Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/K3noVChpb9INhEfp5PUKq49Ne28.roa
File:                     K3noVChpb9INhEfp5PUKq49Ne28.roa (raw, json)
Hash identifier:          dvdjUunF8XG4vJgMRUDYnyYF5R5cAhT3gxZEKv3cSsM=
Subject key identifier:   2B:79:E8:54:28:69:6F:D2:0D:84:47:E9:E4:F5:0A:AB:8F:4D:7B:6F
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01E6
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/K3noVChpb9INhEfp5PUKq49Ne28.roa
Signing time:             Tue 31 Mar 2026 07:54:21 +0000
ROA not before:           Tue 31 Mar 2026 07:54:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        202.33.216.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:54:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2B79E85428696FD20D8447E9E4F50AAB8F4D7B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:9c:be:81:97:ce:f9:16:26:86:b8:0b:13:
                    7d:b0:a0:7f:e1:46:55:1f:41:07:2e:f0:bf:40:9f:
                    75:f6:22:23:13:7a:6f:70:b9:d6:69:d2:9c:47:e3:
                    54:97:78:e8:af:91:6b:fa:98:79:85:99:be:af:a2:
                    3b:84:89:84:bf:ad:68:ad:e1:e8:0a:79:63:1d:d8:
                    77:09:97:1f:9f:7e:08:7a:f4:ec:d0:8e:23:af:18:
                    94:ec:57:32:d7:49:73:27:a5:73:92:bc:ef:66:04:
                    00:a7:60:d7:31:be:79:89:eb:7a:bd:38:7a:5f:f4:
                    f1:0b:cc:6a:f7:25:7d:fd:bb:1e:16:1b:e3:8b:d2:
                    b0:39:7e:39:36:65:73:2e:7b:f7:99:93:0f:16:7e:
                    48:ae:8d:e3:42:cb:78:b1:95:39:eb:5e:81:2d:0c:
                    2e:62:97:1d:43:5e:95:1a:91:f8:6b:e0:9e:a8:9c:
                    c6:ac:cb:d1:f6:d0:bf:ac:5f:47:51:6b:0f:8f:82:
                    4d:d8:67:8e:24:e0:58:e8:49:d1:f8:dc:bd:1c:37:
                    46:3c:1e:d2:24:4c:f9:7d:ae:33:62:4b:5a:01:4e:
                    91:d0:05:13:63:5b:40:67:66:01:0b:00:d7:9f:65:
                    7e:2c:25:8a:8b:f4:f8:53:e6:a0:d3:6b:a4:09:cf:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:79:E8:54:28:69:6F:D2:0D:84:47:E9:E4:F5:0A:AB:8F:4D:7B:6F
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/K3noVChpb9INhEfp5PUKq49Ne28.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.33.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:c8:d5:01:ed:c2:7a:29:d7:82:32:f5:80:e8:65:98:43:9b:
         03:27:c6:ea:08:22:c1:f8:da:8a:63:c3:18:87:43:87:5b:ef:
         8f:23:5e:1c:fa:6a:f5:7e:a7:1a:3b:16:8a:58:64:c1:7c:9c:
         02:43:e1:2e:d5:6e:d6:0a:d3:dd:38:ec:51:47:ab:02:81:4d:
         85:2c:f3:81:8a:c6:ec:6b:9c:55:5a:7c:b6:80:56:4a:83:25:
         93:46:5b:bf:d8:ac:e6:65:0b:4a:97:0e:5d:35:d6:88:e5:3e:
         26:a4:70:df:85:1c:34:81:9a:1e:ac:87:05:d6:ca:48:2a:8c:
         41:11:5b:51:d0:2b:c1:06:2d:4c:02:e4:68:44:53:f9:fa:8f:
         b5:08:b8:27:75:e7:a6:0c:35:b9:61:62:8e:49:d8:d7:f2:2c:
         d9:11:56:dc:b1:d1:f1:53:94:bb:30:12:ac:96:ec:e4:46:b8:
         7c:f5:ae:3a:6b:04:1e:05:4f:ae:4f:62:82:07:ec:99:53:43:
         dc:45:e4:72:d0:bd:7f:e7:cc:93:98:ca:ea:ca:25:09:a1:b7:
         15:0e:fe:a0:8f:92:66:eb:46:64:7b:49:bd:e8:fa:60:5f:69:
         94:ab:cd:57:3c:be:88:23:f3:a6:c7:e7:fd:a5:6b:dd:b8:c8:
         ec:82:91:e6
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzU0MjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJCNzlFODU0Mjg2OTZG
RDIwRDg0NDdFOUU0RjUwQUFCOEY0RDdCNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDN5y+gZfO+RYmhrgLE32woH/hRlUfQQcu8L9An3X2IiMTem9w
udZp0pxH41SXeOivkWv6mHmFmb6vojuEiYS/rWit4egKeWMd2HcJlx+ffgh69OzQ
jiOvGJTsVzLXSXMnpXOSvO9mBACnYNcxvnmJ63q9OHpf9PELzGr3JX39ux4WG+OL
0rA5fjk2ZXMue/eZkw8WfkiujeNCy3ixlTnrXoEtDC5ilx1DXpUakfhr4J6onMas
y9H20L+sX0dRaw+Pgk3YZ44k4FjoSdH43L0cN0Y8HtIkTPl9rjNiS1oBTpHQBRNj
W0BnZgELANefZX4sJYqL9PhT5qDTa6QJz1MNAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUK3noVChpb9INhEfp5PUKq49Ne28wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9LM25vVkNocGI5SU5oRWZwNVBVS3E0OU5lMjgucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyiHYMA0GCSqGSIb3DQEBCwUA
A4IBAQBwyNUB7cJ6KdeCMvWA6GWYQ5sDJ8bqCCLB+NqKY8MYh0OHW++PI14c+mr1
fqcaOxaKWGTBfJwCQ+Eu1W7WCtPdOOxRR6sCgU2FLPOBisbsa5xVWny2gFZKgyWT
Rlu/2KzmZQtKlw5dNdaI5T4mpHDfhRw0gZoerIcF1spIKoxBEVtR0CvBBi1MAuRo
RFP5+o+1CLgndeemDDW5YWKOSdjX8izZEVbcsdHxU5S7MBKsluzkRrh89a46awQe
BU+uT2KCB+yZU0PcReRy0L1/58yTmMrqyiUJobcVDv6gj5Jm60Zke0m96PpgX2mU
q81XPL6II/Omx+f9pWvduMjsgpHm
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:40 2026 by rpki-client