Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20058/iE96uT145MDlGojWsrHDDvPnwpk.roa
File:                     iE96uT145MDlGojWsrHDDvPnwpk.roa (raw, json)
Hash identifier:          U7+tVKRbsHBVg9PL5ir31EM2jZh+j+k14PESFi5m9og=
Subject key identifier:   88:4F:7A:B9:3D:78:E4:C0:E5:1A:88:D6:B2:B1:C3:0E:F3:E7:C2:99
Certificate issuer:       /CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
Certificate serial:       34
Authority key identifier: E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/iE96uT145MDlGojWsrHDDvPnwpk.roa
Signing time:             Tue 31 Mar 2026 08:36:30 +0000
ROA not before:           Tue 31 Mar 2026 08:36:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     151374
IP address blocks:        202.126.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
        Validity
            Not Before: Mar 31 08:36:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=884F7AB93D78E4C0E51A88D6B2B1C30EF3E7C299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2a:80:79:2b:eb:6f:01:8a:0c:71:31:b3:61:
                    bd:5f:e0:07:bc:dd:79:41:f0:d9:82:a0:47:e7:7a:
                    50:5c:8e:0b:a9:72:91:83:26:29:da:b7:ce:11:6d:
                    d2:ae:e9:be:83:43:27:80:d2:66:69:bb:51:d8:69:
                    94:c6:59:df:c9:fb:10:78:27:02:2c:4b:3d:22:6e:
                    44:5b:f3:60:a3:c6:87:63:61:91:38:f0:93:23:52:
                    b3:0e:06:68:5a:80:a8:b0:ab:40:c1:ef:d8:4d:38:
                    07:74:2e:1d:b1:98:fb:1b:c0:fa:46:2e:1f:ab:29:
                    32:d0:ea:88:ed:2f:11:87:c4:c0:8d:ad:7d:54:95:
                    dd:fe:f6:5b:2d:87:6c:b6:36:52:83:c0:f2:ce:84:
                    3a:51:f6:d1:5b:72:c9:74:5c:24:fb:eb:27:08:25:
                    e1:96:4e:0b:69:30:1f:f3:fa:3a:ba:31:95:49:fb:
                    a0:f0:a6:08:dd:39:55:16:09:a8:22:50:88:b0:3d:
                    db:ca:bc:73:77:f7:c7:d7:27:6b:7d:e8:1b:3c:17:
                    0c:94:44:39:2c:ce:5a:6b:fa:bd:8d:72:34:3f:f4:
                    f6:40:4d:cf:29:39:9c:c7:db:15:25:ea:ec:c5:16:
                    b4:4c:1b:62:7f:46:5a:13:dd:5b:69:66:45:1c:e6:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4F:7A:B9:3D:78:E4:C0:E5:1A:88:D6:B2:B1:C3:0E:F3:E7:C2:99
            X509v3 Authority Key Identifier:
                keyid:E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/iE96uT145MDlGojWsrHDDvPnwpk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:d0:2a:c3:8e:c1:ff:6e:78:9d:be:df:71:21:5b:21:25:04:
         79:e5:d9:ca:b8:40:c4:07:fb:63:9f:0a:b9:53:72:b4:5d:63:
         ab:e5:4d:e8:e4:cc:b4:25:77:c2:82:91:ee:bf:9c:7e:12:4a:
         62:1f:e9:6b:02:70:52:76:5e:78:d1:a8:e0:29:89:6f:2f:31:
         d7:c8:de:d5:6b:5a:fe:4b:04:03:53:3d:c1:c0:8f:cf:80:19:
         14:49:23:b4:83:e8:94:39:7c:ea:7b:9e:fc:fc:41:ec:cf:25:
         2e:c6:f7:d0:e1:66:41:97:c0:41:ef:e4:90:c0:90:c8:80:1d:
         0f:95:1b:7f:8b:67:26:41:98:75:1d:db:f5:b3:86:6c:a3:24:
         fc:61:fa:dd:15:97:6d:c4:76:c3:24:17:e3:c6:1a:7c:5b:67:
         b0:fa:21:79:0b:42:04:ad:d0:c2:81:9d:17:2b:e7:b0:27:23:
         fb:38:3b:19:e0:f9:65:12:f3:14:f0:59:81:48:6a:34:11:58:
         41:81:3a:1c:b4:1c:76:7f:41:c5:c0:37:71:ea:9e:29:2c:22:
         a7:ee:f9:28:3b:31:a4:d8:68:4b:69:3a:ff:c0:c0:a4:26:88:
         89:82:3c:29:2d:78:84:78:1f:77:50:e8:93:10:23:ee:a5:7e:
         80:18:f4:79
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNzU2
RDlBNUNFOUFDQUM5NzgzNjAwMTFGN0E3Q0ZDNDMwMTgxRDUzMB4XDTI2MDMzMTA4
MzYzMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODg0RjdBQjkzRDc4RTRD
MEU1MUE4OEQ2QjJCMUMzMEVGM0U3QzI5OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOsqgHkr628BigxxMbNhvV/gB7zdeUHw2YKgR+d6UFyOC6lykYMm
Kdq3zhFt0q7pvoNDJ4DSZmm7UdhplMZZ38n7EHgnAixLPSJuRFvzYKPGh2NhkTjw
kyNSsw4GaFqAqLCrQMHv2E04B3QuHbGY+xvA+kYuH6spMtDqiO0vEYfEwI2tfVSV
3f72Wy2HbLY2UoPA8s6EOlH20VtyyXRcJPvrJwgl4ZZOC2kwH/P6OroxlUn7oPCm
CN05VRYJqCJQiLA928q8c3f3x9cna33oGzwXDJREOSzOWmv6vY1yND/09kBNzyk5
nMfbFSXq7MUWtEwbYn9GWhPdW2lmRRzm5akCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBSIT3q5PXjkwOUaiNayscMO8+fCmTAfBgNVHSMEGDAWgBTnVtmlzprKyXg2ABH3
p8/EMBgdUzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNTgvNTFiWnBjNmF5c2w0TmdBUjk2ZlB4REFZSFZNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTFiWnBjNmF5c2w0TmdBUjk2ZlB4
REFZSFZNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDU4L2lFOTZ1VDE0NU1EbEdvaldzckhERHZQbndway5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKfhQwDQYJKoZIhvcNAQELBQAD
ggEBAIvQKsOOwf9ueJ2+33EhWyElBHnl2cq4QMQH+2OfCrlTcrRdY6vlTejkzLQl
d8KCke6/nH4SSmIf6WsCcFJ2XnjRqOApiW8vMdfI3tVrWv5LBANTPcHAj8+AGRRJ
I7SD6JQ5fOp7nvz8QezPJS7G99DhZkGXwEHv5JDAkMiAHQ+VG3+LZyZBmHUd2/Wz
hmyjJPxh+t0Vl23EdsMkF+PGGnxbZ7D6IXkLQgSt0MKBnRcr57AnI/s4Oxng+WUS
8xTwWYFIajQRWEGBOhy0HHZ/QcXAN3HqniksIqfu+Sg7MaTYaEtpOv/AwKQmiImC
PCkteIR4H3dQ6JMQI+6lfoAY9Hk=
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:28:11 2026 by rpki-client