Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/nSonRwYN7GW-hCmM2tAdiw-Izws.roa
File:                     nSonRwYN7GW-hCmM2tAdiw-Izws.roa (raw, json)
Hash identifier:          tOPtKD3gYxy74RVIJ6EMVS+aM3xk8INm8x4IPi+3tOQ=
Subject key identifier:   9D:2A:27:47:06:0D:EC:65:BE:84:29:8C:DA:D0:1D:8B:0F:88:CF:0B
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       AB
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/nSonRwYN7GW-hCmM2tAdiw-Izws.roa
Signing time:             Tue 31 Mar 2026 07:37:36 +0000
ROA not before:           Tue 31 Mar 2026 07:37:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17675
IP address blocks:        210.193.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 03:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Mar 31 07:37:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9D2A2747060DEC65BE84298CDAD01D8B0F88CF0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:56:e8:f8:08:de:a0:51:b9:8e:37:d9:f9:
                    75:2d:80:ce:b2:0c:26:20:ae:74:0a:bb:e3:81:91:
                    01:1c:d3:44:1d:de:9d:77:53:1a:1f:b2:13:6d:ef:
                    b4:b9:a0:45:97:43:13:ab:c0:27:0e:a0:a0:e3:08:
                    4e:88:69:e8:bb:59:40:34:07:59:4e:63:84:d2:b6:
                    fc:f0:ba:38:e4:ff:84:f2:85:43:d0:53:dd:6c:1a:
                    2c:37:0c:8e:f3:83:4e:02:69:88:9c:e8:27:d4:68:
                    b7:51:a6:a5:60:9d:f9:9b:31:bf:5c:b4:1e:12:13:
                    ef:78:90:46:2a:8d:7d:b8:2a:e1:69:ee:25:ec:f0:
                    0c:63:6b:61:5b:f6:da:34:ea:d7:2d:d3:7c:72:20:
                    b0:3a:45:e8:93:2f:5c:8a:c3:31:ee:c7:0f:d5:f8:
                    79:54:c6:c6:c2:a8:27:aa:1e:2e:ad:66:80:b8:be:
                    97:e7:98:1e:27:11:9d:5b:de:e8:ee:40:d8:88:6e:
                    f6:54:fa:25:a2:47:fc:a9:f3:58:74:e3:66:86:53:
                    3d:20:54:e8:3e:fe:7e:dc:2e:e1:e8:7d:fd:fa:2b:
                    5f:b7:47:87:37:30:c9:71:44:2a:2c:eb:7f:de:e7:
                    7a:4c:98:b0:65:ea:40:64:be:cd:14:2d:48:de:a8:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2A:27:47:06:0D:EC:65:BE:84:29:8C:DA:D0:1D:8B:0F:88:CF:0B
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/nSonRwYN7GW-hCmM2tAdiw-Izws.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.193.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:a5:69:a8:73:8b:01:f2:54:33:28:26:02:2b:45:3c:db:c7:
         37:91:4d:dd:bc:a8:32:e6:f8:72:b0:ae:bd:bf:b0:39:66:61:
         70:4f:25:2f:bd:73:74:40:75:6d:3b:09:9f:15:77:b2:cf:c0:
         2b:b5:3a:fa:9c:dd:01:a3:d2:6f:22:d7:16:7e:56:76:09:e9:
         2a:00:e4:89:67:5f:d6:b9:04:25:e6:15:01:98:25:1d:9b:6f:
         cd:d0:e7:66:de:38:73:9d:92:77:a6:fd:b5:3e:af:7a:e3:87:
         c6:ae:18:84:78:98:64:90:67:10:e8:f3:67:75:9e:4c:07:3c:
         82:16:60:94:78:7e:f9:c8:6f:ac:d6:4e:2e:17:10:8a:b7:4a:
         ab:b7:6f:c0:87:43:a2:31:d6:87:d5:ee:9b:65:6d:2e:e7:83:
         4d:45:7f:16:b6:8e:05:b6:ca:47:2c:5d:37:7d:b9:25:7b:5d:
         0b:04:26:d2:9c:2a:00:0a:8b:82:a2:78:4b:0c:1e:1b:ba:b3:
         d6:4e:37:44:98:8e:ef:f3:5d:80:e0:d3:61:e2:8e:dd:9d:dc:
         df:57:ef:9c:e3:2f:59:34:78:6d:cc:05:ef:01:20:45:30:fd:
         c0:7b:d2:11:fa:a9:b6:ef:b1:d3:26:72:bf:e9:19:f5:70:11:
         de:99:ed:4b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEVG
RjFBQjZFQURBMjczQkEwNjZEQjBGNzdCNzlENkEwRDkwMTU0MjAeFw0yNjAzMzEw
NzM3MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlEMkEyNzQ3MDYwREVD
NjVCRTg0Mjk4Q0RBRDAxRDhCMEY4OENGMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCti1bo+AjeoFG5jjfZ+XUtgM6yDCYgrnQKu+OBkQEc00Qd3p13
UxofshNt77S5oEWXQxOrwCcOoKDjCE6Iaei7WUA0B1lOY4TStvzwujjk/4TyhUPQ
U91sGiw3DI7zg04CaYic6CfUaLdRpqVgnfmbMb9ctB4SE+94kEYqjX24KuFp7iXs
8Axja2Fb9to06tct03xyILA6ReiTL1yKwzHuxw/V+HlUxsbCqCeqHi6tZoC4vpfn
mB4nEZ1b3ujuQNiIbvZU+iWiR/yp81h042aGUz0gVOg+/n7cLuHoff36K1+3R4c3
MMlxRCos63/e53pMmLBl6kBkvs0ULUjeqCmtAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUnSonRwYN7GW+hCmM2tAdiw+IzwswHwYDVR0jBBgwFoAUTv8aturaJzugZtsP
d7edag2QFUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYwMi9UdjhhdHVyYUp6dWdadHNQZDdlZGFnMlFGVUkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9UdjhhdHVyYUp6dWdadHNQZDdlZGFn
MlFGVUkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjAyL25Tb25Sd1lON0dXLWhDbU0ydEFkaXctSXp3cy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSwXswDQYJKoZIhvcNAQELBQADggEB
ABmlaahziwHyVDMoJgIrRTzbxzeRTd28qDLm+HKwrr2/sDlmYXBPJS+9c3RAdW07
CZ8Vd7LPwCu1Ovqc3QGj0m8i1xZ+VnYJ6SoA5IlnX9a5BCXmFQGYJR2bb83Q52be
OHOdknem/bU+r3rjh8auGIR4mGSQZxDo82d1nkwHPIIWYJR4fvnIb6zWTi4XEIq3
Squ3b8CHQ6Ix1ofV7ptlbS7ng01Ffxa2jgW2ykcsXTd9uSV7XQsEJtKcKgAKi4Ki
eEsMHhu6s9ZON0SYju/zXYDg02Hijt2d3N9X75zjL1k0eG3MBe8BIEUw/cB70hH6
qbbvsdMmcr/pGfVwEd6Z7Us=
-----END CERTIFICATE-----
Generated at Mon Apr 13 05:10:57 2026 by rpki-client