Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/JAZYuFFzJDsdz2-R-xNTPRyh7TQ.roa
File:                     JAZYuFFzJDsdz2-R-xNTPRyh7TQ.roa (raw, json)
Hash identifier:          V3fZ6YyQShg4GEsmxHHcIOgDKLOG0SZAj1HKAEwQ9SA=
Subject key identifier:   24:06:58:B8:51:73:24:3B:1D:CF:6F:91:FB:13:53:3D:1C:A1:ED:34
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03F2
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JAZYuFFzJDsdz2-R-xNTPRyh7TQ.roa
Signing time:             Tue 31 Mar 2026 08:11:30 +0000
ROA not before:           Tue 31 Mar 2026 08:11:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        110.232.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=240658B85173243B1DCF6F91FB13533D1CA1ED34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:d9:aa:3c:2e:56:80:11:18:9e:d2:db:e9:
                    41:38:f1:f0:12:cc:2a:c3:89:b2:79:e4:3a:b5:c4:
                    f4:10:0a:a4:ac:a2:45:13:30:a0:3a:0c:8a:73:12:
                    d0:ec:69:61:9b:df:29:ca:98:45:71:0e:d2:1d:4f:
                    1b:6a:30:65:03:29:8f:bc:6e:0b:c8:e9:d2:d9:e8:
                    75:0c:16:c1:f2:80:8f:4d:a8:0b:53:a2:8c:5d:ce:
                    4f:42:0f:4c:81:33:dc:d0:3d:d1:70:14:a9:f7:12:
                    75:4a:a8:46:cc:81:36:b5:16:9e:f6:1c:35:4e:ee:
                    e4:50:3e:0d:7b:30:cf:5d:72:16:89:74:74:dc:48:
                    8a:7e:39:9c:19:28:fa:a2:0c:22:17:c7:7c:1c:63:
                    7c:52:5b:de:55:64:dd:60:a0:e0:fa:0d:5e:7c:e0:
                    e3:55:3b:ab:63:74:e3:9d:b2:ed:52:3d:bc:b0:47:
                    2f:fe:7e:e6:e6:48:4b:45:99:ba:a8:e3:25:62:b5:
                    5d:f9:ab:61:d2:9d:a8:b4:5c:84:77:ad:6f:c5:9b:
                    51:13:ef:dc:7f:88:3a:f6:59:c0:b4:0b:46:15:bf:
                    30:31:f9:f7:ad:6d:2b:3f:08:e2:bb:4a:46:fb:15:
                    b9:fd:f4:fe:a8:49:2c:0f:d3:3e:f0:77:fe:33:59:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:06:58:B8:51:73:24:3B:1D:CF:6F:91:FB:13:53:3D:1C:A1:ED:34
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JAZYuFFzJDsdz2-R-xNTPRyh7TQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:a0:93:60:49:7b:c2:44:96:b1:22:51:2b:aa:6d:10:64:76:
         c3:c3:53:c5:23:1e:d6:4d:f8:71:3d:a1:9b:99:14:32:50:27:
         a4:e2:90:cb:39:4f:5d:00:1e:4c:c6:75:9d:3f:15:b6:8c:d4:
         5f:c6:98:90:bc:39:90:18:2c:94:69:bf:3c:6b:62:8f:0a:8f:
         2f:a6:ad:67:69:d6:92:48:28:c1:d8:81:fb:c9:4b:33:b5:20:
         1c:73:de:78:16:7f:34:bb:90:1d:05:59:64:ff:31:2d:b8:54:
         1e:bf:a6:04:64:2b:92:f2:87:53:d8:9b:56:e1:1e:af:c3:29:
         e3:07:1d:81:89:fc:0e:61:1f:00:b9:ab:e0:f3:49:f7:9f:34:
         34:e9:9b:a8:7f:47:0b:21:aa:c1:25:72:6f:e5:b4:13:32:4d:
         9f:c6:8a:ad:c4:f9:00:b3:1b:bf:06:51:0d:b3:ee:28:55:40:
         5e:7c:10:1c:7e:4c:3e:0c:53:be:77:be:1e:38:f6:1b:84:54:
         ba:54:e2:c3:42:28:c8:63:94:d8:a8:c5:7c:65:1c:24:6f:2e:
         07:00:d0:00:40:38:2a:79:fa:94:1e:9d:e2:ba:36:8a:c8:bc:
         b3:ff:78:23:4f:1c:0d:f4:3d:62:ca:40:7f:d6:af:96:b8:a4:
         6e:b8:c5:18
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODExMzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI0MDY1OEI4NTE3MzI0
M0IxRENGNkY5MUZCMTM1MzNEMUNBMUVEMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2iNmqPC5WgBEYntLb6UE48fASzCrDibJ55Dq1xPQQCqSsokUT
MKA6DIpzEtDsaWGb3ynKmEVxDtIdTxtqMGUDKY+8bgvI6dLZ6HUMFsHygI9NqAtT
ooxdzk9CD0yBM9zQPdFwFKn3EnVKqEbMgTa1Fp72HDVO7uRQPg17MM9dchaJdHTc
SIp+OZwZKPqiDCIXx3wcY3xSW95VZN1goOD6DV584ONVO6tjdOOdsu1SPbywRy/+
fubmSEtFmbqo4yVitV35q2HSnai0XIR3rW/Fm1ET79x/iDr2WcC0C0YVvzAx+fet
bSs/COK7Skb7Fbn99P6oSSwP0z7wd/4zWbGzAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUJAZYuFFzJDsdz2+R+xNTPRyh7TQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL0pBWll1RkZ6SkRzZHoyLVIteE5UUFJ5aDdUUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANu6IAwDQYJKoZIhvcNAQELBQADggEB
ACegk2BJe8JElrEiUSuqbRBkdsPDU8UjHtZN+HE9oZuZFDJQJ6TikMs5T10AHkzG
dZ0/FbaM1F/GmJC8OZAYLJRpvzxrYo8Kjy+mrWdp1pJIKMHYgfvJSzO1IBxz3ngW
fzS7kB0FWWT/MS24VB6/pgRkK5Lyh1PYm1bhHq/DKeMHHYGJ/A5hHwC5q+DzSfef
NDTpm6h/RwshqsElcm/ltBMyTZ/Giq3E+QCzG78GUQ2z7ihVQF58EBx+TD4MU753
vh449huEVLpU4sNCKMhjlNioxXxlHCRvLgcA0ABAOCp5+pQeneK6NorIvLP/eCNP
HA30PWLKQH/Wr5a4pG64xRg=
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:08 2026 by rpki-client