Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39063/YVAb22aM1VDLQYZFy850lSgYF0g.roa
File:                     YVAb22aM1VDLQYZFy850lSgYF0g.roa (raw, json)
Hash identifier:          aMPHvk1K4lJ6Iju7LpIv72VvoGV9gGIrQq3SeJQcrvI=
Subject key identifier:   61:50:1B:DB:66:8C:D5:50:CB:41:86:45:CB:CE:74:95:28:18:17:48
Certificate issuer:       /CN=5B5E122F38DE6AFFB617B3DECDA6796BAF28ACC7
Certificate serial:       02
Authority key identifier: 5B:5E:12:2F:38:DE:6A:FF:B6:17:B3:DE:CD:A6:79:6B:AF:28:AC:C7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W14SLzjeav-2F7PezaZ5a68orMc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39063/YVAb22aM1VDLQYZFy850lSgYF0g.roa
Signing time:             Tue 27 Jan 2026 05:46:32 +0000
ROA not before:           Tue 27 Jan 2026 05:46:32 +0000
ROA not after:            Wed 27 Jan 2027 05:35:38 +0000
asID:                     131156
IP address blocks:        2001:df0:d740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39063/W14SLzjeav-2F7PezaZ5a68orMc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39063/W14SLzjeav-2F7PezaZ5a68orMc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W14SLzjeav-2F7PezaZ5a68orMc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5E122F38DE6AFFB617B3DECDA6796BAF28ACC7
        Validity
            Not Before: Jan 27 05:46:32 2026 GMT
            Not After : Jan 27 05:35:38 2027 GMT
        Subject: CN=61501BDB668CD550CB418645CBCE749528181748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:84:4e:79:ac:e0:7f:a1:ef:11:6f:a5:e0:49:
                    5c:09:48:fc:41:d3:41:76:f8:10:73:20:5a:ef:ba:
                    3e:95:5a:70:a6:5a:de:ac:23:f2:78:00:fb:eb:b4:
                    06:5b:bd:f5:52:57:1d:60:ab:4c:a3:dd:03:ea:9e:
                    b6:05:54:0e:8e:e2:4e:e4:a5:8a:2c:5e:cd:97:0f:
                    f4:d3:dc:05:6b:85:46:04:e2:85:04:36:79:0c:ce:
                    f7:4d:4e:cc:f6:d1:a5:4e:18:22:39:5a:ef:1a:e5:
                    a8:7d:e1:8a:77:80:ee:93:58:e8:d2:12:ba:a2:52:
                    4c:43:39:9d:ba:d1:9a:97:2e:56:92:99:b1:32:a4:
                    81:24:49:13:4d:eb:27:7b:bb:4b:d1:60:97:c5:c7:
                    79:25:a7:e0:fb:09:f2:41:10:e1:66:4b:f7:fb:ce:
                    86:09:42:6d:f0:a4:62:54:34:de:7e:93:22:b7:7b:
                    ce:74:3c:b3:cb:a6:61:7d:06:26:b3:8c:3d:11:38:
                    e9:e4:e3:7c:bc:93:54:64:56:34:9b:b4:df:d0:7b:
                    60:79:d3:e3:b5:d4:f8:81:21:15:0a:9d:a1:72:ef:
                    63:e9:c4:f0:6f:6d:23:a2:ff:87:7c:f6:1f:a6:a6:
                    41:c2:eb:fa:8a:a8:74:2c:3e:4c:99:08:36:f4:e4:
                    1a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:50:1B:DB:66:8C:D5:50:CB:41:86:45:CB:CE:74:95:28:18:17:48
            X509v3 Authority Key Identifier:
