Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/f5xm0qaoQjeN_nYqQIzr2B4qI7o.roa
File:                     f5xm0qaoQjeN_nYqQIzr2B4qI7o.roa (raw, json)
Hash identifier:          oI/mQNsRt223ec+tkYfj5Dxmu0pTCTuqPE844lTsJEs=
Subject key identifier:   7F:9C:66:D2:A6:A8:42:37:8D:FE:76:2A:40:8C:EB:D8:1E:2A:23:BA
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0170
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/f5xm0qaoQjeN_nYqQIzr2B4qI7o.roa
Signing time:             Tue 31 Mar 2026 07:53:25 +0000
ROA not before:           Tue 31 Mar 2026 07:53:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.129.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7F9C66D2A6A842378DFE762A408CEBD81E2A23BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:b6:ec:16:eb:11:2c:57:8d:ca:41:18:1c:
                    c8:a4:6c:a7:e3:4f:12:42:c6:55:3c:05:31:83:c2:
                    12:d4:3e:ab:fc:a6:13:9d:62:1f:32:81:9b:53:e4:
                    09:6e:73:68:7e:f4:13:16:3d:d2:ec:45:a0:6c:4b:
                    a8:2a:f1:ce:7a:45:a4:05:1f:99:79:07:4a:5e:8a:
                    40:88:9e:9b:f0:cd:77:99:7c:e4:8a:a8:f0:4c:eb:
                    f1:86:f5:a7:57:99:3c:be:68:e1:cc:ce:91:eb:7b:
                    6f:a1:76:8a:18:17:3a:e7:de:26:a6:0f:f9:6d:7a:
                    21:bf:cb:5a:d6:d8:b3:62:fe:4e:8b:33:9f:02:40:
                    99:49:fe:06:c7:c6:5a:cf:01:a8:72:5b:dc:3d:36:
                    2d:92:da:a7:f5:c6:cc:66:c2:c2:1c:ab:fb:1c:0d:
                    e6:59:2e:e8:83:20:02:2d:7a:4d:65:bb:2d:14:fd:
                    5d:53:40:a5:20:ce:db:24:6a:9d:a4:45:cb:d4:a6:
                    c7:eb:e6:85:08:29:4a:f2:7a:99:bb:4b:9e:49:43:
                    7f:62:48:44:a4:d2:76:a2:19:97:ca:fd:7b:2e:83:
                    2a:02:1b:49:4e:68:83:b8:4e:44:e3:97:38:fa:90:
                    e5:76:64:bb:6c:97:3c:80:f6:5e:16:a7:a2:ea:4e:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9C:66:D2:A6:A8:42:37:8D:FE:76:2A:40:8C:EB:D8:1E:2A:23:BA
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/f5xm0qaoQjeN_nYqQIzr2B4qI7o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:45:d5:1c:77:95:59:23:0d:2b:7b:69:b6:f9:10:87:23:1a:
         5b:25:9e:18:cc:3d:a2:c8:ce:1c:55:6c:52:b9:c2:c1:07:06:
         74:53:2d:84:87:1c:59:83:b1:6c:81:58:47:7e:57:e7:a4:33:
         db:06:e2:ad:ab:d8:54:98:ce:ef:1c:45:32:bb:e2:a1:6d:39:
         01:3a:30:4b:a4:cd:97:87:9d:eb:71:87:ff:0e:16:a5:1f:4b:
         b3:a1:7f:b5:e6:6f:fc:bb:d5:e4:8c:df:17:5c:30:7f:95:0b:
         f8:49:c0:93:63:d2:92:54:26:22:fb:1a:ee:32:9f:7b:33:86:
         b4:16:4b:1c:72:00:1d:be:cf:a8:67:a8:7f:be:05:a7:b9:82:
         ac:21:c1:bf:d9:70:01:8d:ff:80:84:66:a2:a7:6e:07:d3:a1:
         33:5f:98:e2:1c:ea:b6:35:d2:8f:b4:63:ca:81:85:9e:73:07:
         ac:c2:15:ab:de:8c:27:cb:44:32:4f:0d:73:f7:05:6e:95:76:
         a1:7b:63:89:20:45:67:ea:01:65:b1:7e:fb:cb:c6:e7:77:3a:
         44:fc:ef:57:f3:a7:72:aa:7e:49:1c:6c:d3:75:6c:8f:31:37:
         df:c3:ed:fd:66:06:67:3f:05:47:2e:8e:31:dc:60:b4:4a:41:
         dd:7b:93:89
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzMjVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdGOUM2NkQyQTZBODQy
Mzc4REZFNzYyQTQwOENFQkQ4MUUyQTIzQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3X7bsFusRLFeNykEYHMikbKfjTxJCxlU8BTGDwhLUPqv8phOd
Yh8ygZtT5Aluc2h+9BMWPdLsRaBsS6gq8c56RaQFH5l5B0peikCInpvwzXeZfOSK
qPBM6/GG9adXmTy+aOHMzpHre2+hdooYFzrn3iamD/lteiG/y1rW2LNi/k6LM58C
QJlJ/gbHxlrPAahyW9w9Ni2S2qf1xsxmwsIcq/scDeZZLuiDIAItek1luy0U/V1T
QKUgztskap2kRcvUpsfr5oUIKUryepm7S55JQ39iSESk0naiGZfK/XsugyoCG0lO
aIO4TkTjlzj6kOV2ZLtslzyA9l4Wp6LqTsETAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUf5xm0qaoQjeN/nYqQIzr2B4qI7owHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9mNXhtMHFhb1FqZU5fbllxUUl6cjJCNHFJN28ucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0oGwMA0GCSqGSIb3DQEBCwUA
A4IBAQBYRdUcd5VZIw0re2m2+RCHIxpbJZ4YzD2iyM4cVWxSucLBBwZ0Uy2EhxxZ
g7FsgVhHflfnpDPbBuKtq9hUmM7vHEUyu+KhbTkBOjBLpM2Xh53rcYf/DhalH0uz
oX+15m/8u9XkjN8XXDB/lQv4ScCTY9KSVCYi+xruMp97M4a0FksccgAdvs+oZ6h/
vgWnuYKsIcG/2XABjf+AhGaip24H06EzX5jiHOq2NdKPtGPKgYWecweswhWr3own
y0QyTw1z9wVulXahe2OJIEVn6gFlsX77y8bndzpE/O9X86dyqn5JHGzTdWyPMTff
w+39ZgZnPwVHLo4x3GC0SkHde5OJ
-----END CERTIFICATE-----
Generated at Wed Apr 1 16:00:42 2026 by rpki-client