Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/RelgVQRXEEC9GBcCjb_8tHXaXss.roa
File:                     RelgVQRXEEC9GBcCjb_8tHXaXss.roa (raw, json)
Hash identifier:          lKY9/WSUzB8M4RaetjVEyVn/IdAjxV2ifNi8kaIqdmo=
Subject key identifier:   45:E9:60:55:04:57:10:40:BD:18:17:02:8D:BF:FC:B4:75:DA:5E:CB
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       B6
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/RelgVQRXEEC9GBcCjb_8tHXaXss.roa
Signing time:             Tue 31 Mar 2026 07:49:00 +0000
ROA not before:           Tue 31 Mar 2026 07:49:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23816
IP address blocks:        202.93.64.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Mar 31 07:49:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=45E9605504571040BD1817028DBFFCB475DA5ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:03:95:c0:89:b8:83:79:cf:0b:62:d0:ab:c5:
                    ae:1d:60:41:4b:3f:1b:48:79:54:98:3b:40:46:0f:
                    8d:f8:f9:a2:fe:df:30:21:7c:e0:b0:44:7e:4b:f4:
                    1e:94:86:fe:be:8c:a4:df:98:56:97:19:0f:c9:da:
                    9f:09:86:1c:ba:16:17:30:5b:89:13:02:82:ba:0b:
                    e6:0d:79:47:67:4d:bc:8d:fa:ae:76:19:16:61:22:
                    49:fe:5f:b2:90:b7:c5:c3:02:5e:16:fc:0b:98:75:
                    6c:57:39:fe:bd:4a:9f:e6:fb:db:c7:bd:a6:28:ec:
                    79:61:9e:d7:15:dc:d0:84:28:04:ea:4f:7a:73:55:
                    2f:e1:cb:fb:7b:a2:df:a5:61:0c:b6:c5:52:4e:93:
                    76:2c:ab:a7:2c:b2:d1:e0:2a:c4:be:6c:8b:d8:92:
                    04:04:5b:cb:5c:b8:b0:4b:68:35:70:57:4d:76:96:
                    f3:f9:f5:f0:4c:22:d3:aa:84:ea:5c:73:ef:73:e9:
                    5a:e4:8c:60:3f:9d:a7:04:23:6d:f0:1c:c5:a2:4b:
                    62:0f:9b:26:73:70:8b:c4:66:ae:b9:7b:22:6a:d2:
                    13:de:5b:94:b9:53:b7:ff:78:5d:05:e6:b1:17:46:
                    58:d1:8e:ac:f8:68:e4:3d:19:c8:ec:61:ec:c8:ed:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E9:60:55:04:57:10:40:BD:18:17:02:8D:BF:FC:B4:75:DA:5E:CB
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/RelgVQRXEEC9GBcCjb_8tHXaXss.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:8a:69:ae:e0:fb:6d:3b:66:b3:7f:11:32:99:87:a3:cd:c7:
         4f:8c:a6:72:48:b7:ab:e9:8d:5e:2f:41:00:09:14:59:46:2b:
         6e:f2:85:f3:d9:f3:15:00:17:d7:3f:15:27:51:e7:8c:68:f4:
         d6:ac:4a:cd:c1:d8:cf:7b:1f:f4:65:56:8c:d4:06:a8:fb:04:
         c6:f1:43:59:ac:cc:e5:65:20:dd:42:74:8e:46:51:7b:7b:55:
         9f:7b:b0:bb:36:3d:a6:b2:1c:07:3e:11:8b:97:00:19:0d:a7:
         21:d2:60:57:1f:24:82:85:eb:f3:eb:14:d9:3d:8a:18:33:cb:
         e7:20:02:ac:b9:fc:1d:91:a8:73:51:60:5a:93:e4:3d:dc:ef:
         86:66:96:b8:72:4f:91:1f:15:0b:da:61:60:12:33:e0:48:59:
         ba:4b:72:e0:e8:b0:e7:1c:12:92:1d:2a:df:e0:ea:bc:57:48:
         e0:f5:e5:e5:7d:f0:73:9c:61:85:5d:58:11:a3:3d:9d:5e:d7:
         fa:39:ab:ba:9a:74:0d:40:78:6e:b2:2c:a2:8a:68:a0:69:f9:
         b2:42:76:dd:48:68:22:81:61:2f:2d:9d:a0:b9:22:40:9e:91:
         c0:8a:9c:af:0d:bf:09:fb:69:1d:c4:bd:a2:82:8b:3c:65:ae:
         4c:70:98:4b
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICALYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTY0RkI3QzhDN0M2QjVDRDdDNzcwMTg4MkU4NTk3QzQyODM4RTAeFw0yNjAzMzEw
NzQ5MDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ1RTk2MDU1MDQ1NzEw
NDBCRDE4MTcwMjhEQkZGQ0I0NzVEQTVFQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZA5XAibiDec8LYtCrxa4dYEFLPxtIeVSYO0BGD434+aL+3zAh
fOCwRH5L9B6Uhv6+jKTfmFaXGQ/J2p8Jhhy6FhcwW4kTAoK6C+YNeUdnTbyN+q52
GRZhIkn+X7KQt8XDAl4W/AuYdWxXOf69Sp/m+9vHvaYo7HlhntcV3NCEKATqT3pz
VS/hy/t7ot+lYQy2xVJOk3Ysq6csstHgKsS+bIvYkgQEW8tcuLBLaDVwV012lvP5
9fBMItOqhOpcc+9z6VrkjGA/nacEI23wHMWiS2IPmyZzcIvEZq65eyJq0hPeW5S5
U7f/eF0F5rEXRljRjqz4aOQ9GcjsYezI7SAtAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQURelgVQRXEEC9GBcCjb/8tHXaXsswHwYDVR0jBBgwFoAUxJ5k+3yMfGtc18dw
GILoWXxCg44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTE2L3hKNWstM3lNZkd0YzE4ZHdHSUxvV1h4Q2c0NC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hKNWstM3lNZkd0YzE4ZHdHSUxv
V1h4Q2c0NC5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDExNi9SZWxnVlFSWEVFQzlHQmNDamJfOHRIWGFYc3Mucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyl1AMA0GCSqGSIb3DQEBCwUA
A4IBAQCMimmu4PttO2azfxEymYejzcdPjKZySLer6Y1eL0EACRRZRitu8oXz2fMV
ABfXPxUnUeeMaPTWrErNwdjPex/0ZVaM1Aao+wTG8UNZrMzlZSDdQnSORlF7e1Wf
e7C7Nj2mshwHPhGLlwAZDach0mBXHySChevz6xTZPYoYM8vnIAKsufwdkahzUWBa
k+Q93O+GZpa4ck+RHxUL2mFgEjPgSFm6S3Lg6LDnHBKSHSrf4Oq8V0jg9eXlffBz
nGGFXVgRoz2dXtf6Oau6mnQNQHhusiyiimigafmyQnbdSGgigWEvLZ2guSJAnpHA
ipyvDb8J+2kdxL2igos8Za5McJhL
-----END CERTIFICATE-----
Generated at Wed Apr 1 23:05:23 2026 by rpki-client