Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/02uBHAWDvI-_RaGTqzrP0u4kb_g.roa
File:                     02uBHAWDvI-_RaGTqzrP0u4kb_g.roa (raw, json)
Hash identifier:          SZ8OHCtPmZ2mGOsNZJpJZScSkJT2kVXBCQUkHTJht0U=
Subject key identifier:   D3:6B:81:1C:05:83:BC:8F:BF:45:A1:93:AB:3A:CF:D2:EE:24:6F:F8
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       9E
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/02uBHAWDvI-_RaGTqzrP0u4kb_g.roa
Signing time:             Wed 29 Jul 2026 02:45:46 +0000
ROA not before:           Wed 29 Jul 2026 02:45:46 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        133.32.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 15:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 29 02:45:46 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=D36B811C0583BC8FBF45A193AB3ACFD2EE246FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:53:05:42:70:79:41:9f:03:35:45:4c:65:
                    fb:f2:a7:dd:b7:d1:98:fd:14:8e:5e:e7:19:55:63:
                    a5:f6:4d:e3:0e:64:ed:43:48:c3:89:fe:cb:51:4f:
                    d1:ac:22:95:04:8d:0d:60:59:d1:43:3e:33:e2:b0:
                    59:a5:35:6f:8c:52:64:62:15:cf:ab:e3:c2:c8:52:
                    07:db:32:8a:99:fc:2b:ce:7e:c9:81:c9:3f:70:7a:
                    a9:72:3d:bd:89:12:00:b4:06:43:a6:c1:6c:9b:1c:
                    9d:d2:0b:a2:94:b0:d9:dd:c4:50:8f:c1:48:0b:08:
                    24:7b:7d:a1:50:42:4d:3e:fc:ff:73:a2:50:de:8a:
                    97:42:fe:db:95:24:1b:59:ab:11:e9:c0:47:ec:a6:
                    a4:c3:d3:b7:43:8c:98:a2:cf:e7:7f:fe:1b:2c:1e:
                    ba:0d:d5:8e:93:58:cb:89:94:f4:1d:56:d6:37:04:
                    bb:8e:bd:a7:9d:2b:cc:d8:c5:a6:b1:17:ee:ee:54:
                    b8:2d:6b:73:0c:2d:84:5c:85:21:10:68:87:1f:b0:
                    ae:8a:ec:6f:61:4e:ee:1b:6c:db:49:d6:fe:ed:a4:
                    94:1f:3e:ad:15:e4:42:27:5c:95:57:65:ca:f5:78:
                    fd:0e:bf:28:8c:fa:e7:66:48:23:d1:c5:45:d5:07:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6B:81:1C:05:83:BC:8F:BF:45:A1:93:AB:3A:CF:D2:EE:24:6F:F8
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/02uBHAWDvI-_RaGTqzrP0u4kb_g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.32.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:7d:15:f2:9a:60:ca:bf:b9:b5:b3:82:ab:3e:c2:be:e4:b0:
         3f:b1:44:60:39:1f:35:3b:a9:e0:1b:b9:04:41:b9:b5:65:b1:
         94:e9:f8:43:91:71:61:fc:dd:ad:24:e3:09:4e:61:1a:03:6a:
         9f:ab:99:d3:0e:68:38:9c:f0:ba:5a:85:fa:eb:1c:1a:59:dc:
         65:40:9c:c3:c0:e6:80:8c:26:84:c7:d0:c3:b7:24:0d:84:c6:
         d4:61:4d:fe:b9:fc:47:28:87:0b:3b:db:b5:ec:64:06:5f:41:
         01:81:38:4a:4a:8c:aa:df:12:7a:b9:e3:4f:2d:ab:86:93:74:
         d0:45:80:bd:df:38:e4:fb:ae:80:a4:cf:d4:2e:22:d0:56:ae:
         e3:cc:53:bc:cc:a8:1c:d1:0d:01:7c:3c:e3:07:16:94:df:e2:
         08:92:10:aa:0a:d5:14:1e:a3:05:51:20:ff:88:cf:05:e7:b8:
         ba:7b:ac:04:94:d2:99:6c:86:55:12:70:13:e3:ae:4f:8d:3f:
         5a:15:64:e2:a0:9d:9a:d6:60:74:75:4a:3d:a2:e5:46:e7:3a:
         16:cd:74:5b:66:ae:97:a8:8b:7a:48:a5:86:55:9d:3f:a6:d1:
         13:f4:75:e0:c5:6f:ec:25:a9:39:c8:62:20:25:67:c9:f1:35:
         e3:ed:23:8b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDY3
ODkxQjk0RUQ5RTU1N0U3Nzk3NDZCRkEyM0UwM0QxRUQyMzRFRTAeFw0yNjA3Mjkw
MjQ1NDZaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQzNkI4MTFDMDU4M0JD
OEZCRjQ1QTE5M0FCM0FDRkQyRUUyNDZGRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWGFMFQnB5QZ8DNUVMZfvyp9230Zj9FI5e5xlVY6X2TeMOZO1D
SMOJ/stRT9GsIpUEjQ1gWdFDPjPisFmlNW+MUmRiFc+r48LIUgfbMoqZ/CvOfsmB
yT9weqlyPb2JEgC0BkOmwWybHJ3SC6KUsNndxFCPwUgLCCR7faFQQk0+/P9zolDe
ipdC/tuVJBtZqxHpwEfspqTD07dDjJiiz+d//hssHroN1Y6TWMuJlPQdVtY3BLuO
vaedK8zYxaaxF+7uVLgta3MMLYRchSEQaIcfsK6K7G9hTu4bbNtJ1v7tpJQfPq0V
5EInXJVXZcr1eP0OvyiM+udmSCPRxUXVB6s9AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU02uBHAWDvI+/RaGTqzrP0u4kb/gwHwYDVR0jBBgwFoAU1niRuU7Z5VfneXRr
+iPgPR7SNO4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ1Mi8xbmlSdVU3WjVWZm5lWFJyLWlQZ1BSN1NOTzQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8xbmlSdVU3WjVWZm5lWFJyLWlQZ1BS
N1NOTzQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNDUyLzAydUJIQVdEdkktX1JhR1RxenJQMHU0a2JfZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASFINAwDQYJKoZIhvcNAQELBQADggEB
AJZ9FfKaYMq/ubWzgqs+wr7ksD+xRGA5HzU7qeAbuQRBubVlsZTp+EORcWH83a0k
4wlOYRoDap+rmdMOaDic8LpahfrrHBpZ3GVAnMPA5oCMJoTH0MO3JA2ExtRhTf65
/Ecohws727XsZAZfQQGBOEpKjKrfEnq5408tq4aTdNBFgL3fOOT7roCkz9QuItBW
ruPMU7zMqBzRDQF8POMHFpTf4giSEKoK1RQeowVRIP+IzwXnuLp7rASU0plshlUS
cBPjrk+NP1oVZOKgnZrWYHR1Sj2i5UbnOhbNdFtmrpeoi3pIpYZVnT+m0RP0deDF
b+wlqTnIYiAlZ8nxNePtI4s=
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:13 2026 by rpki-client