Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20297/NJX6hpIHVoGaz_6XG733Tq_L_2A.roa
File:                     NJX6hpIHVoGaz_6XG733Tq_L_2A.roa (raw, json)
Hash identifier:          8wAo5WNEfFXJDvXxYsutl6ePvQdY8e1PLYwmta/gyU4=
Subject key identifier:   34:95:FA:86:92:07:56:81:9A:CF:FE:97:1B:BD:F7:4E:AF:CB:FF:60
Certificate issuer:       /CN=5C59845A8FCDD26E1C1CCE64D37B23473EF73E0E
Certificate serial:       02
Authority key identifier: 5C:59:84:5A:8F:CD:D2:6E:1C:1C:CE:64:D3:7B:23:47:3E:F7:3E:0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/NJX6hpIHVoGaz_6XG733Tq_L_2A.roa
Signing time:             Wed 01 Jul 2026 01:14:46 +0000
ROA not before:           Wed 01 Jul 2026 01:14:46 +0000
ROA not after:            Thu 01 Jul 2027 01:02:04 +0000
asID:                     212259
IP address blocks:        162.4.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 01:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C59845A8FCDD26E1C1CCE64D37B23473EF73E0E
        Validity
            Not Before: Jul  1 01:14:46 2026 GMT
            Not After : Jul  1 01:02:04 2027 GMT
        Subject: CN=3495FA86920756819ACFFE971BBDF74EAFCBFF60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:e6:ef:8e:94:5c:55:cc:b6:03:2f:58:f6:
                    b1:be:99:75:e4:31:a3:de:22:5d:ff:a2:91:49:43:
                    c7:cd:95:5c:78:4d:5f:43:bc:ec:8a:ab:a2:a4:d4:
                    53:02:f8:93:92:e3:1e:97:d2:b9:50:4a:94:c1:c8:
                    b9:82:d8:63:de:c9:c1:c9:a6:eb:37:26:0c:39:8e:
                    75:52:ef:40:69:53:9d:5a:3d:c5:4e:bf:c9:95:ee:
                    d0:b8:c8:10:ee:88:98:17:84:93:26:af:c4:a4:6a:
                    b6:7e:fc:55:86:06:78:f1:41:3a:02:e4:45:52:22:
                    a0:1f:7f:3b:59:c8:b4:20:fc:0d:16:09:18:d7:81:
                    c2:8a:97:f3:35:58:f8:23:8a:60:2e:14:88:9b:72:
                    2f:64:82:5f:c0:dc:4d:71:b9:f9:77:a7:e3:e4:17:
                    f3:2c:c9:64:60:49:ab:63:80:59:e7:c6:66:35:bb:
                    fb:41:5f:f3:a5:f0:45:1b:1d:07:3d:fd:3e:3b:1e:
                    40:74:d1:d8:8c:52:d8:cd:64:3c:7f:8b:38:42:a2:
                    7c:b0:62:1a:84:10:f5:98:6b:8c:65:3e:23:18:36:
                    60:a3:63:fd:08:93:36:a7:3e:e1:0b:68:a6:8f:f0:
                    2d:d8:9d:eb:53:08:06:3c:b6:61:ba:59:84:9c:8d:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:95:FA:86:92:07:56:81:9A:CF:FE:97:1B:BD:F7:4E:AF:CB:FF:60
            X509v3 Authority Key Identifier:
