Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/l7iVe-vsiUpqBz-7gQnYfEMwM-g.roa
File:                     l7iVe-vsiUpqBz-7gQnYfEMwM-g.roa (raw, json)
Hash identifier:          OMd/oMm+FXlHpxymSY6kpIzEvkUeheL7CSPz8XDQcCE=
Subject key identifier:   97:B8:95:7B:EB:EC:89:4A:6A:07:3F:BB:81:09:D8:7C:43:30:33:E8
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       D8
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/l7iVe-vsiUpqBz-7gQnYfEMwM-g.roa
Signing time:             Wed 14 Oct 2026 00:10:29 +0000
ROA not before:           Wed 14 Oct 2026 00:10:29 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        211.125.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 15:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Oct 14 00:10:29 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=97B8957BEBEC894A6A073FBB8109D87C433033E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:e9:4b:0c:ec:c3:eb:ec:f2:eb:93:c2:2f:
                    58:46:98:e8:4d:fd:9c:91:ce:3a:e6:61:21:8b:5d:
                    be:c9:d4:1c:51:a0:f9:0c:60:ce:83:72:b5:3f:ed:
                    a2:6e:48:7c:67:fc:26:ce:26:f2:af:ee:fc:57:36:
                    7d:6b:ff:9b:ee:8c:6b:30:1a:63:93:42:dd:11:a1:
                    1c:32:d8:ab:25:f2:f4:74:a8:2a:ac:d9:ad:49:6b:
                    eb:87:aa:2e:3d:33:9f:46:3c:09:14:09:6e:2b:00:
                    d7:c6:4c:e2:3a:80:8d:23:1d:20:69:65:3d:cc:d3:
                    2f:c3:7a:1d:e6:9d:17:69:e5:2a:d7:cf:51:70:0b:
                    42:29:a0:04:63:8a:02:c4:ac:9e:a5:e6:94:5b:20:
                    9b:05:18:8d:c4:1e:36:c9:c3:d6:94:4d:a8:4d:c9:
                    b6:6f:8d:9b:0d:7f:6c:56:04:5e:89:55:10:4f:8c:
                    6c:4b:7a:16:9a:cf:31:ae:2b:07:82:7a:a6:cb:34:
                    e5:4f:5c:22:45:c7:26:54:ca:0a:f8:29:ae:bd:de:
                    b9:a2:46:e7:47:bb:10:7d:2e:4f:17:20:da:92:da:
                    77:23:56:ea:89:93:2a:91:8b:d8:dd:7f:d7:2b:45:
                    01:cd:12:1a:2d:97:d5:c1:64:29:5c:b0:3a:15:21:
                    6e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B8:95:7B:EB:EC:89:4A:6A:07:3F:BB:81:09:D8:7C:43:30:33:E8
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/l7iVe-vsiUpqBz-7gQnYfEMwM-g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:64:76:2c:d3:8c:2c:c8:73:2e:a3:e8:88:1b:10:27:e8:88:
         da:cf:a0:7b:ca:74:2a:6e:d6:b2:de:3f:ef:05:29:e4:15:cd:
         f2:0a:50:90:a5:28:39:b5:ab:eb:8e:57:d9:83:8c:2f:4a:47:
         01:16:a9:92:2d:f8:4b:f5:a6:10:94:91:21:f0:54:2c:3f:f8:
         23:b7:ef:ab:8a:58:30:19:eb:78:3a:6e:53:f9:84:c0:58:9d:
         d7:8b:48:02:b6:1f:11:76:b0:f1:33:52:42:2b:7e:0a:31:d8:
         1f:d8:0b:7a:f4:7a:e7:fb:14:ee:4c:be:bf:5e:ff:ec:59:22:
         c4:0d:6b:4c:c4:4b:3e:c6:61:f5:d2:8d:b3:52:ed:fb:ab:b8:
         28:16:bf:82:20:99:6f:22:ab:1d:ac:aa:05:31:da:a0:21:4b:
         19:57:75:d5:fb:c2:a8:3f:19:0a:85:bb:ab:fd:71:c9:cf:2f:
         c9:a3:1d:00:fe:4f:bf:26:0e:9a:bc:0c:0c:34:ba:f1:e6:58:
         ea:55:b2:86:29:e1:b1:6c:08:af:bd:ef:86:47:a4:46:5e:d1:
         ec:53:5b:33:ee:1c:67:d8:bb:b7:7d:a5:40:19:d4:7c:ab:69:
         4f:6a:b6:37:05:e3:ec:8f:a0:9f:fd:41:a3:93:50:f1:07:33:
         34:c5:a7:58
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw
NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjEwMTQw
MDEwMjlaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk3Qjg5NTdCRUJFQzg5
NEE2QTA3M0ZCQjgxMDlEODdDNDMzMDMzRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGCulLDOzD6+zy65PCL1hGmOhN/ZyRzjrmYSGLXb7J1BxRoPkM
YM6DcrU/7aJuSHxn/CbOJvKv7vxXNn1r/5vujGswGmOTQt0RoRwy2Ksl8vR0qCqs
2a1Ja+uHqi49M59GPAkUCW4rANfGTOI6gI0jHSBpZT3M0y/Deh3mnRdp5SrXz1Fw
C0IpoARjigLErJ6l5pRbIJsFGI3EHjbJw9aUTahNybZvjZsNf2xWBF6JVRBPjGxL
ehaazzGuKweCeqbLNOVPXCJFxyZUygr4Ka693rmiRudHuxB9Lk8XINqS2ncjVuqJ
kyqRi9jdf9crRQHNEhotl9XBZClcsDoVIW5fAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUl7iVe+vsiUpqBz+7gQnYfEMwM+gwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn
opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt
YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzkzL2w3aVZlLXZzaVVwcUJ6LTdnUW5ZZkVNd00tZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTfXYwDQYJKoZIhvcNAQELBQADggEB
AFRkdizTjCzIcy6j6IgbECfoiNrPoHvKdCpu1rLeP+8FKeQVzfIKUJClKDm1q+uO
V9mDjC9KRwEWqZIt+Ev1phCUkSHwVCw/+CO376uKWDAZ63g6blP5hMBYndeLSAK2
HxF2sPEzUkIrfgox2B/YC3r0euf7FO5Mvr9e/+xZIsQNa0zESz7GYfXSjbNS7fur
uCgWv4IgmW8iqx2sqgUx2qAhSxlXddX7wqg/GQqFu6v9ccnPL8mjHQD+T78mDpq8
DAw0uvHmWOpVsoYp4bFsCK+974ZHpEZe0exTWzPuHGfYu7d9pUAZ1HyraU9qtjcF
4+yPoJ/9QaOTUPEHMzTFp1g=
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:17 2026 by rpki-client