Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20291/3WVjC5G4YGChmiQH3qpb-MxuBz4.roa
File:                     3WVjC5G4YGChmiQH3qpb-MxuBz4.roa (raw, json)
Hash identifier:          9y53IEkAuPDEiLVpxJzHt/bCNBmCe4WSxmV/A/7JMpg=
Subject key identifier:   DD:65:63:0B:91:B8:60:60:A1:9A:24:07:DE:AA:5B:F8:CC:6E:07:3E
Certificate issuer:       /CN=853C4F1EF37C750A48339569E5E67C4573FBAE6E
Certificate serial:       03
Authority key identifier: 85:3C:4F:1E:F3:7C:75:0A:48:33:95:69:E5:E6:7C:45:73:FB:AE:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/3WVjC5G4YGChmiQH3qpb-MxuBz4.roa
Signing time:             Thu 25 Jun 2026 02:47:51 +0000
ROA not before:           Thu 25 Jun 2026 02:47:51 +0000
ROA not after:            Thu 24 Jun 2027 01:12:55 +0000
asID:                     16509
IP address blocks:        219.97.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 04:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=853C4F1EF37C750A48339569E5E67C4573FBAE6E
        Validity
            Not Before: Jun 25 02:47:51 2026 GMT
            Not After : Jun 24 01:12:55 2027 GMT
        Subject: CN=DD65630B91B86060A19A2407DEAA5BF8CC6E073E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:ae:8e:03:aa:94:22:57:0b:03:6e:8e:69:
                    5c:8a:4e:ad:97:7e:b1:12:b2:fc:bd:1b:64:d0:aa:
                    a0:26:64:1d:6b:de:93:4b:91:ab:4f:29:16:93:eb:
                    dc:1e:1b:0e:48:fd:7b:67:ef:4f:c8:76:97:24:f2:
                    8b:03:80:c0:3d:38:a6:b7:3f:f3:b6:f0:b4:e6:e1:
                    c0:ad:de:ba:64:43:02:69:86:45:c8:77:78:e6:06:
                    e9:0e:4b:de:fc:c0:9d:ec:c4:c1:9c:7e:11:6c:a7:
                    1f:d9:7c:9b:8b:a1:3a:65:dd:bf:e4:e4:c0:eb:63:
                    6b:f4:d6:f9:f5:9a:c4:dc:75:f8:14:fb:2b:88:a2:
                    8b:ae:97:c6:0f:dd:f4:2c:1a:7e:22:81:a1:77:bf:
                    31:aa:a6:d2:42:8d:db:64:61:de:92:21:cc:fb:c8:
                    b8:1e:37:5e:ea:bd:6d:de:ab:86:d0:dc:c8:8b:fe:
                    8d:db:77:1b:d5:03:66:60:33:1b:da:bc:86:a6:59:
                    18:34:b6:3c:5c:61:e4:0e:f6:ea:d3:14:66:42:1f:
                    ce:77:28:24:f9:2a:7f:41:66:cc:02:c4:9c:32:b8:
                    ed:af:b3:01:c5:33:c6:09:74:95:64:c7:79:66:e4:
                    61:9e:a8:69:da:13:3a:67:cf:89:97:91:ae:f7:2d:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:65:63:0B:91:B8:60:60:A1:9A:24:07:DE:AA:5B:F8:CC:6E:07:3E
            X509v3 Authority Key Identifier:
