Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30461/XILtkXYp8VaizqG-4NOpE87lHuQ.roa
File:                     XILtkXYp8VaizqG-4NOpE87lHuQ.roa (raw, json)
Hash identifier:          VbT2cZg40Y3NHdlcoN2kd+NfH4vt/2e5zPkNnkByAj4=
Subject key identifier:   5C:82:ED:91:76:29:F1:56:A2:CE:A1:BE:E0:D3:A9:13:CE:E5:1E:E4
Certificate issuer:       /CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Certificate serial:       0C
Authority key identifier: 63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/XILtkXYp8VaizqG-4NOpE87lHuQ.roa
Signing time:             Thu 13 Aug 2026 15:39:12 +0000
ROA not before:           Thu 13 Aug 2026 15:39:12 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     17497
IP address blocks:        2402:6020:1100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
        Validity
            Not Before: Aug 13 15:39:12 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=5C82ED917629F156A2CEA1BEE0D3A913CEE51EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:0f:21:83:b1:86:12:22:f6:f1:8d:ad:30:
                    0a:74:82:98:44:18:e2:8a:ab:2d:23:50:95:5c:5d:
                    6b:b8:ae:4c:40:f8:22:34:ba:50:81:fa:92:63:c4:
                    eb:17:de:5c:30:1f:39:0b:66:c0:99:b7:c6:f9:4b:
                    e2:64:e8:ce:ee:9c:9f:c6:78:74:e1:48:d8:35:4b:
                    ac:d1:81:63:70:f0:f1:b1:d0:3f:c6:d5:01:e7:99:
                    59:dd:a6:9d:ce:1f:58:19:6b:e3:65:f9:cf:27:90:
                    49:f0:44:25:91:00:69:37:74:0e:f9:cf:54:0c:40:
                    23:f1:ea:2b:38:b6:8d:5a:1b:cf:3c:e6:7a:75:79:
                    df:78:76:51:73:8f:49:97:8b:e2:72:7d:06:2e:98:
                    ca:34:28:c0:44:71:ae:8a:0b:01:43:d9:b9:75:64:
                    1e:3f:e7:f6:e3:7b:68:99:fd:77:4c:59:b6:c9:5b:
                    98:51:20:c5:2c:f4:99:05:cd:22:84:62:50:4c:d9:
                    a5:76:6a:c7:3e:ef:8c:16:8c:49:09:c5:5b:e5:2b:
                    08:61:83:8d:ea:5d:58:e7:98:b4:4b:cb:bc:54:5b:
                    96:ac:ea:4d:3a:ca:2d:ba:2b:8d:64:7a:37:3c:2f:
                    f6:94:2a:e0:9d:98:26:f5:54:ef:8f:40:b7:68:b6:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:82:ED:91:76:29:F1:56:A2:CE:A1:BE:E0:D3:A9:13:CE:E5:1E:E4
            X509v3 Authority Key Identifier:
                keyid:63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/XILtkXYp8VaizqG-4NOpE87lHuQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6020:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:66:ae:fc:c2:89:b6:cb:de:fe:aa:8f:f7:ae:8b:5a:50:d6:
         07:46:74:81:d6:b7:d2:dd:32:94:c8:0b:a5:5c:c0:63:9b:24:
         6b:d0:75:dc:04:f2:9b:e0:e4:c8:d1:8c:2e:8c:fd:48:c8:48:
         dc:cd:29:fd:35:c5:40:8e:6a:e1:b7:12:11:aa:70:f1:bb:55:
         b5:26:5c:c7:89:28:04:87:42:c9:2a:a8:97:06:f0:e8:93:70:
         66:e0:9f:60:00:03:0b:05:a9:7d:03:32:03:65:a0:e5:2f:f8:
         93:a8:2a:93:66:fa:5e:d9:55:f6:20:ac:3b:ee:3d:69:36:06:
         2f:11:9d:5e:ba:d2:0a:26:42:cb:57:d1:2a:a1:98:b4:49:65:
         b4:a9:db:c2:3a:47:b0:40:4f:c8:8b:5f:3c:fe:49:d4:1a:96:
         b3:cc:7b:27:74:c2:ba:04:21:72:90:be:35:dc:bd:7e:30:98:
         96:ba:36:58:6c:a0:b5:27:66:76:df:8a:14:fe:6d:7e:38:10:
         50:96:3f:33:ea:cd:b4:45:b7:31:13:a1:fc:d5:44:7e:f0:3e:
         20:52:65:ae:ba:97:bf:93:11:c9:e6:bb:93:c5:60:d1:50:5f:
         25:98:86:eb:d1:2c:72:cf:d5:10:1a:2c:2c:85:c1:4b:19:be:
         a6:ba:e4:ab
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MzFE
QUFFMjIzQUM3NURBNkExNjM1MDUxQjg3QUFENDJDMzMxRDA0MB4XDTI2MDgxMzE1
MzkxMloXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoNUM4MkVEOTE3NjI5RjE1
NkEyQ0VBMUJFRTBEM0E5MTNDRUU1MUVFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKlcDyGDsYYSIvbxja0wCnSCmEQY4oqrLSNQlVxda7iuTED4IjS6
UIH6kmPE6xfeXDAfOQtmwJm3xvlL4mTozu6cn8Z4dOFI2DVLrNGBY3Dw8bHQP8bV
AeeZWd2mnc4fWBlr42X5zyeQSfBEJZEAaTd0DvnPVAxAI/HqKzi2jVobzzzmenV5
33h2UXOPSZeL4nJ9Bi6YyjQowERxrooLAUPZuXVkHj/n9uN7aJn9d0xZtslbmFEg
xSz0mQXNIoRiUEzZpXZqxz7vjBaMSQnFW+UrCGGDjepdWOeYtEvLvFRblqzqTTrK
LborjWR6Nzwv9pQq4J2YJvVU749At2i2NgkCAwEAAaOCAd8wggHbMB0GA1UdDgQW
BBRcgu2RdinxVqLOob7g06kTzuUe5DAfBgNVHSMEGDAWgBRjHariI6x12moWNQUb
h6rULDMdBDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0NjEvWXgycTRpT3NkZHBxRmpVRkc0ZXExQ3d6SFFRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWXgycTRpT3NkZHBxRmpVRkc0ZXEx
Q3d6SFFRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwNDYxL1hJTHRrWFlwOFZhaXpxRy00Tk9wRTg3bEh1US5yb2Ew
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAkAmAgETANBgkqhkiG9w0BAQsF
AAOCAQEAPWau/MKJtsve/qqP966LWlDWB0Z0gda30t0ylMgLpVzAY5ska9B13ATy
m+DkyNGMLoz9SMhI3M0p/TXFQI5q4bcSEapw8btVtSZcx4koBIdCySqolwbw6JNw
ZuCfYAADCwWpfQMyA2Wg5S/4k6gqk2b6XtlV9iCsO+49aTYGLxGdXrrSCiZCy1fR
KqGYtElltKnbwjpHsEBPyItfPP5J1BqWs8x7J3TCugQhcpC+Ndy9fjCYlro2WGyg
tSdmdt+KFP5tfjgQUJY/M+rNtEW3MROh/NVEfvA+IFJlrrqXv5MRyea7k8Vg0VBf
JZiG69Escs/VEBosLIXBSxm+prrkqw==
-----END CERTIFICATE-----
Generated at Fri Aug 21 07:23:37 2026 by rpki-client