Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/XCXgO_Pgfvzr0Z2wnO1_iWpbmns.roa
File:                     XCXgO_Pgfvzr0Z2wnO1_iWpbmns.roa (raw, json)
Hash identifier:          7PuppYffdQLCtAgY00bufnptNdwnLHTyPTUMB19yEcI=
Subject key identifier:   5C:25:E0:3B:F3:E0:7E:FC:EB:D1:9D:B0:9C:ED:7F:89:6A:5B:9A:7B
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       D0
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XCXgO_Pgfvzr0Z2wnO1_iWpbmns.roa
Signing time:             Tue 13 Oct 2026 23:58:25 +0000
ROA not before:           Tue 13 Oct 2026 23:58:25 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        211.125.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 13:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Oct 13 23:58:25 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=5C25E03BF3E07EFCEBD19DB09CED7F896A5B9A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:1d:ae:ed:39:09:0f:95:29:83:db:fd:04:
                    29:37:2c:b6:01:e7:e4:21:a0:03:79:b4:eb:0d:40:
                    92:85:67:be:ec:7d:87:8b:68:31:10:22:eb:84:f5:
                    96:81:c9:e8:14:3e:d3:a4:8b:31:44:bb:6f:74:f3:
                    49:a3:f7:db:0d:8f:5c:f2:18:73:79:c1:c0:ac:b2:
                    92:c8:ff:66:61:c3:00:94:92:5d:37:f4:80:12:70:
                    12:57:b4:61:b0:d3:fc:27:bd:81:a0:ed:54:a3:f7:
                    c0:65:ef:98:e2:b1:15:36:63:57:21:11:18:cc:b8:
                    89:9a:bf:ed:62:a6:0a:2b:9f:bc:64:19:ec:e7:46:
                    0a:97:73:57:b0:bd:6f:c5:5a:19:62:b3:93:7e:ac:
                    4f:a9:43:31:e9:d0:48:99:1c:6f:23:af:56:cf:da:
                    2e:6a:bc:77:a5:39:c8:a6:d7:9f:f1:c3:da:74:f1:
                    6f:4a:3b:72:dc:6e:a6:0e:95:d8:b4:61:aa:1b:d8:
                    ac:20:19:c0:43:65:33:5c:0e:e7:51:66:50:89:29:
                    53:14:53:a0:2f:17:74:8b:df:66:cb:a2:fd:08:1f:
                    6b:b9:1f:2b:11:c7:8d:85:a1:70:fb:20:f4:2a:95:
                    78:b3:8a:5f:76:8b:e2:78:c0:ab:64:9f:04:9e:82:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:25:E0:3B:F3:E0:7E:FC:EB:D1:9D:B0:9C:ED:7F:89:6A:5B:9A:7B
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XCXgO_Pgfvzr0Z2wnO1_iWpbmns.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a5:35:d1:38:ff:2f:0c:c1:05:d2:e1:d5:c8:be:65:4d:0f:
         48:b6:46:e6:e2:b3:ab:5e:5a:e8:96:9c:5f:f9:dd:fc:0b:ee:
         8f:63:8a:8e:87:4c:2b:96:c7:f6:df:17:7a:de:aa:63:84:20:
         1b:60:16:d7:a8:f9:45:c1:ac:7b:76:69:34:09:c3:c1:13:ab:
         83:4a:b8:b0:2e:de:fd:cb:b4:32:d1:63:ac:03:ac:93:12:ac:
         14:68:df:6f:1f:46:ff:73:89:93:36:a8:61:17:54:22:85:ce:
         da:aa:e1:20:73:5c:5c:fc:cf:9f:2d:fc:32:8e:0c:00:b1:d7:
         ef:1d:a2:95:38:1e:b8:e6:f6:aa:02:28:a6:03:56:9c:b7:1b:
         00:9c:72:e7:ee:c9:a3:29:5b:f4:31:42:51:2e:bc:9a:0b:83:
         5f:6f:83:11:54:36:1b:d4:5d:05:b8:b5:36:55:17:d4:88:ec:
         7d:72:b4:da:55:ab:f5:08:8e:5a:58:fe:c8:62:3c:91:3f:ee:
         35:b5:b0:bf:7f:7b:a3:fa:6f:c6:d8:32:d2:42:14:86:d5:2d:
         3a:b5:0b:af:ca:0c:97:7b:2a:20:2b:e0:ad:63:dd:2a:e0:26:
         5b:f5:67:13:31:1a:ee:5e:cf:2e:46:e2:aa:67:ef:8e:7d:c3:
         92:51:b2:22
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw
NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjEwMTMy
MzU4MjVaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVDMjVFMDNCRjNFMDdF
RkNFQkQxOURCMDlDRUQ3Rjg5NkE1QjlBN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2dx2u7TkJD5Upg9v9BCk3LLYB5+QhoAN5tOsNQJKFZ77sfYeL
aDEQIuuE9ZaByegUPtOkizFEu29080mj99sNj1zyGHN5wcCsspLI/2ZhwwCUkl03
9IAScBJXtGGw0/wnvYGg7VSj98Bl75jisRU2Y1chERjMuImav+1ipgorn7xkGezn
RgqXc1ewvW/FWhlis5N+rE+pQzHp0EiZHG8jr1bP2i5qvHelOcim15/xw9p08W9K
O3LcbqYOldi0Yaob2KwgGcBDZTNcDudRZlCJKVMUU6AvF3SL32bLov0IH2u5HysR
x42FoXD7IPQqlXizil92i+J4wKtknwSegoGFAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUXCXgO/Pgfvzr0Z2wnO1/iWpbmnswHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn
opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt
YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzkzL1hDWGdPX1BnZnZ6cjBaMnduTzFfaVdwYm1ucy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTfWwwDQYJKoZIhvcNAQELBQADggEB
ACOlNdE4/y8MwQXS4dXIvmVND0i2Rubis6teWuiWnF/53fwL7o9jio6HTCuWx/bf
F3reqmOEIBtgFteo+UXBrHt2aTQJw8ETq4NKuLAu3v3LtDLRY6wDrJMSrBRo328f
Rv9ziZM2qGEXVCKFztqq4SBzXFz8z58t/DKODACx1+8dopU4Hrjm9qoCKKYDVpy3
GwCccufuyaMpW/QxQlEuvJoLg19vgxFUNhvUXQW4tTZVF9SI7H1ytNpVq/UIjlpY
/shiPJE/7jW1sL9/e6P6b8bYMtJCFIbVLTq1C6/KDJd7KiAr4K1j3SrgJlv1ZxMx
Gu5ezy5G4qpn7459w5JRsiI=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:47 2026 by rpki-client