Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MAy8ZRty8WSMCfWAjinlqknXnPU.roa
File:                     MAy8ZRty8WSMCfWAjinlqknXnPU.roa (raw, json)
Hash identifier:          pN5rDYqdPKb/9fmkLvyTg7aNluUazQloatt7SnPqLUQ=
Subject key identifier:   30:0C:BC:65:1B:72:F1:64:8C:09:F5:80:8E:29:E5:AA:49:D7:9C:F5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       049B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MAy8ZRty8WSMCfWAjinlqknXnPU.roa
Signing time:             Tue 31 Mar 2026 08:12:52 +0000
ROA not before:           Tue 31 Mar 2026 08:12:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        219.117.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1179 (0x49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=300CBC651B72F1648C09F5808E29E5AA49D79CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4e:ce:23:c7:22:9b:e8:3c:8c:f6:12:6e:af:
                    a8:e3:82:d9:28:17:1e:09:1c:fd:7e:ae:23:02:f3:
                    50:8a:ce:67:73:93:2f:9e:88:38:08:8a:62:74:3b:
                    60:ed:82:99:37:e9:bd:4f:ec:41:c3:d4:85:93:2b:
                    6f:30:7f:4f:45:92:53:1d:ea:c1:e6:56:b8:c5:e7:
                    ec:d7:e2:ee:2d:da:36:51:f5:31:5b:d8:50:f9:92:
                    be:32:25:42:0c:0d:d4:7b:3b:50:1d:46:ce:8f:f0:
                    f6:7a:d2:29:4c:17:52:3c:49:87:11:69:1c:a2:76:
                    74:06:e9:f8:91:57:ca:b2:5f:36:96:9c:52:91:39:
                    96:be:7f:a4:88:89:2a:17:f9:4f:cb:83:85:b1:30:
                    cc:1d:2c:4a:b2:32:c6:bc:a0:7a:65:48:42:f6:43:
                    f0:8c:fb:3a:02:70:d8:47:1f:9a:45:0b:72:fe:0e:
                    df:76:a1:56:b8:e1:86:dc:22:cc:6d:5c:7b:88:f6:
                    a6:2c:67:18:e9:0a:b7:dd:21:a3:93:17:d5:86:78:
                    4e:23:9f:c9:17:29:e5:80:14:8d:df:a3:4b:79:af:
                    4f:df:b8:9e:a1:a2:ce:69:bc:3d:13:1e:6e:a7:0c:
                    3c:1b:c3:54:bb:b6:84:4c:f7:c7:de:6f:3a:54:27:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0C:BC:65:1B:72:F1:64:8C:09:F5:80:8E:29:E5:AA:49:D7:9C:F5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MAy8ZRty8WSMCfWAjinlqknXnPU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:39:7e:bd:ca:49:d5:89:a9:aa:92:de:51:4c:1e:a3:5e:1b:
         b4:f2:f8:ed:12:6e:db:67:b1:bf:56:93:00:58:1c:02:b9:08:
         b0:f2:55:e2:cb:f4:bb:f0:29:35:06:4b:a0:04:58:25:d5:09:
         5c:a5:4e:48:b5:27:b3:8a:1a:0e:d9:00:54:d4:b9:1e:64:3e:
         5c:c5:f3:5d:94:55:d8:25:11:f7:7f:e1:ce:83:ca:12:ef:1a:
         47:bb:cd:1f:df:4a:72:66:ef:8a:0b:bf:0c:2c:e1:7b:1c:c1:
         56:48:5d:1c:a4:92:7f:d4:71:5a:e3:fc:f2:f7:ee:0a:b6:14:
         cf:66:e7:fa:b6:68:84:81:96:09:84:d6:cc:fb:f9:00:65:15:
         14:c6:0c:a4:a6:75:94:0a:9e:00:c0:59:5b:95:f5:4d:e9:41:
         a5:0c:18:5f:16:f2:8f:27:8b:49:a4:24:22:b1:5c:2c:fd:19:
         f2:3e:79:89:b0:89:09:40:40:b0:d7:72:36:6f:ee:37:7b:6c:
         d1:58:86:9e:8e:a7:f7:8f:a3:e4:8c:9e:05:9d:ff:82:fa:4d:
         cb:77:b8:d6:16:68:92:46:20:bf:83:ab:cd:19:7b:16:d4:2b:
         fc:3a:14:19:2b:e7:bd:99:29:d5:7c:57:d9:07:53:42:80:2c:
         14:86:97:4b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEyNTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMwMENCQzY1MUI3MkYx
NjQ4QzA5RjU4MDhFMjlFNUFBNDlENzlDRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRTs4jxyKb6DyM9hJur6jjgtkoFx4JHP1+riMC81CKzmdzky+e
iDgIimJ0O2Dtgpk36b1P7EHD1IWTK28wf09FklMd6sHmVrjF5+zX4u4t2jZR9TFb
2FD5kr4yJUIMDdR7O1AdRs6P8PZ60ilMF1I8SYcRaRyidnQG6fiRV8qyXzaWnFKR
OZa+f6SIiSoX+U/Lg4WxMMwdLEqyMsa8oHplSEL2Q/CM+zoCcNhHH5pFC3L+Dt92
oVa44YbcIsxtXHuI9qYsZxjpCrfdIaOTF9WGeE4jn8kXKeWAFI3fo0t5r0/fuJ6h
os5pvD0THm6nDDwbw1S7toRM98febzpUJy6jAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUMAy8ZRty8WSMCfWAjinlqknXnPUwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL01BeThaUnR5OFdTTUNmV0FqaW5scWtuWG5QVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXbdaAwDQYJKoZIhvcNAQELBQADggEB
AJo5fr3KSdWJqaqS3lFMHqNeG7Ty+O0Sbttnsb9WkwBYHAK5CLDyVeLL9LvwKTUG
S6AEWCXVCVylTki1J7OKGg7ZAFTUuR5kPlzF812UVdglEfd/4c6DyhLvGke7zR/f
SnJm74oLvwws4XscwVZIXRykkn/UcVrj/PL37gq2FM9m5/q2aISBlgmE1sz7+QBl
FRTGDKSmdZQKngDAWVuV9U3pQaUMGF8W8o8ni0mkJCKxXCz9GfI+eYmwiQlAQLDX
cjZv7jd7bNFYhp6Op/ePo+SMngWd/4L6Tct3uNYWaJJGIL+Dq80ZexbUK/w6FBkr
572ZKdV8V9kHU0KALBSGl0s=
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:23 2026 by rpki-client