                keyid:85:3C:4F:1E:F3:7C:75:0A:48:33:95:69:E5:E6:7C:45:73:FB:AE:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/3WVjC5G4YGChmiQH3qpb-MxuBz4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.97.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:d4:18:4c:5b:3c:1b:44:de:2e:58:90:15:d1:45:f9:2a:39:
         33:c0:ac:fb:d6:d1:74:ad:5e:99:e9:b0:5d:af:38:94:fa:ba:
         d7:3e:4c:bc:63:68:95:e4:0b:84:be:9a:8b:7a:00:44:5c:6c:
         33:16:4e:85:b4:cf:8e:89:0e:a2:39:ad:7a:fe:09:79:40:13:
         a6:b6:06:37:2b:1e:3f:e9:b0:09:c9:be:bc:29:bc:7f:90:a6:
         49:97:ed:0d:76:75:63:af:45:8b:2c:10:20:34:e3:41:40:c6:
         c8:76:86:48:79:b0:5b:70:10:83:7d:45:3d:a8:db:72:3b:4f:
         2c:1d:5e:c7:44:f9:50:a1:69:f1:4c:fb:11:a7:4c:f4:ba:6c:
         a5:28:39:6b:73:ea:2d:be:b0:c9:0e:e8:2a:93:5a:47:e8:34:
         31:17:af:6a:79:f0:ba:6b:2d:6a:03:c7:39:69:06:5a:10:fb:
         21:96:9b:16:56:10:43:0f:e9:17:c5:90:b0:a2:1a:d5:1b:4c:
         13:b5:b1:92:c1:e3:86:eb:62:55:93:29:e1:0e:41:b4:2f:4b:
         c3:f7:91:28:c1:75:cb:ff:22:0d:8d:e5:41:7f:57:18:08:8f:
         1c:1d:af:28:67:5d:9c:b2:c2:7d:68:a4:30:d2:8d:41:8d:43:
         8f:1b:50:02
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NTND
NEYxRUYzN0M3NTBBNDgzMzk1NjlFNUU2N0M0NTczRkJBRTZFMB4XDTI2MDYyNTAy
NDc1MVoXDTI3MDYyNDAxMTI1NVowMzExMC8GA1UEAxMoREQ2NTYzMEI5MUI4NjA2
MEExOUEyNDA3REVBQTVCRjhDQzZFMDczRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMNxro4DqpQiVwsDbo5pXIpOrZd+sRKy/L0bZNCqoCZkHWvek0uR
q08pFpPr3B4bDkj9e2fvT8h2lyTyiwOAwD04prc/87bwtObhwK3eumRDAmmGRch3
eOYG6Q5L3vzAnezEwZx+EWynH9l8m4uhOmXdv+TkwOtja/TW+fWaxNx1+BT7K4ii
i66Xxg/d9CwafiKBoXe/Maqm0kKN22Rh3pIhzPvIuB43Xuq9bd6rhtDcyIv+jdt3
G9UDZmAzG9q8hqZZGDS2PFxh5A726tMUZkIfzncoJPkqf0FmzALEnDK47a+zAcUz
xgl0lWTHeWbkYZ6oadoTOmfPiZeRrvct9Y8CAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBTdZWMLkbhgYKGaJAfeqlv4zG4HPjAfBgNVHSMEGDAWgBSFPE8e83x1CkgzlWnl
5nxFc/uubjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyOTEvaFR4UEh2TjhkUXBJTTVWcDVlWjhSWFA3cm00LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaFR4UEh2TjhkUXBJTTVWcDVlWjhS
WFA3cm00LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjkxLzNXVmpDNUc0WUdDaG1pUUgzcXBiLU14dUJ6NC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPbYWgwDQYJKoZIhvcNAQELBQAD
ggEBAHfUGExbPBtE3i5YkBXRRfkqOTPArPvW0XStXpnpsF2vOJT6utc+TLxjaJXk
C4S+mot6AERcbDMWToW0z46JDqI5rXr+CXlAE6a2BjcrHj/psAnJvrwpvH+QpkmX
7Q12dWOvRYssECA040FAxsh2hkh5sFtwEIN9RT2o23I7TywdXsdE+VChafFM+xGn
TPS6bKUoOWtz6i2+sMkO6CqTWkfoNDEXr2p58LprLWoDxzlpBloQ+yGWmxZWEEMP
6RfFkLCiGtUbTBO1sZLB44brYlWTKeEOQbQvS8P3kSjBdcv/Ig2N5UF/VxgIjxwd
ryhnXZyywn1opDDSjUGNQ48bUAI=
-----END CERTIFICATE-----
Generated at Wed Jul 1 06:19:49 2026 by rpki-client