW_6C36XZDgFCL8bYc2l-KgaT0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/peW_6C36XZDgFCL8bYc2l-KgaT0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5E5BFE82DFA5D90E01422FC6D873697E2A0693D
        Validity
            Not Before: Sep  1 03:11:29 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=F2342D28F112CA912350F69670B9C9DC9E0C10D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:23:1b:81:94:3b:24:b6:14:75:03:96:75:
                    24:b5:64:7b:9f:35:c8:ed:8d:b9:7c:d4:81:cd:41:
                    06:33:58:72:d6:9b:5b:0e:c8:9a:b2:dc:79:86:ed:
                    c8:69:45:7c:c7:d8:85:7c:71:33:41:44:92:9d:7a:
                    c8:79:e4:ff:f3:31:62:16:27:be:d8:8d:96:de:bd:
                    da:5e:c3:12:8d:af:05:a2:ee:b2:49:01:21:1c:18:
                    0a:2a:47:23:16:0b:1d:2d:25:f2:94:2e:bd:76:1e:
                    ff:a3:43:72:d6:c9:8b:45:4d:f2:78:3f:7c:e1:61:
                    09:ea:2c:3b:c0:bd:dd:b3:4a:68:84:31:90:b5:8e:
                    dd:fa:f6:5b:e3:2f:d7:f7:d9:ac:cc:0f:6b:00:d8:
                    53:cf:ae:94:7b:11:01:f3:d4:98:9c:f1:58:ea:78:
                    f8:21:28:e3:2a:b8:2b:f7:aa:b1:ef:77:94:e5:8f:
                    c9:9b:1e:83:0b:fc:91:64:34:c1:97:81:69:d6:65:
                    92:d4:11:af:97:13:4e:73:f9:d0:ec:bc:57:bd:ed:
                    01:68:8a:d1:e6:4c:5a:44:a5:8f:15:c9:b0:f8:61:
                    8e:9f:89:e7:aa:23:34:1f:94:50:65:f6:b4:0b:69:
                    95:b7:e0:a9:08:b8:40:d8:f3:7a:8d:cb:e1:64:41:
                    11:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:34:2D:28:F1:12:CA:91:23:50:F6:96:70:B9:C9:DC:9E:0C:10:D4
            X509v3 Authority Key Identifier:
                keyid:A5:E5:BF:E8:2D:FA:5D:90:E0:14:22:FC:6D:87:36:97:E2:A0:69:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/peW_6C36XZDgFCL8bYc2l-KgaT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/peW_6C36XZDgFCL8bYc2l-KgaT0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/8jQtKPESypEjUPaWcLnJ3J4MENQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         16:de:a1:a7:9a:48:4c:4a:e9:d6:05:5f:11:b0:06:1f:68:b1:
         db:ff:6c:cd:6b:3e:ba:1c:37:88:4b:99:db:4d:4e:1d:07:84:
         68:c5:38:80:ee:7e:f6:f2:75:ab:e8:9d:87:83:d2:15:d8:9d:
         c4:54:c1:be:7b:5e:99:57:34:94:94:53:9a:38:88:39:6a:a0:
         dc:ef:db:15:33:b5:ba:29:e3:8e:cf:fe:a0:b3:f1:3b:0a:f5:
         34:2c:e4:37:a5:0d:b5:f9:26:95:6d:47:75:03:6e:55:a4:88:
         34:53:0b:63:98:8d:49:b7:88:32:c1:48:e3:62:39:95:62:54:
         c4:e7:51:fd:99:2a:c7:95:00:b8:e0:ea:82:a4:d0:56:b2:73:
         4a:0e:3c:5f:cc:22:d3:0a:47:dc:d0:08:5d:7e:6c:4c:03:e5:
         4e:fd:50:2b:39:95:ab:fc:46:ea:49:95:d2:d0:4e:a4:d9:65:
         4e:53:f5:a8:24:f4:21:fa:6e:4d:e6:2f:a4:1e:a0:66:16:0f:
         dd:2a:92:50:40:cb:8d:ba:80:f9:54:b9:8f:bb:26:0b:f1:bf:
         83:5d:d7:c2:78:b0:4c:1e:08:2a:46:a2:65:22:e1:cc:3f:3d:
         07:bb:bd:8a:5d:f4:a3:e5:92:75:90:d9:a0:fa:3e:56:68:4b:
         d0:02:9a:76
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNUU1
QkZFODJERkE1RDkwRTAxNDIyRkM2RDg3MzY5N0UyQTA2OTNEMB4XDTI2MDkwMTAz
MTEyOVoXDTI3MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRjIzNDJEMjhGMTEyQ0E5
MTIzNTBGNjk2NzBCOUM5REM5RTBDMTBENDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMfcIxuBlDskthR1A5Z1JLVke581yO2NuXzUgc1BBjNYctabWw7I
mrLceYbtyGlFfMfYhXxxM0FEkp16yHnk//MxYhYnvtiNlt692l7DEo2vBaLuskkB
IRwYCipHIxYLHS0l8pQuvXYe/6NDctbJi0VN8ng/fOFhCeosO8C93bNKaIQxkLWO
3fr2W+Mv1/fZrMwPawDYU8+ulHsRAfPUmJzxWOp4+CEo4yq4K/eqse93lOWPyZse
gwv8kWQ0wZeBadZlktQRr5cTTnP50Oy8V73tAWiK0eZMWkSljxXJsPhhjp+J56oj
NB+UUGX2tAtplbfgqQi4QNjzeo3L4WRBEaECAwEAAaOCAdowggHWMB0GA1UdDgQW
BBTyNC0o8RLKkSNQ9pZwucncngwQ1DAfBgNVHSMEGDAWgBSl5b/oLfpdkOAUIvxt
hzaX4qBpPTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTg4OC9wZVdfNkMzNlhaRGdGQ0w4YlljMmwtS2dhVDAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9wZVdfNkMzNlhaRGdGQ0w4YlljMmwt
S2dhVDAuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTg4OC84alF0S1BFU3lwRWpVUGFXY0xuSjNKNE1FTlEucm9hMB4G
CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAo90wDQYJKoZIhvcNAQELBQADggEB
ABbeoaeaSExK6dYFXxGwBh9osdv/bM1rProcN4hLmdtNTh0HhGjFOIDufvbydavo
nYeD0hXYncRUwb57XplXNJSUU5o4iDlqoNzv2xUztbop447P/qCz8TsK9TQs5Del
DbX5JpVtR3UDblWkiDRTC2OYjUm3iDLBSONiOZViVMTnUf2ZKseVALjg6oKk0Fay
c0oOPF/MItMKR9zQCF1+bEwD5U79UCs5lav8RupJldLQTqTZZU5T9agk9CH6bk3m
L6QeoGYWD90qklBAy426gPlUuY+7Jgvxv4Nd18J4sEweCCpGomUi4cw/PQe7vYpd
9KPlknWQ2aD6PlZoS9ACmnY=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:39:17 2026 by rpki-client