Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30017/PE4VHQZVGH875k92LwW7YnGxULE.roa
File:                     PE4VHQZVGH875k92LwW7YnGxULE.roa (raw, json)
Hash identifier:          3S4W5CvfVoy+ZjhBwl0fJTgE5M1F7yg4ojg9gMMFhY0=
Subject key identifier:   3C:4E:15:1D:06:55:18:7F:3B:E6:4F:76:2F:05:BB:62:71:B1:50:B1
Certificate issuer:       /CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Certificate serial:       58
Authority key identifier: A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/PE4VHQZVGH875k92LwW7YnGxULE.roa
Signing time:             Thu 20 Aug 2026 09:04:51 +0000
ROA not before:           Thu 20 Aug 2026 09:04:51 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        2001:268:fd0e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
        Validity
            Not Before: Aug 20 09:04:51 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=3C4E151D0655187F3BE64F762F05BB6271B150B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:94:48:81:a6:a5:5f:c0:0b:bf:07:28:54:
                    40:be:6f:ec:e7:27:e8:99:28:74:f7:ed:df:37:15:
                    9e:3d:32:09:9f:71:67:39:2b:eb:5d:ea:33:e6:dc:
                    c1:bd:f2:1f:d0:ca:8d:30:65:08:f8:92:7e:e0:03:
                    61:54:6e:43:cc:1d:7d:7c:73:4a:79:1f:8e:6c:d3:
                    c7:b5:16:39:82:89:6c:24:7e:c8:c4:21:cc:09:6c:
                    43:31:31:37:b8:92:b4:a5:b5:cf:10:53:ba:f5:37:
                    36:ab:92:81:43:f3:2a:07:60:aa:c4:63:18:d9:bc:
                    91:5a:e5:99:1c:00:f7:e7:40:a8:b3:17:16:2f:a2:
                    28:ca:3f:89:67:07:56:94:b4:2c:ec:c4:79:9d:fe:
                    a3:54:7d:3a:e9:09:de:af:cb:dc:83:4e:4e:29:52:
                    0c:05:9b:a3:f1:7d:43:75:8b:4c:5c:38:05:73:c4:
                    60:7c:55:45:fa:1b:cc:0a:12:e2:b0:35:85:8a:f0:
                    66:3d:de:40:f4:89:a4:57:00:41:0b:0a:cf:f0:d1:
                    1e:fb:b4:50:2a:b4:23:68:e0:6a:2a:14:35:6d:9a:
                    a5:0b:ed:0c:b5:96:13:20:d6:0a:b2:56:c5:51:92:
                    72:ce:2d:1f:6a:a0:a2:68:59:3d:53:da:cb:79:3f:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4E:15:1D:06:55:18:7F:3B:E6:4F:76:2F:05:BB:62:71:B1:50:B1
            X509v3 Authority Key Identifier:
                keyid:A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/PE4VHQZVGH875k92LwW7YnGxULE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:268:fd0e::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:83:78:56:cd:0d:39:a3:9d:ad:7a:6f:be:81:4e:cf:7f:f9:
         21:70:d0:7f:d0:f2:c2:b3:6d:b3:07:47:ff:c9:a6:fb:d1:da:
         04:98:3b:3a:f2:4c:12:64:d3:4f:bf:22:86:77:89:45:2d:2c:
         6f:62:45:d9:e5:df:76:58:b4:15:e8:c0:9e:5e:b8:54:43:78:
         b7:89:83:44:88:81:4f:81:50:e3:b1:b1:de:32:0c:dd:2c:8c:
         27:82:b3:5b:46:02:f4:b6:7c:af:0b:88:bc:35:57:7b:4c:cb:
         1c:9f:98:f3:0a:86:75:74:05:ad:33:1a:64:ae:1c:e5:c2:0c:
         d2:6f:f3:bf:00:9a:b4:d8:58:69:08:97:8d:6e:f8:49:76:28:
         50:74:6a:3b:ca:2f:56:e5:96:c4:bc:67:85:fc:4d:f5:35:df:
         54:72:68:1d:4d:7d:37:fc:45:71:9a:ec:65:2e:90:15:36:cc:
         d3:c5:9e:6b:40:93:48:20:2d:33:ce:fa:ba:59:46:f7:a1:74:
         52:0c:78:49:02:f7:3e:ae:ea:25:dc:3c:23:3a:9a:91:a8:65:
         7d:15:88:a3:5a:00:92:45:49:5b:fb:fc:d6:a2:00:eb:7b:d3:
         50:c0:2f:ae:95:3b:4e:9d:67:b9:78:df:4f:85:84:bd:d7:19:
         f4:33:4b:ec
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjI5
QUE4QUVCMjQyQTEzRkIzNzFBNDRDQTVFMUYyOTU3QTcwRTFCMB4XDTI2MDgyMDA5
MDQ1MVoXDTI3MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoM0M0RTE1MUQwNjU1MTg3
RjNCRTY0Rjc2MkYwNUJCNjI3MUIxNTBCMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANEOlEiBpqVfwAu/ByhUQL5v7Ocn6JkodPft3zcVnj0yCZ9xZzkr
613qM+bcwb3yH9DKjTBlCPiSfuADYVRuQ8wdfXxzSnkfjmzTx7UWOYKJbCR+yMQh
zAlsQzExN7iStKW1zxBTuvU3NquSgUPzKgdgqsRjGNm8kVrlmRwA9+dAqLMXFi+i
KMo/iWcHVpS0LOzEeZ3+o1R9OukJ3q/L3INOTilSDAWbo/F9Q3WLTFw4BXPEYHxV
RfobzAoS4rA1hYrwZj3eQPSJpFcAQQsKz/DRHvu0UCq0I2jgaioUNW2apQvtDLWW
EyDWCrJWxVGScs4tH2qgomhZPVPay3k/yHECAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBQ8ThUdBlUYfzvmT3YvBbticbFQsTAfBgNVHSMEGDAWgBSmKaqK6yQqE/s3GkTK
Xh8pV6cOGzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMTcvcGltcWl1c2tLaFA3TnhwRXlsNGZLVmVuRGhzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcGltcWl1c2tLaFA3TnhwRXlsNGZL
VmVuRGhzLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDE3L1BFNFZIUVpWR0g4NzVrOTJMd1c3WW5HeFVMRS5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQJo/Q4wDQYJKoZIhvcNAQEL
BQADggEBAG+DeFbNDTmjna16b76BTs9/+SFw0H/Q8sKzbbMHR//JpvvR2gSYOzry
TBJk00+/IoZ3iUUtLG9iRdnl33ZYtBXowJ5euFRDeLeJg0SIgU+BUOOxsd4yDN0s
jCeCs1tGAvS2fK8LiLw1V3tMyxyfmPMKhnV0Ba0zGmSuHOXCDNJv878AmrTYWGkI
l41u+El2KFB0ajvKL1bllsS8Z4X8TfU131RyaB1NfTf8RXGa7GUukBU2zNPFnmtA
k0ggLTPO+rpZRvehdFIMeEkC9z6u6iXcPCM6mpGoZX0ViKNaAJJFSVv7/NaiAOt7
01DAL66VO06dZ7l430+FhL3XGfQzS+w=
-----END CERTIFICATE-----
Generated at Fri Sep 11 16:53:14 2026 by rpki-client