                keyid:5B:5E:12:2F:38:DE:6A:FF:B6:17:B3:DE:CD:A6:79:6B:AF:28:AC:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39063/W14SLzjeav-2F7PezaZ5a68orMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W14SLzjeav-2F7PezaZ5a68orMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39063/YVAb22aM1VDLQYZFy850lSgYF0g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:d740::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:a4:f5:4f:71:5e:24:f5:aa:32:d1:10:18:68:0a:0d:c1:43:
         21:1e:f6:c4:c8:9d:24:42:c7:7b:3f:00:b6:07:30:f8:fc:36:
         e5:d7:ea:9e:59:f4:30:eb:d7:c5:62:d5:35:b3:de:24:a6:26:
         58:33:fd:48:fd:33:27:3c:cb:c6:b5:a1:e4:4a:ac:a7:bd:72:
         dd:68:88:03:9b:1b:07:0d:10:71:58:61:17:66:ab:f8:85:88:
         0c:90:0b:01:30:f4:01:70:d6:70:4e:39:a4:76:e7:ca:69:ff:
         03:6c:2c:5b:8e:61:c3:6e:50:ba:f1:e4:c1:9a:27:02:87:51:
         0a:a6:14:7a:33:b8:10:fd:87:41:bd:4f:e3:ae:4b:9e:fb:95:
         df:99:4c:81:84:8b:38:81:73:85:31:86:66:22:48:36:d9:8f:
         ca:02:ae:7f:80:c5:32:c0:fb:86:1e:11:c2:48:00:a2:7c:b2:
         cc:2a:1a:81:20:49:69:0a:7b:30:35:f3:2f:13:48:33:2b:6b:
         86:33:0b:64:45:7a:31:8a:62:c7:05:f2:85:da:c1:c3:c3:4f:
         58:4a:18:43:d3:23:02:cd:7e:6f:59:07:73:af:09:5f:4d:36:
         84:1f:2f:5e:7c:a7:94:d4:f4:82:b6:b6:20:a0:22:8d:74:6b:
         1b:81:52:82
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QjVF
MTIyRjM4REU2QUZGQjYxN0IzREVDREE2Nzk2QkFGMjhBQ0M3MB4XDTI2MDEyNzA1
NDYzMloXDTI3MDEyNzA1MzUzOFowMzExMC8GA1UEAxMoNjE1MDFCREI2NjhDRDU1
MENCNDE4NjQ1Q0JDRTc0OTUyODE4MTc0ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN+ETnms4H+h7xFvpeBJXAlI/EHTQXb4EHMgWu+6PpVacKZa3qwj
8ngA++u0Blu99VJXHWCrTKPdA+qetgVUDo7iTuSliixezZcP9NPcBWuFRgTihQQ2
eQzO901OzPbRpU4YIjla7xrlqH3hineA7pNY6NISuqJSTEM5nbrRmpcuVpKZsTKk
gSRJE03rJ3u7S9Fgl8XHeSWn4PsJ8kEQ4WZL9/vOhglCbfCkYlQ03n6TIrd7znQ8
s8umYX0GJrOMPRE46eTjfLyTVGRWNJu039B7YHnT47XU+IEhFQqdoXLvY+nE8G9t
I6L/h3z2H6amQcLr+oqodCw+TJkINvTkGisCAwEAAaOCAiswggInMB0GA1UdDgQW
BBRhUBvbZozVUMtBhkXLznSVKBgXSDAfBgNVHSMEGDAWgBRbXhIvON5q/7YXs97N
pnlrryisxzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkwNjMvVzE0U0x6amVhdi0yRjdQZXphWjVhNjhvck1jLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVzE0U0x6amVhdi0yRjdQZXphWjVh
Njhvck1jLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzM5MDYzL1lWQWIyMmFNMVZETFFZWkZ5ODUwbFNnWUYwZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ3w10AwDQYJKoZIhvcNAQELBQADggEBAHOk9U9xXiT1qjLREBho
Cg3BQyEe9sTInSRCx3s/ALYHMPj8NuXX6p5Z9DDr18Vi1TWz3iSmJlgz/Uj9Myc8
y8a1oeRKrKe9ct1oiAObGwcNEHFYYRdmq/iFiAyQCwEw9AFw1nBOOaR258pp/wNs
LFuOYcNuULrx5MGaJwKHUQqmFHozuBD9h0G9T+OuS577ld+ZTIGEiziBc4UxhmYi
SDbZj8oCrn+AxTLA+4YeEcJIAKJ8sswqGoEgSWkKezA18y8TSDMra4YzC2RFejGK
YscF8oXawcPDT1hKGEPTIwLNfm9ZB3OvCV9NNoQfL158p5TU9IK2tiCgIo10axuB
UoI=
-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:20 2026 by rpki-client