Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/Pdw116ghPaNWcK4YWENTC-iPm7k.roa
File:                     Pdw116ghPaNWcK4YWENTC-iPm7k.roa (raw, json)
Hash identifier:          fS2xAQr9zLzwmtgKoi/t2tw32cWj1L/fgcFr0qvfX1E=
Subject key identifier:   3D:DC:35:D7:A8:21:3D:A3:56:70:AE:18:58:43:53:0B:E8:8F:9B:B9
Certificate issuer:       /CN=9E1460D2688F6D1068B97C1F914040434B8F0324
Certificate serial:       5C
Authority key identifier: 9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/Pdw116ghPaNWcK4YWENTC-iPm7k.roa
Signing time:             Thu 13 Aug 2026 02:53:20 +0000
ROA not before:           Thu 13 Aug 2026 02:53:20 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     45674
IP address blocks:        192.47.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E1460D2688F6D1068B97C1F914040434B8F0324
        Validity
            Not Before: Aug 13 02:53:20 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=3DDC35D7A8213DA35670AE185843530BE88F9BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:46:2a:a8:4b:a7:e5:c6:da:01:0e:75:4f:b2:
                    d8:65:82:aa:b1:9b:2d:e8:fd:b8:19:a3:35:1c:e8:
                    36:49:21:5e:77:6b:ad:8f:01:87:0b:40:d5:64:32:
                    76:d0:42:59:b0:c4:b4:3b:05:3b:ed:c9:2f:e5:31:
                    fc:9e:27:f4:51:1f:e4:e4:e9:c0:a2:6c:49:27:17:
                    23:9f:1d:0c:fc:61:2e:58:ce:47:db:bb:61:26:bd:
                    d5:e0:11:29:ea:50:7c:1d:c0:de:cb:05:a4:ed:3b:
                    ac:a0:43:13:de:c1:18:3c:e2:dc:c4:c6:7b:3a:b9:
                    b5:14:f5:05:31:ab:26:38:31:8b:66:20:44:46:8b:
                    05:54:4d:06:44:97:c5:24:6e:23:9f:0e:db:5b:ee:
                    10:e5:a8:13:b8:2a:7a:c7:6b:7d:e2:c4:d1:00:c5:
                    7a:5f:e3:bf:ed:66:99:ad:60:7a:4c:3b:77:88:71:
                    c2:ff:7e:5e:ab:44:58:27:37:2b:ea:cf:16:5e:c7:
                    56:f2:f1:1f:d9:85:05:93:74:2e:9f:95:bc:01:cb:
                    5a:9f:ff:20:c9:35:e1:b9:6d:d7:6b:42:e2:88:88:
                    46:11:97:97:86:76:4a:0c:e0:c7:4f:22:f5:01:30:
                    c7:8b:57:b1:15:10:83:13:9a:89:82:b4:e1:08:62:
                    a3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DC:35:D7:A8:21:3D:A3:56:70:AE:18:58:43:53:0B:E8:8F:9B:B9
            X509v3 Authority Key Identifier:
                keyid:9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/Pdw116ghPaNWcK4YWENTC-iPm7k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.47.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:73:8b:af:d4:63:a6:d6:01:d7:00:fc:2c:06:7f:78:64:5c:
         e7:2f:cb:d4:a4:69:18:e0:e2:00:2e:19:a3:89:b9:cb:93:6b:
         49:13:e5:01:1e:43:7f:a2:36:81:e1:42:4e:cf:c8:00:5e:9a:
         9f:b8:20:2b:6a:b4:e9:1d:e8:ce:5c:b2:9f:3c:9c:51:b3:dd:
         fb:fb:a3:7f:ba:d7:4d:04:52:d7:0e:7d:e7:88:d5:ec:8d:6a:
         82:77:75:8b:e6:92:61:b1:47:5a:2a:15:e9:dd:99:57:5f:1e:
         47:38:45:5e:28:96:d8:6f:2b:a2:fd:ed:a9:d7:14:41:70:07:
         58:b8:c8:59:a9:6a:a5:23:ab:fa:fa:30:72:8f:54:52:e6:51:
         70:1b:29:b3:61:c0:4f:f9:42:5d:6b:d2:0d:75:0e:b9:6a:77:
         88:41:b2:b0:f9:70:73:72:22:57:57:08:33:53:5f:b8:b7:82:
         e5:49:e1:b6:8f:13:5e:9a:b7:17:ec:a0:59:01:49:16:08:18:
         51:0d:89:c7:ce:56:b7:83:a1:4f:2a:61:0f:5b:ff:be:53:ce:
         d3:c4:21:d8:76:eb:94:91:4e:f3:5a:23:9a:0c:1a:45:f0:8a:
         2b:a7:20:57:cd:05:73:79:a2:d6:c3:38:1f:6b:d2:9c:56:06:
         75:ae:5a:ab
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTE0
NjBEMjY4OEY2RDEwNjhCOTdDMUY5MTQwNDA0MzRCOEYwMzI0MB4XDTI2MDgxMzAy
NTMyMFoXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoM0REQzM1RDdBODIxM0RB
MzU2NzBBRTE4NTg0MzUzMEJFODhGOUJCOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANdGKqhLp+XG2gEOdU+y2GWCqrGbLej9uBmjNRzoNkkhXndrrY8B
hwtA1WQydtBCWbDEtDsFO+3JL+Ux/J4n9FEf5OTpwKJsSScXI58dDPxhLljOR9u7
YSa91eARKepQfB3A3ssFpO07rKBDE97BGDzi3MTGezq5tRT1BTGrJjgxi2YgREaL
BVRNBkSXxSRuI58O21vuEOWoE7gqesdrfeLE0QDFel/jv+1mma1gekw7d4hxwv9+
XqtEWCc3K+rPFl7HVvLxH9mFBZN0Lp+VvAHLWp//IMk14blt12tC4oiIRhGXl4Z2
Sgzgx08i9QEwx4tXsRUQgxOaiYK04QhiowsCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBQ93DXXqCE9o1ZwrhhYQ1ML6I+buTAfBgNVHSMEGDAWgBSeFGDSaI9tEGi5fB+R
QEBDS48DJDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjI1MS9uaFJnMG1pUGJSQm91WHdma1VCQVEwdVBBeVEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9uaFJnMG1pUGJSQm91WHdma1VCQVEw
dVBBeVEuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjI1MS9QZHcxMTZnaFBhTldjSzRZV0VOVEMtaVBtN2sucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC91MA0GCSqGSIb3DQEBCwUAA4IB
AQBac4uv1GOm1gHXAPwsBn94ZFznL8vUpGkY4OIALhmjibnLk2tJE+UBHkN/ojaB
4UJOz8gAXpqfuCArarTpHejOXLKfPJxRs937+6N/utdNBFLXDn3niNXsjWqCd3WL
5pJhsUdaKhXp3ZlXXx5HOEVeKJbYbyui/e2p1xRBcAdYuMhZqWqlI6v6+jByj1RS
5lFwGymzYcBP+UJda9INdQ65aneIQbKw+XBzciJXVwgzU1+4t4LlSeG2jxNemrcX
7KBZAUkWCBhRDYnHzla3g6FPKmEPW/++U87TxCHYduuUkU7zWiOaDBpF8IorpyBX
zQVzeaLWwzgfa9KcVgZ1rlqr
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:07:57 2026 by rpki-client