Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/wfYksi7fAdZeV8fta_xCv8qzZY8.roa
File:                     wfYksi7fAdZeV8fta_xCv8qzZY8.roa (raw, json)
Hash identifier:          7ftL/6O9GFn4m63pVIKfbKuWtsYtdGaZgYa4oHNGAEU=
Subject key identifier:   C1:F6:24:B2:2E:DF:01:D6:5E:57:C7:ED:6B:FC:42:BF:CA:B3:65:8F
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       D4
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/wfYksi7fAdZeV8fta_xCv8qzZY8.roa
Signing time:             Wed 14 Oct 2026 00:06:16 +0000
ROA not before:           Wed 14 Oct 2026 00:06:16 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        211.125.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 08:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Oct 14 00:06:16 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=C1F624B22EDF01D65E57C7ED6BFC42BFCAB3658F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:c0:51:a7:46:34:16:ff:77:ce:c6:6b:72:
                    28:36:cc:33:e9:22:f7:7c:d1:bf:b2:a2:47:3d:a5:
                    93:42:10:7d:c7:dc:42:29:04:82:e7:81:ad:2f:49:
                    e5:c7:ea:11:99:69:8e:ea:f2:6d:b4:79:ac:69:ef:
                    33:0d:70:04:52:22:af:d0:56:94:14:58:86:bc:bc:
                    20:3f:ea:2e:19:41:0c:5b:4a:b7:d6:57:02:0f:47:
                    f2:20:1f:0f:8b:c3:79:02:d8:9c:4b:23:6e:65:5c:
                    86:48:55:3a:d1:29:88:c3:88:d7:f8:02:11:66:a7:
                    99:13:53:f3:71:89:45:b7:4a:0b:d0:a8:b8:7f:8f:
                    f9:e0:16:e8:54:a5:85:62:74:98:00:46:c3:94:50:
                    3e:b0:87:2a:a7:85:b5:ec:37:73:bf:5d:48:8a:89:
                    14:56:b6:a2:ca:5b:a3:bb:4d:3d:05:d7:61:9d:ec:
                    dd:a1:74:50:3b:ba:79:f6:33:69:35:6d:f2:da:ef:
                    8d:3b:5f:97:10:0a:93:f5:9a:33:9d:4f:39:0d:11:
                    bb:be:b7:d2:32:3a:98:ab:cf:3d:72:6a:6a:31:98:
                    10:db:94:75:a1:64:1c:e5:58:c0:77:18:2d:78:4b:
                    74:dd:ed:c6:23:f4:a0:1b:1e:5f:f4:ff:da:e4:5a:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F6:24:B2:2E:DF:01:D6:5E:57:C7:ED:6B:FC:42:BF:CA:B3:65:8F
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/wfYksi7fAdZeV8fta_xCv8qzZY8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:c5:65:df:06:dc:ef:9c:20:a6:3b:2b:7e:7a:39:05:88:6b:
         e1:ee:55:67:94:ef:d8:16:ec:67:4b:e2:6c:47:a4:71:7b:46:
         2a:6a:70:dd:18:d2:74:e5:01:2a:27:e7:ad:55:f6:c3:d4:96:
         3e:7a:9f:b0:36:72:96:af:cd:1f:69:08:88:84:fb:bd:9e:aa:
         49:be:9a:6c:2d:58:a2:1f:aa:79:b1:3c:5b:48:87:61:28:05:
         bf:e2:b8:bd:b2:26:0c:bc:01:c0:e5:75:51:5a:2b:bc:54:0f:
         4a:59:0f:2a:8b:75:8c:38:e0:33:03:fe:10:24:96:17:f5:7c:
         82:46:84:66:01:85:05:39:de:ee:a5:a7:c3:e7:e4:36:f7:0e:
         2f:21:48:36:1b:3b:be:8e:10:9e:7a:19:4b:ee:7d:c8:5e:9d:
         c2:8f:2b:81:da:2b:60:2e:4e:d5:c4:1e:66:73:50:18:34:f6:
         9a:1c:a0:14:fa:7d:37:84:05:5e:5c:6a:3b:89:6d:6a:60:78:
         87:82:0f:c2:6d:6f:35:90:dc:77:1a:f0:87:a1:9c:51:76:b9:
         04:ec:68:d7:b9:d1:bd:b1:c7:c6:a4:85:f3:23:9a:06:01:75:
         83:b6:7b:9e:81:2d:99:99:c5:1f:bd:7b:46:72:46:7c:fa:36:
         b4:ef:ad:07
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw
NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjEwMTQw
MDA2MTZaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMxRjYyNEIyMkVERjAx
RDY1RTU3QzdFRDZCRkM0MkJGQ0FCMzY1OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCtsBRp0Y0Fv93zsZrcig2zDPpIvd80b+yokc9pZNCEH3H3EIp
BILnga0vSeXH6hGZaY7q8m20eaxp7zMNcARSIq/QVpQUWIa8vCA/6i4ZQQxbSrfW
VwIPR/IgHw+Lw3kC2JxLI25lXIZIVTrRKYjDiNf4AhFmp5kTU/NxiUW3SgvQqLh/
j/ngFuhUpYVidJgARsOUUD6whyqnhbXsN3O/XUiKiRRWtqLKW6O7TT0F12Gd7N2h
dFA7unn2M2k1bfLa7407X5cQCpP1mjOdTzkNEbu+t9IyOpirzz1yamoxmBDblHWh
ZBzlWMB3GC14S3Td7cYj9KAbHl/0/9rkWtmlAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUwfYksi7fAdZeV8fta/xCv8qzZY8wHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn
opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt
YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzkzL3dmWWtzaTdmQWRaZVY4ZnRhX3hDdjhxelpZOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTfXIwDQYJKoZIhvcNAQELBQADggEB
ADXFZd8G3O+cIKY7K356OQWIa+HuVWeU79gW7GdL4mxHpHF7RipqcN0Y0nTlASon
561V9sPUlj56n7A2cpavzR9pCIiE+72eqkm+mmwtWKIfqnmxPFtIh2EoBb/iuL2y
Jgy8AcDldVFaK7xUD0pZDyqLdYw44DMD/hAklhf1fIJGhGYBhQU53u6lp8Pn5Db3
Di8hSDYbO76OEJ56GUvufchencKPK4HaK2AuTtXEHmZzUBg09pocoBT6fTeEBV5c
ajuJbWpgeIeCD8JtbzWQ3Hca8IehnFF2uQTsaNe50b2xx8akhfMjmgYBdYO2e56B
LZmZxR+9e0ZyRnz6NrTvrQc=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:53 2026 by rpki-client