Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/tUJ1Rk-D6JEbIp0n6HTM1D-AfC0.roa
File:                     tUJ1Rk-D6JEbIp0n6HTM1D-AfC0.roa (raw, json)
Hash identifier:          ZYiwIH1PQdpiCOBV42FhG4m2UBtBqqxU5EA9HIZv4+E=
Subject key identifier:   B5:42:75:46:4F:83:E8:91:1B:22:9D:27:E8:74:CC:D4:3F:80:7C:2D
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       A9
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/tUJ1Rk-D6JEbIp0n6HTM1D-AfC0.roa
Signing time:             Wed 29 Jul 2026 06:41:31 +0000
ROA not before:           Wed 29 Jul 2026 06:41:31 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        124.110.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 15:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 29 06:41:31 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=B54275464F83E8911B229D27E874CCD43F807C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a2:ff:69:8f:20:65:e1:8e:7c:98:c8:b1:57:
                    ef:28:b2:fe:2d:31:81:f6:d1:8e:13:de:01:3b:cc:
                    ba:96:38:f1:3d:80:be:67:4b:16:cf:0e:88:fc:d2:
                    7e:08:b2:e7:f2:7d:f2:97:4f:6c:0c:82:d6:46:4a:
                    1d:c2:91:58:58:ad:a9:df:d7:b1:9f:99:69:12:b6:
                    3d:1b:39:76:ed:19:52:90:87:7f:69:b6:57:be:32:
                    bf:0c:a4:4f:f8:b6:1b:1a:0e:7a:51:a7:27:18:26:
                    a1:23:dc:04:6d:42:4c:6e:87:1a:0a:60:95:ca:2b:
                    47:7a:b0:62:44:c8:56:45:6c:59:a8:46:0d:89:5a:
                    7a:1c:c1:7b:95:f2:6d:92:b9:bd:3e:9c:0e:39:1c:
                    54:dc:38:4e:bb:c2:7d:57:5d:bd:89:a9:9a:db:3f:
                    bc:cd:dc:62:c9:89:fa:8d:3f:ca:77:80:dc:66:53:
                    31:78:39:d1:b2:6d:5d:04:14:71:65:01:bf:5f:26:
                    ae:30:69:f2:17:47:3d:f6:87:db:7a:2d:54:92:c1:
                    fb:99:eb:9d:14:f4:a5:a2:12:a6:26:60:2d:d2:b2:
                    2a:42:60:15:9b:ce:db:ac:d0:d2:e6:bb:cd:77:94:
                    3e:e0:ec:ca:21:bc:5f:6f:a4:de:2f:ee:07:16:4f:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:42:75:46:4F:83:E8:91:1B:22:9D:27:E8:74:CC:D4:3F:80:7C:2D
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/tUJ1Rk-D6JEbIp0n6HTM1D-AfC0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.110.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0d:e3:a1:0d:21:6f:f9:64:fb:ce:56:6f:8f:72:0f:e6:c4:b9:
         24:15:aa:c2:79:fa:6a:f0:12:80:f5:30:f3:5f:bf:62:59:3a:
         dc:82:f1:a7:c9:9a:0c:b1:ed:25:36:d2:45:5b:c8:b6:b6:91:
         c9:4c:a8:26:2f:e3:61:b0:dc:be:7d:84:65:88:dd:fb:41:56:
         9c:b7:ef:53:61:a8:2f:1b:ae:2a:b7:0d:74:4b:07:d5:52:67:
         5f:47:d1:36:c7:dc:04:c4:00:b5:43:05:b5:24:f3:01:dd:bd:
         22:fa:09:f9:3a:90:2a:d9:d7:7d:7d:1a:07:5f:62:86:a4:f8:
         87:39:e8:50:6a:89:4f:22:1e:38:bf:cc:44:5e:04:40:b3:cc:
         ec:c5:34:9d:68:31:28:be:ca:0b:e6:e2:c2:e6:b5:23:91:9c:
         6c:79:03:b4:55:33:46:5a:ba:54:17:8a:50:5b:ce:fc:ad:55:
         41:fe:ec:cc:b2:45:b3:ec:d3:0e:11:94:b1:52:be:2e:43:1e:
         34:7b:d9:44:e8:8a:46:4b:3a:a1:2f:f4:1d:3c:c8:2d:2f:95:
         e1:d3:34:1f:f1:da:42:56:3d:b8:b2:87:9c:3a:3b:6b:a2:22:
         cd:4c:f3:77:64:c6:f3:e9:4b:62:36:60:ad:04:9b:af:d1:1b:
         a8:44:ef:86
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDY3
ODkxQjk0RUQ5RTU1N0U3Nzk3NDZCRkEyM0UwM0QxRUQyMzRFRTAeFw0yNjA3Mjkw
NjQxMzFaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI1NDI3NTQ2NEY4M0U4
OTExQjIyOUQyN0U4NzRDQ0Q0M0Y4MDdDMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgov9pjyBl4Y58mMixV+8osv4tMYH20Y4T3gE7zLqWOPE9gL5n
SxbPDoj80n4IsufyffKXT2wMgtZGSh3CkVhYranf17GfmWkStj0bOXbtGVKQh39p
tle+Mr8MpE/4thsaDnpRpycYJqEj3ARtQkxuhxoKYJXKK0d6sGJEyFZFbFmoRg2J
WnocwXuV8m2Sub0+nA45HFTcOE67wn1XXb2JqZrbP7zN3GLJifqNP8p3gNxmUzF4
OdGybV0EFHFlAb9fJq4wafIXRz32h9t6LVSSwfuZ650U9KWiEqYmYC3SsipCYBWb
ztus0NLmu813lD7g7MohvF9vpN4v7gcWT4ENAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUtUJ1Rk+D6JEbIp0n6HTM1D+AfC0wHwYDVR0jBBgwFoAU1niRuU7Z5VfneXRr
+iPgPR7SNO4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ1Mi8xbmlSdVU3WjVWZm5lWFJyLWlQZ1BSN1NOTzQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8xbmlSdVU3WjVWZm5lWFJyLWlQZ1BS
N1NOTzQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNDUyL3RVSjFSay1ENkpFYklwMG42SFRNMUQtQWZDMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV8buAwDQYJKoZIhvcNAQELBQADggEB
AA3joQ0hb/lk+85Wb49yD+bEuSQVqsJ5+mrwEoD1MPNfv2JZOtyC8afJmgyx7SU2
0kVbyLa2kclMqCYv42Gw3L59hGWI3ftBVpy371NhqC8briq3DXRLB9VSZ19H0TbH
3ATEALVDBbUk8wHdvSL6Cfk6kCrZ1319GgdfYoak+Ic56FBqiU8iHji/zEReBECz
zOzFNJ1oMSi+ygvm4sLmtSORnGx5A7RVM0ZaulQXilBbzvytVUH+7MyyRbPs0w4R
lLFSvi5DHjR72UToikZLOqEv9B08yC0vleHTNB/x2kJWPbiyh5w6O2uiIs1M83dk
xvPpS2I2YK0Em6/RG6hE74Y=
-----END CERTIFICATE-----
Generated at Wed Aug 19 19:30:38 2026 by rpki-client