Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/78InQA2vMMvfLqv1rtYQV0Hr9Ew.roa
File:                     78InQA2vMMvfLqv1rtYQV0Hr9Ew.roa (raw, json)
Hash identifier:          pqcvq42TMrRykh13fTNO0WrtvMXlWMogZ5sWWMwWnhg=
Subject key identifier:   EF:C2:27:40:0D:AF:30:CB:DF:2E:AB:F5:AE:D6:10:57:41:EB:F4:4C
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       A7
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/78InQA2vMMvfLqv1rtYQV0Hr9Ew.roa
Signing time:             Tue 31 Mar 2026 07:37:35 +0000
ROA not before:           Tue 31 Mar 2026 07:37:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     32787
IP address blocks:        61.211.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 03:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Mar 31 07:37:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EFC227400DAF30CBDF2EABF5AED6105741EBF44C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:e3:28:0f:fb:ee:6c:59:0d:27:5d:c3:09:
                    d3:6c:4d:96:34:6b:fc:93:45:07:9d:25:fc:ae:4f:
                    f0:7d:92:78:10:6d:78:2c:a8:6c:d0:d3:23:c0:a0:
                    6e:4b:ed:1c:35:42:c3:f3:f8:c6:52:e4:fb:79:5d:
                    ef:1b:d8:92:65:41:3a:e2:ab:3b:cb:49:00:51:ff:
                    a3:54:8f:19:d3:b0:85:32:03:32:eb:12:04:b9:73:
                    10:cc:e6:21:55:70:63:94:4c:91:40:2a:7d:fe:d4:
                    8f:bd:24:0a:e8:98:b5:58:4c:af:df:2d:eb:e4:59:
                    ab:69:89:46:76:2a:14:1d:f2:1f:ae:b3:54:1f:0e:
                    02:c4:cb:fc:0e:34:61:a3:49:c2:7c:ed:5b:a9:63:
                    8f:2e:25:95:56:e2:04:44:34:ac:fc:11:75:14:57:
                    bd:65:1e:45:ce:e2:bf:d0:ce:4e:3e:72:2c:31:25:
                    b3:f4:ff:4d:a1:b1:e6:60:73:ac:51:0a:ba:0e:8b:
                    79:48:71:e8:ec:39:cc:77:38:7a:5f:83:b3:f9:a0:
                    d0:7d:f5:3f:cb:a3:1e:34:f5:17:f6:7d:9e:b7:65:
                    4f:80:91:a9:46:e3:15:bc:74:bb:e4:da:13:76:fc:
                    d8:ec:a4:95:cb:4a:9d:c4:4e:ed:3e:88:29:a3:22:
                    cf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C2:27:40:0D:AF:30:CB:DF:2E:AB:F5:AE:D6:10:57:41:EB:F4:4C
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/78InQA2vMMvfLqv1rtYQV0Hr9Ew.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:df:4c:48:4d:84:ad:7a:93:0a:fb:ea:34:52:14:72:3f:d7:
         32:a9:c0:d3:08:51:33:c4:69:eb:48:ef:d7:31:47:d2:25:23:
         3f:78:c7:cf:3b:29:a0:95:36:95:b4:d6:29:23:ab:60:9c:4c:
         58:0d:41:51:c0:3e:4f:70:f0:d4:31:4b:07:6e:59:29:aa:e2:
         69:03:b9:b8:c8:39:ab:41:94:af:99:f8:22:fd:62:ab:88:e8:
         e2:bc:c1:00:ae:dd:75:66:0f:27:2d:e6:d6:04:33:0f:e0:93:
         89:9d:d5:bb:7a:ed:32:f0:a4:c7:a3:b3:2c:ff:0b:61:26:88:
         45:ba:89:40:32:80:2f:2c:5a:6f:75:19:b3:12:2b:60:98:45:
         5d:32:e3:3c:08:a7:b1:68:b3:f0:3f:2f:88:13:e2:97:20:2e:
         07:e0:f5:fa:41:85:8c:f6:30:58:61:80:ef:3f:e5:c8:50:bb:
         ca:5f:3f:e9:98:99:9a:f6:0e:79:db:bf:d4:d3:65:93:14:a9:
         df:7f:62:ef:f2:13:14:af:88:30:b2:77:f1:f0:a6:c1:7c:80:
         a3:ad:89:0d:7f:05:8b:33:2e:96:52:ff:76:5f:60:28:78:b9:
         8a:1c:e6:99:42:1d:bd:90:76:cb:e4:c1:84:df:f9:05:d2:87:
         44:12:4a:3d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEVG
RjFBQjZFQURBMjczQkEwNjZEQjBGNzdCNzlENkEwRDkwMTU0MjAeFw0yNjAzMzEw
NzM3MzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVGQzIyNzQwMERBRjMw
Q0JERjJFQUJGNUFFRDYxMDU3NDFFQkY0NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7O+MoD/vubFkNJ13DCdNsTZY0a/yTRQedJfyuT/B9kngQbXgs
qGzQ0yPAoG5L7Rw1QsPz+MZS5Pt5Xe8b2JJlQTriqzvLSQBR/6NUjxnTsIUyAzLr
EgS5cxDM5iFVcGOUTJFAKn3+1I+9JAromLVYTK/fLevkWatpiUZ2KhQd8h+us1Qf
DgLEy/wONGGjScJ87VupY48uJZVW4gRENKz8EXUUV71lHkXO4r/Qzk4+ciwxJbP0
/02hseZgc6xRCroOi3lIcejsOcx3OHpfg7P5oNB99T/Lox409Rf2fZ63ZU+AkalG
4xW8dLvk2hN2/NjspJXLSp3ETu0+iCmjIs+NAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU78InQA2vMMvfLqv1rtYQV0Hr9EwwHwYDVR0jBBgwFoAUTv8aturaJzugZtsP
d7edag2QFUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYwMi9UdjhhdHVyYUp6dWdadHNQZDdlZGFnMlFGVUkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9UdjhhdHVyYUp6dWdadHNQZDdlZGFn
MlFGVUkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjAyLzc4SW5RQTJ2TU12ZkxxdjFydFlRVjBIcjlFdy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA906gwDQYJKoZIhvcNAQELBQADggEB
AMrfTEhNhK16kwr76jRSFHI/1zKpwNMIUTPEaetI79cxR9IlIz94x887KaCVNpW0
1ikjq2CcTFgNQVHAPk9w8NQxSwduWSmq4mkDubjIOatBlK+Z+CL9YquI6OK8wQCu
3XVmDyct5tYEMw/gk4md1bt67TLwpMejsyz/C2EmiEW6iUAygC8sWm91GbMSK2CY
RV0y4zwIp7Fos/A/L4gT4pcgLgfg9fpBhYz2MFhhgO8/5chQu8pfP+mYmZr2Dnnb
v9TTZZMUqd9/Yu/yExSviDCyd/HwpsF8gKOtiQ1/BYszLpZS/3ZfYCh4uYoc5plC
Hb2QdsvkwYTf+QXSh0QSSj0=
-----END CERTIFICATE-----
Generated at Mon Apr 13 05:10:40 2026 by rpki-client