Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/JOgR1RK2IN3fafWx3GkQTreZz7A.roa
File:                     JOgR1RK2IN3fafWx3GkQTreZz7A.roa (raw, json)
Hash identifier:          +BDGfaajsPVm5NX1nPbQpXVf0I+Z1HeubqQXZHUq2xQ=
Subject key identifier:   24:E8:11:D5:12:B6:20:DD:DF:69:F5:B1:DC:69:10:4E:B7:99:CF:B0
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       016B
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/JOgR1RK2IN3fafWx3GkQTreZz7A.roa
Signing time:             Tue 31 Mar 2026 07:53:23 +0000
ROA not before:           Tue 31 Mar 2026 07:53:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        203.183.160.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=24E811D512B620DDDF69F5B1DC69104EB799CFB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f5:69:63:70:be:2c:ef:1f:1f:88:eb:e7:dc:
                    ca:b1:ed:0a:eb:80:8c:e1:1c:a6:87:5e:b1:6e:69:
                    b4:dd:73:6c:8e:d8:5b:ca:9d:05:1c:e9:12:0c:64:
                    10:c9:fe:99:50:3b:67:5a:fa:d4:e6:e6:98:1e:59:
                    5b:c1:24:da:2f:94:fa:56:05:da:e4:4e:a5:68:60:
                    99:d1:ec:49:08:61:c1:63:fb:f7:bf:b7:af:ae:d5:
                    fe:5f:ab:42:6a:73:b7:24:79:21:dc:ce:62:34:60:
                    12:ba:b4:39:45:14:28:32:4a:f2:e6:19:c1:21:92:
                    b2:b9:13:5f:fb:60:e3:e3:8b:c3:c4:a7:7b:f2:3f:
                    c2:cd:4e:3b:ce:28:ad:df:e2:1f:25:e7:f4:8b:5e:
                    e3:fd:10:36:88:b5:40:ed:fd:0e:0d:d1:81:19:c1:
                    3f:d4:4b:be:9e:70:8b:d0:b8:bf:1d:29:66:e4:1c:
                    3d:70:6c:d8:5d:b8:d9:c9:de:93:6b:69:e0:1e:60:
                    3a:d8:7a:cf:c8:bb:41:88:53:4b:b7:a8:dd:01:ee:
                    9e:4b:8d:01:0c:ce:fa:64:d1:13:2d:fa:cd:e2:91:
                    d2:86:70:f1:2c:83:f6:b9:92:90:9d:12:09:62:0d:
                    1f:0b:31:8a:2a:46:47:e7:6b:21:44:40:38:11:39:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E8:11:D5:12:B6:20:DD:DF:69:F5:B1:DC:69:10:4E:B7:99:CF:B0
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/JOgR1RK2IN3fafWx3GkQTreZz7A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.183.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b8:c0:d7:72:4c:fc:d3:8b:c7:d8:15:d4:0f:7d:3d:84:fc:89:
         99:b9:7e:8c:09:8d:e8:29:a7:0a:0b:b5:6e:93:e4:fd:3a:64:
         e6:50:ef:bc:20:55:b2:53:75:6f:e2:13:89:79:82:63:0f:5f:
         31:85:1f:4b:19:2c:a7:58:d8:23:db:a0:c7:67:65:96:d4:64:
         a6:fe:77:ba:2e:30:4a:28:33:9a:be:18:27:fc:36:84:45:67:
         4f:25:bc:28:67:1e:db:37:73:d3:a9:cb:5d:f4:f5:e3:8c:14:
         58:7b:b2:75:96:5a:ee:84:e8:f4:01:28:3d:c8:69:36:6e:9f:
         c9:b0:4c:e3:b3:a2:1e:56:ca:bd:d7:ce:56:1d:32:a5:02:a2:
         56:cf:ab:bf:a8:08:75:86:d6:34:3a:64:bb:71:16:83:16:dc:
         ea:66:d1:a1:5e:00:a9:3f:58:2c:e1:bd:08:4e:5f:fd:16:60:
         af:f3:bf:6a:28:89:7a:2a:9a:c0:de:a1:26:02:fa:87:04:7d:
         ad:b5:9f:71:eb:cd:05:1e:cd:0a:b5:04:ef:2e:98:65:09:14:
         c6:fd:1a:bc:cc:03:e4:62:36:48:51:df:5e:97:06:64:a9:f8:
         69:05:20:2e:20:ca:29:cb:d4:50:f4:fc:7c:e0:9e:03:4b:89:
         5f:6c:fd:01
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAWswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzMjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI0RTgxMUQ1MTJCNjIw
RERERjY5RjVCMURDNjkxMDRFQjc5OUNGQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDn9WljcL4s7x8fiOvn3Mqx7QrrgIzhHKaHXrFuabTdc2yO2FvK
nQUc6RIMZBDJ/plQO2da+tTm5pgeWVvBJNovlPpWBdrkTqVoYJnR7EkIYcFj+/e/
t6+u1f5fq0Jqc7ckeSHczmI0YBK6tDlFFCgySvLmGcEhkrK5E1/7YOPji8PEp3vy
P8LNTjvOKK3f4h8l5/SLXuP9EDaItUDt/Q4N0YEZwT/US76ecIvQuL8dKWbkHD1w
bNhduNnJ3pNraeAeYDrYes/Iu0GIU0u3qN0B7p5LjQEMzvpk0RMt+s3ikdKGcPEs
g/a5kpCdEgliDR8LMYoqRkfnayFEQDgROaz3AgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUJOgR1RK2IN3fafWx3GkQTreZz7AwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9KT2dSMVJLMklOM2ZhZld4M0drUVRyZVp6N0Eucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFy7egMA0GCSqGSIb3DQEBCwUA
A4IBAQC4wNdyTPzTi8fYFdQPfT2E/ImZuX6MCY3oKacKC7Vuk+T9OmTmUO+8IFWy
U3Vv4hOJeYJjD18xhR9LGSynWNgj26DHZ2WW1GSm/ne6LjBKKDOavhgn/DaERWdP
JbwoZx7bN3PTqctd9PXjjBRYe7J1llruhOj0ASg9yGk2bp/JsEzjs6IeVsq9185W
HTKlAqJWz6u/qAh1htY0OmS7cRaDFtzqZtGhXgCpP1gs4b0ITl/9FmCv879qKIl6
KprA3qEmAvqHBH2ttZ9x680FHs0KtQTvLphlCRTG/Rq8zAPkYjZIUd9elwZkqfhp
BSAuIMopy9RQ9Px84J4DS4lfbP0B
-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:34 2026 by rpki-client