Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YNetVOWwVtpAviVrXjvwk5vlHok.roa
File:                     YNetVOWwVtpAviVrXjvwk5vlHok.roa (raw, json)
Hash identifier:          gO6if8rGWZteX4QkhKORpybu61YksZRQzo/HjDtsTXo=
Subject key identifier:   60:D7:AD:54:E5:B0:56:DA:40:BE:25:6B:5E:3B:F0:93:9B:E5:1E:89
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0181
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YNetVOWwVtpAviVrXjvwk5vlHok.roa
Signing time:             Tue 31 Mar 2026 07:53:35 +0000
ROA not before:           Tue 31 Mar 2026 07:53:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.152.29.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=60D7AD54E5B056DA40BE256B5E3BF0939BE51E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:9f:1b:b9:81:b3:78:09:03:07:72:15:b2:
                    e2:6e:ac:f7:bc:5a:5e:52:ba:72:01:8e:a0:79:de:
                    88:5c:ef:14:78:7c:8d:1f:64:a8:d0:b3:4f:6d:c7:
                    51:57:fe:91:06:50:2e:f9:4c:6b:a0:09:47:d7:aa:
                    8a:d0:dc:c3:3e:95:e5:3c:41:cb:25:59:25:2a:7f:
                    3a:91:85:39:ed:74:b8:32:40:07:0f:91:f5:3a:77:
                    cb:49:1b:d1:9f:f0:6a:a3:33:36:5b:40:36:5f:1f:
                    85:0c:f1:80:a1:cd:44:2a:00:31:2b:8a:87:73:4b:
                    92:14:e2:ea:5f:5a:66:0d:9c:c0:4b:78:73:e9:4c:
                    bc:3d:55:03:9a:70:4d:f6:d4:80:0c:1e:48:ea:26:
                    bb:30:e5:3e:83:58:6c:99:7c:16:b2:ac:aa:5a:4d:
                    5f:0c:01:8a:e9:32:99:c9:70:da:6f:da:04:8a:d6:
                    51:2c:93:7d:9f:1e:a3:ae:08:89:c5:43:b7:b5:52:
                    9c:fd:a2:1b:ab:d1:1e:a5:17:ee:ab:fa:a4:0b:6d:
                    a0:bc:7e:8c:b4:d1:fe:18:0e:aa:50:8c:73:34:31:
                    29:e4:1b:92:86:2d:72:79:cc:b1:a2:de:99:25:9c:
                    0f:84:56:70:b9:dd:7c:bf:d0:a2:0c:c5:90:16:83:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D7:AD:54:E5:B0:56:DA:40:BE:25:6B:5E:3B:F0:93:9B:E5:1E:89
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YNetVOWwVtpAviVrXjvwk5vlHok.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:48:b2:b9:78:17:97:b1:dc:2e:24:80:3b:b7:72:35:27:cc:
         ed:aa:4d:b6:4a:c2:3b:e9:eb:8e:45:aa:0d:4f:bd:c2:7d:19:
         09:22:a0:1e:a7:dd:a2:60:19:3a:56:3c:20:fd:2b:10:7c:ba:
         a3:7d:6e:43:7a:7b:30:41:db:a1:a2:11:6b:90:31:0e:fd:73:
         db:63:d8:0f:cf:6c:82:c7:2a:d7:96:e4:2f:b0:51:ad:15:37:
         2f:a9:5a:33:b8:e3:c1:2a:c2:b7:d4:98:b5:7f:42:e8:a0:0d:
         b7:a9:3a:c2:34:82:bf:6c:9b:2d:19:4d:52:72:05:e1:b4:f4:
         79:0f:a6:af:08:4e:de:f2:97:f9:cc:f6:e8:86:ac:77:c8:2c:
         72:fb:5a:dc:83:1d:4e:d3:8c:72:b9:fd:b9:2c:21:a5:81:aa:
         eb:88:40:8f:5e:d2:16:fb:ce:84:e6:27:31:52:dc:5a:a7:1c:
         24:33:9b:09:90:10:07:d1:82:63:c0:3a:96:0e:87:c6:ad:20:
         e8:3d:0c:3a:a5:63:cb:39:1c:35:1c:db:b2:9d:56:9f:2e:28:
         ff:8a:32:7e:72:68:87:69:73:e7:44:65:72:a7:d0:82:72:0d:
         59:c2:a6:e3:d2:c9:47:fb:13:bb:6c:8c:d6:88:13:cd:2e:d9:
         29:2d:1d:59
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzMzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYwRDdBRDU0RTVCMDU2
REE0MEJFMjU2QjVFM0JGMDkzOUJFNTFFODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3VJ8buYGzeAkDB3IVsuJurPe8Wl5SunIBjqB53ohc7xR4fI0f
ZKjQs09tx1FX/pEGUC75TGugCUfXqorQ3MM+leU8QcslWSUqfzqRhTntdLgyQAcP
kfU6d8tJG9Gf8GqjMzZbQDZfH4UM8YChzUQqADEriodzS5IU4upfWmYNnMBLeHPp
TLw9VQOacE321IAMHkjqJrsw5T6DWGyZfBayrKpaTV8MAYrpMpnJcNpv2gSK1lEs
k32fHqOuCInFQ7e1Upz9ohur0R6lF+6r+qQLbaC8foy00f4YDqpQjHM0MSnkG5KG
LXJ5zLGi3pklnA+EVnC53Xy/0KIMxZAWg1JrAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUYNetVOWwVtpAviVrXjvwk5vlHokwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9ZTmV0Vk9Xd1Z0cEF2aVZyWGp2d2s1dmxIb2sucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0pgdMA0GCSqGSIb3DQEBCwUA
A4IBAQBLSLK5eBeXsdwuJIA7t3I1J8ztqk22SsI76euORaoNT73CfRkJIqAep92i
YBk6Vjwg/SsQfLqjfW5DenswQduhohFrkDEO/XPbY9gPz2yCxyrXluQvsFGtFTcv
qVozuOPBKsK31Ji1f0LooA23qTrCNIK/bJstGU1ScgXhtPR5D6avCE7e8pf5zPbo
hqx3yCxy+1rcgx1O04xyuf25LCGlgarriECPXtIW+86E5icxUtxapxwkM5sJkBAH
0YJjwDqWDofGrSDoPQw6pWPLORw1HNuynVafLij/ijJ+cmiHaXPnRGVyp9CCcg1Z
wqbj0slH+xO7bIzWiBPNLtkpLR1Z
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:44 2026 by rpki-client