Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/_v2CYaaq9n7mTKdkfFI5QXH44T4.roa
File:                     _v2CYaaq9n7mTKdkfFI5QXH44T4.roa (raw, json)
Hash identifier:          uwRUjktYuWHjqtnyb0xa/Ol0o4s2Hjpfsp0gpSJgwJ0=
Subject key identifier:   FE:FD:82:61:A6:AA:F6:7E:E6:4C:A7:64:7C:52:39:41:71:F8:E1:3E
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       A0
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/_v2CYaaq9n7mTKdkfFI5QXH44T4.roa
Signing time:             Tue 31 Mar 2026 07:37:30 +0000
ROA not before:           Tue 31 Mar 2026 07:37:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17675
IP address blocks:        218.216.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 03:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Mar 31 07:37:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FEFD8261A6AAF67EE64CA7647C52394171F8E13E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:f7:e9:32:6a:07:6d:fa:91:df:b3:34:f2:
                    62:c7:15:ea:58:02:af:3b:01:50:53:d1:5c:d6:f6:
                    ec:dc:1d:13:d2:77:ff:84:27:40:87:0b:f4:b3:d3:
                    12:a3:89:7d:d1:43:d3:9c:71:b1:e6:aa:1c:4e:f6:
                    d4:ec:40:f9:c2:39:09:3e:d6:45:8b:9c:94:7d:5d:
                    17:45:fd:68:8a:ba:a7:31:f6:53:47:96:e2:1d:07:
                    6f:bf:74:92:53:87:5e:97:24:c6:e9:2a:f2:f6:d1:
                    63:10:83:1d:50:a0:c0:b8:fd:0f:78:29:23:ff:62:
                    5b:3a:a4:04:ff:1f:1a:3a:55:52:5e:d7:ed:fd:0b:
                    1c:fc:e0:41:9a:84:c0:9d:65:82:1e:31:f6:cf:fc:
                    97:01:7d:84:12:fe:3f:8e:79:04:64:44:a3:09:77:
                    15:5a:8a:49:f2:d6:31:31:14:68:8f:f6:71:f5:e9:
                    f7:25:83:c6:24:bd:8f:5b:93:15:30:a1:a9:48:14:
                    04:61:df:85:67:84:a2:16:ad:7c:72:1f:28:78:eb:
                    be:16:dd:c2:7c:9e:33:29:26:24:91:f5:c4:d1:d8:
                    48:4a:9e:1d:fc:72:4a:86:0b:cd:8d:a2:c6:d3:69:
                    6c:28:39:74:91:fd:41:b5:df:19:48:74:7f:2b:37:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FD:82:61:A6:AA:F6:7E:E6:4C:A7:64:7C:52:39:41:71:F8:E1:3E
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/_v2CYaaq9n7mTKdkfFI5QXH44T4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:c9:7e:47:8c:75:d9:0f:8b:34:24:1e:93:3b:32:3e:f7:35:
         be:79:f7:90:86:c2:1c:c6:bc:f7:87:ec:d7:7d:68:2c:0d:bc:
         d9:86:74:94:98:43:e7:35:17:ca:7b:6a:14:53:70:bf:2c:5f:
         1c:d5:87:29:b0:99:e8:24:4c:3e:af:28:f8:8a:fe:af:3e:85:
         95:95:e2:d7:77:32:58:f9:03:93:48:3e:57:0b:9c:ce:e7:fa:
         7b:24:fa:c2:95:9b:c1:b5:9a:47:d0:16:d4:1a:fc:ab:91:87:
         c4:41:08:ff:4e:a0:4a:97:50:e9:cc:19:fc:61:ee:5d:23:f7:
         36:26:82:85:71:bd:3b:49:6a:e8:22:2b:05:7a:af:ae:32:cb:
         61:b3:3c:41:6e:03:ca:a6:a4:97:eb:4a:93:e6:65:cc:14:5e:
         95:64:5b:a3:e5:aa:b0:82:41:1a:34:79:f0:e6:a1:d4:d6:97:
         76:3c:ba:13:2e:f4:7a:01:86:bd:8c:87:60:cd:46:5d:d9:b3:
         63:4c:3e:a7:6d:91:4b:21:d5:d6:95:40:eb:eb:f0:f1:8f:ff:
         39:83:c4:b5:62:47:3f:7b:c6:5d:0b:41:43:26:3b:1b:8a:44:
         b8:07:01:05:6b:c6:1c:7a:1a:8c:fe:9c:69:0d:a0:30:69:22:
         a3:b1:a3:27
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEVG
RjFBQjZFQURBMjczQkEwNjZEQjBGNzdCNzlENkEwRDkwMTU0MjAeFw0yNjAzMzEw
NzM3MzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZFRkQ4MjYxQTZBQUY2
N0VFNjRDQTc2NDdDNTIzOTQxNzFGOEUxM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzZvfpMmoHbfqR37M08mLHFepYAq87AVBT0VzW9uzcHRPSd/+E
J0CHC/Sz0xKjiX3RQ9OccbHmqhxO9tTsQPnCOQk+1kWLnJR9XRdF/WiKuqcx9lNH
luIdB2+/dJJTh16XJMbpKvL20WMQgx1QoMC4/Q94KSP/Yls6pAT/Hxo6VVJe1+39
Cxz84EGahMCdZYIeMfbP/JcBfYQS/j+OeQRkRKMJdxVaikny1jExFGiP9nH16fcl
g8YkvY9bkxUwoalIFARh34VnhKIWrXxyHyh4674W3cJ8njMpJiSR9cTR2EhKnh38
ckqGC82NosbTaWwoOXSR/UG13xlIdH8rN6sXAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU/v2CYaaq9n7mTKdkfFI5QXH44T4wHwYDVR0jBBgwFoAUTv8aturaJzugZtsP
d7edag2QFUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYwMi9UdjhhdHVyYUp6dWdadHNQZDdlZGFnMlFGVUkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9UdjhhdHVyYUp6dWdadHNQZDdlZGFn
MlFGVUkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjAyL192MkNZYWFxOW43bVRLZGtmRkk1UVhINDRUNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATa2GAwDQYJKoZIhvcNAQELBQADggEB
AFfJfkeMddkPizQkHpM7Mj73Nb5595CGwhzGvPeH7Nd9aCwNvNmGdJSYQ+c1F8p7
ahRTcL8sXxzVhymwmegkTD6vKPiK/q8+hZWV4td3Mlj5A5NIPlcLnM7n+nsk+sKV
m8G1mkfQFtQa/KuRh8RBCP9OoEqXUOnMGfxh7l0j9zYmgoVxvTtJaugiKwV6r64y
y2GzPEFuA8qmpJfrSpPmZcwUXpVkW6PlqrCCQRo0efDmodTWl3Y8uhMu9HoBhr2M
h2DNRl3Zs2NMPqdtkUsh1daVQOvr8PGP/zmDxLViRz97xl0LQUMmOxuKRLgHAQVr
xhx6Goz+nGkNoDBpIqOxoyc=
-----END CERTIFICATE-----
Generated at Mon Apr 13 05:10:43 2026 by rpki-client