                keyid:5C:59:84:5A:8F:CD:D2:6E:1C:1C:CE:64:D3:7B:23:47:3E:F7:3E:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/NJX6hpIHVoGaz_6XG733Tq_L_2A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:2e:b7:5d:56:3a:25:32:76:84:88:bb:70:f7:fb:a2:65:48:
         cd:13:e7:dd:d1:0a:59:1b:2f:d6:28:80:36:1e:23:7d:d5:25:
         c0:09:6c:0c:8f:26:f7:28:59:33:91:60:77:f4:37:ca:60:10:
         df:b7:3c:92:d3:86:75:28:24:8f:d9:f3:4c:bc:da:c2:4d:d2:
         cc:39:75:11:5a:69:e8:34:4b:fa:fa:d9:f6:c7:50:0d:83:88:
         e9:74:ab:6c:7c:4b:8f:52:dd:70:d0:db:cc:8a:14:81:e0:eb:
         fb:aa:88:06:71:41:5c:c7:b8:7c:5f:b0:31:d8:c1:48:5b:0c:
         cd:05:38:03:47:ae:26:b9:41:27:f5:9f:35:73:7b:4c:a5:f5:
         fb:09:f1:ec:89:5e:f4:eb:3d:dc:d7:90:6a:75:25:c4:18:02:
         3f:cc:c5:a5:3c:16:31:5b:25:c2:bb:3f:77:62:b5:4a:05:9b:
         8b:88:01:82:ed:d0:99:ec:cd:66:11:ca:fb:7a:e5:d6:50:2d:
         15:72:85:26:b5:b4:9d:cb:5c:b3:60:77:0e:a1:2e:42:56:b3:
         c2:dd:50:af:bb:00:71:b7:80:29:64:cb:05:02:97:10:d8:e2:
         b3:c1:93:a2:fc:51:10:cc:ce:96:2d:db:a3:5b:23:eb:d0:4d:
         fa:4b:20:57
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QzU5
ODQ1QThGQ0REMjZFMUMxQ0NFNjREMzdCMjM0NzNFRjczRTBFMB4XDTI2MDcwMTAx
MTQ0NloXDTI3MDcwMTAxMDIwNFowMzExMC8GA1UEAxMoMzQ5NUZBODY5MjA3NTY4
MTlBQ0ZGRTk3MUJCREY3NEVBRkNCRkY2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKGz5u+OlFxVzLYDL1j2sb6ZdeQxo94iXf+ikUlDx82VXHhNX0O8
7IqroqTUUwL4k5LjHpfSuVBKlMHIuYLYY97Jwcmm6zcmDDmOdVLvQGlTnVo9xU6/
yZXu0LjIEO6ImBeEkyavxKRqtn78VYYGePFBOgLkRVIioB9/O1nItCD8DRYJGNeB
woqX8zVY+COKYC4UiJtyL2SCX8DcTXG5+Xen4+QX8yzJZGBJq2OAWefGZjW7+0Ff
86XwRRsdBz39PjseQHTR2IxS2M1kPH+LOEKifLBiGoQQ9ZhrjGU+Ixg2YKNj/QiT
Nqc+4Qtopo/wLdid61MIBjy2YbpZhJyNlDMCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQ0lfqGkgdWgZrP/pcbvfdOr8v/YDAfBgNVHSMEGDAWgBRcWYRaj83SbhwczmTT
eyNHPvc+DjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyOTcvWEZtRVdvX04wbTRjSE01azAzc2pSejczUGc0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWEZtRVdvX04wbTRjSE01azAzc2pS
ejczUGc0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjk3L05KWDZocElIVm9HYXpfNlhHNzMzVHFfTF8yQS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGiBMIwDQYJKoZIhvcNAQELBQAD
ggEBABsut11WOiUydoSIu3D3+6JlSM0T593RClkbL9YogDYeI33VJcAJbAyPJvco
WTORYHf0N8pgEN+3PJLThnUoJI/Z80y82sJN0sw5dRFaaeg0S/r62fbHUA2DiOl0
q2x8S49S3XDQ28yKFIHg6/uqiAZxQVzHuHxfsDHYwUhbDM0FOANHria5QSf1nzVz
e0yl9fsJ8eyJXvTrPdzXkGp1JcQYAj/MxaU8FjFbJcK7P3ditUoFm4uIAYLt0Jns
zWYRyvt65dZQLRVyhSa1tJ3LXLNgdw6hLkJWs8LdUK+7AHG3gClkywUClxDY4rPB
k6L8URDMzpYt26NbI+vQTfpLIFc=
-----END CERTIFICATE-----
Generated at Tue Jul 7 02:20:53 2026 by rpki-client