Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/6OwqxZD8_FqJV0B_1PXJ5WgitUI.roa
File:                     6OwqxZD8_FqJV0B_1PXJ5WgitUI.roa (raw, json)
Hash identifier:          wXkO4ZSObLKb1k1ZfuEVOcwF7mJECqCeBkogfeaxJNM=
Subject key identifier:   E8:EC:2A:C5:90:FC:FC:5A:89:57:40:7F:D4:F5:C9:E5:68:22:B5:42
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       52
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/6OwqxZD8_FqJV0B_1PXJ5WgitUI.roa
Signing time:             Tue 19 May 2026 05:31:18 +0000
ROA not before:           Tue 19 May 2026 05:31:18 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     17506
IP address blocks:        221.240.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 19 05:31:18 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=E8EC2AC590FCFC5A8957407FD4F5C9E56822B542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c1:a4:48:39:2d:02:39:66:47:37:ad:88:6b:
                    19:2f:bf:80:70:e8:d1:7d:cd:e8:55:93:e7:dd:eb:
                    ff:38:51:ad:3a:ba:b3:dd:76:7e:ea:4c:d3:76:e3:
                    fa:c7:6d:e8:70:7e:34:37:9a:25:e9:85:77:1e:8b:
                    45:31:49:93:ca:ec:99:1c:29:f8:83:f2:a9:22:5a:
                    fd:5a:71:c3:8e:2b:c0:b8:1b:22:b4:4b:68:db:91:
                    9a:bb:a0:09:53:e5:23:83:0b:74:9e:2d:5b:ad:d8:
                    c8:68:c8:65:bb:2d:d5:ac:c0:3e:c6:9f:38:0a:f5:
                    da:97:b1:6b:96:13:62:f1:63:06:49:5e:12:d1:ad:
                    e7:62:59:be:c3:6e:18:2d:dc:00:db:6f:e0:c9:d2:
                    1f:88:96:cd:ca:30:a6:fe:9d:22:5f:d6:dd:a2:12:
                    54:29:81:28:fc:fb:f0:e1:e8:02:94:63:d9:d2:ec:
                    30:bb:5a:d2:58:af:a5:fb:19:25:29:2d:1b:a2:8a:
                    75:c8:92:3f:ad:ca:44:ce:c8:bc:a8:44:0b:36:8e:
                    c8:ed:15:ac:6a:c3:1c:a3:62:60:81:e4:85:55:12:
                    36:c3:ca:3a:60:1d:0e:76:aa:77:85:e8:56:4a:e3:
                    fa:cc:f3:a2:3b:06:40:ef:78:1a:09:ff:34:f7:d0:
                    83:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EC:2A:C5:90:FC:FC:5A:89:57:40:7F:D4:F5:C9:E5:68:22:B5:42
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/6OwqxZD8_FqJV0B_1PXJ5WgitUI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.240.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         45:90:b4:37:6d:46:d4:61:fd:e1:d5:a9:91:38:a6:08:6c:b4:
         99:df:e3:92:91:1e:60:99:6a:4f:74:92:d4:e4:20:6f:56:ae:
         41:48:43:88:c7:74:cc:e2:08:c4:dd:50:05:62:53:89:e1:94:
         f1:c2:7e:a1:ed:76:7c:f9:02:47:1d:9f:52:c2:58:8a:9c:a3:
         03:71:06:96:c2:83:3d:b6:83:92:06:97:60:18:6a:24:f5:10:
         14:33:07:fb:74:29:2b:f4:7a:f1:05:ce:85:0f:2c:8f:68:f6:
         05:33:50:34:b3:4d:f8:1b:b9:2a:c1:4c:ae:ba:d6:87:eb:04:
         cb:d3:7e:74:18:4f:74:e9:37:4b:b3:49:f8:df:93:55:9e:96:
         0f:a8:ce:7e:e2:43:e7:68:a9:6f:59:3a:bf:c6:a7:0d:e0:40:
         b0:f5:11:29:b2:00:f2:4d:74:9b:08:ba:36:4f:59:31:6e:3e:
         9a:aa:4f:76:77:f7:a9:c5:70:ce:fb:8e:1d:c4:9f:6e:c8:4e:
         ab:9a:19:fc:35:c4:33:48:2d:6e:89:19:ba:83:1c:25:d4:a6:
         b4:6b:1f:3a:5b:49:43:21:11:75:ae:c8:11:5c:90:c1:4d:f3:
         61:2e:2e:74:43:dd:5f:ff:27:ba:7a:d5:54:98:59:1f:f6:95:
         20:4f:04:20
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDUxOTA1
MzExOFoXDTI3MDUxNTAxMzAwMlowMzExMC8GA1UEAxMoRThFQzJBQzU5MEZDRkM1
QTg5NTc0MDdGRDRGNUM5RTU2ODIyQjU0MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM7BpEg5LQI5Zkc3rYhrGS+/gHDo0X3N6FWT593r/zhRrTq6s912
fupM03bj+sdt6HB+NDeaJemFdx6LRTFJk8rsmRwp+IPyqSJa/Vpxw44rwLgbIrRL
aNuRmrugCVPlI4MLdJ4tW63YyGjIZbst1azAPsafOAr12pexa5YTYvFjBkleEtGt
52JZvsNuGC3cANtv4MnSH4iWzcowpv6dIl/W3aISVCmBKPz78OHoApRj2dLsMLta
0livpfsZJSktG6KKdciSP63KRM7IvKhECzaOyO0VrGrDHKNiYIHkhVUSNsPKOmAd
Dnaqd4XoVkrj+szzojsGQO94Ggn/NPfQg9cCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBTo7CrFkPz8WolXQH/U9cnlaCK1QjAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvNk93cXhaRDhfRnFKVjBCXzFQWEo1V2dpdFVJLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDBN3wMA0GCSqGSIb3DQEBCwUAA4IBAQBF
kLQ3bUbUYf3h1amROKYIbLSZ3+OSkR5gmWpPdJLU5CBvVq5BSEOIx3TM4gjE3VAF
YlOJ4ZTxwn6h7XZ8+QJHHZ9SwliKnKMDcQaWwoM9toOSBpdgGGok9RAUMwf7dCkr
9HrxBc6FDyyPaPYFM1A0s034G7kqwUyuutaH6wTL0350GE906TdLs0n435NVnpYP
qM5+4kPnaKlvWTq/xqcN4ECw9REpsgDyTXSbCLo2T1kxbj6aqk92d/epxXDO+44d
xJ9uyE6rmhn8NcQzSC1uiRm6gxwl1Ka0ax86W0lDIRF1rsgRXJDBTfNhLi50Q91f
/ye6etVUmFkf9pUgTwQg
-----END CERTIFICATE-----
Generated at Sat May 23 05:48:14 2026 by rpki-client