Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/UtAMbEnimachfiAvyu0z5EanR4g.roa
File:                     UtAMbEnimachfiAvyu0z5EanR4g.roa (raw, json)
Hash identifier:          JP5pLAaUHliZXnzPKNgXqxSS17n1SH1dZZWdXiARKWM=
Subject key identifier:   52:D0:0C:6C:49:E2:99:A7:21:7E:20:2F:CA:ED:33:E4:46:A7:47:88
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04C5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UtAMbEnimachfiAvyu0z5EanR4g.roa
Signing time:             Tue 31 Mar 2026 08:13:13 +0000
ROA not before:           Tue 31 Mar 2026 08:13:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        14.193.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=52D00C6C49E299A7217E202FCAED33E446A74788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:71:c6:7b:37:c1:6c:b1:9c:9e:bc:90:9c:
                    a6:c7:1f:ef:bc:58:61:8c:a0:69:38:d8:cf:67:a8:
                    7f:50:fa:48:72:c8:c7:b2:a4:7a:49:d8:55:a3:f9:
                    ee:6d:67:8d:6b:07:2e:dd:40:55:32:3f:58:9b:6d:
                    cd:18:a6:58:22:9c:22:ea:31:f5:07:1e:e6:8e:52:
                    3a:59:52:82:1f:59:49:56:ee:b7:1f:78:1a:a1:90:
                    ab:dc:d7:b7:6b:b4:11:90:07:85:e7:a2:88:21:7f:
                    1d:e9:88:aa:8e:30:de:ab:8a:eb:3b:d6:21:e1:4f:
                    92:5f:81:88:70:3e:28:16:d7:53:3b:b6:44:6f:30:
                    77:09:f9:69:4a:5c:0f:18:f4:4d:03:f4:80:eb:3d:
                    81:89:84:75:89:90:5a:c9:27:73:de:d7:7f:4d:76:
                    d5:07:8a:8d:87:d4:98:58:17:e9:83:42:62:8e:44:
                    19:a2:e3:2f:f0:f8:09:e0:db:a4:0e:35:61:ca:a1:
                    16:a6:61:30:6e:24:02:c4:c3:27:93:65:e1:d6:c8:
                    1b:3e:fe:c4:fc:cc:f7:ba:f8:c2:84:db:60:d5:47:
                    7e:f6:dd:09:9d:79:cd:03:87:69:44:ba:80:da:62:
                    fc:31:6f:fc:9a:1d:5b:46:d3:ce:e4:10:3f:94:1c:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D0:0C:6C:49:E2:99:A7:21:7E:20:2F:CA:ED:33:E4:46:A7:47:88
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UtAMbEnimachfiAvyu0z5EanR4g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:89:75:2a:2e:a6:e6:9a:bd:fc:ca:6b:4a:79:45:92:ef:46:
         7c:c8:73:50:8a:e4:e0:80:26:3d:7f:8f:00:76:a6:24:57:43:
         db:88:57:14:06:f2:02:f0:39:2f:6e:11:05:bf:93:02:2c:e2:
         b4:f7:b2:9d:82:79:01:f4:17:f2:d4:48:6d:b9:9c:5c:78:9a:
         87:5e:d2:5c:3d:1c:58:96:aa:90:dc:8a:31:68:07:9c:d9:83:
         74:a6:ad:7c:b1:de:87:ca:c1:d8:36:ad:27:7f:b9:0a:a5:db:
         5c:39:a8:4d:d4:b6:de:75:69:52:f7:1d:b2:47:f1:cc:4c:aa:
         46:b1:c1:38:9a:2d:d1:f6:b7:b7:a5:c5:74:5d:28:d2:a2:f2:
         e5:99:27:a5:5b:33:e3:3f:db:95:31:d7:c1:39:18:0a:95:dd:
         ae:a2:98:5c:9d:c3:95:00:7d:e5:58:37:ed:58:34:68:38:4a:
         ec:43:47:3f:96:7d:4d:8e:30:83:ac:5a:52:6b:8c:bc:4e:0d:
         d2:4c:f9:38:d4:67:c3:6d:a7:35:c7:b1:81:d5:a2:db:f8:08:
         0f:14:b2:71:34:2f:14:b6:10:07:ea:6d:34:9f:84:2e:a3:2d:
         b9:24:0f:f0:45:6d:1e:0e:dd:ca:fa:f5:4b:74:ef:d9:cf:39:
         5c:f2:f5:9a
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEzMTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUyRDAwQzZDNDlFMjk5
QTcyMTdFMjAyRkNBRUQzM0U0NDZBNzQ3ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGJ3HGezfBbLGcnryQnKbHH++8WGGMoGk42M9nqH9Q+khyyMey
pHpJ2FWj+e5tZ41rBy7dQFUyP1ibbc0YplginCLqMfUHHuaOUjpZUoIfWUlW7rcf
eBqhkKvc17drtBGQB4Xnooghfx3piKqOMN6rius71iHhT5JfgYhwPigW11M7tkRv
MHcJ+WlKXA8Y9E0D9IDrPYGJhHWJkFrJJ3Pe139NdtUHio2H1JhYF+mDQmKORBmi
4y/w+Ang26QONWHKoRamYTBuJALEwyeTZeHWyBs+/sT8zPe6+MKE22DVR3723Qmd
ec0Dh2lEuoDaYvwxb/yaHVtG087kED+UHK67AgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUUtAMbEnimachfiAvyu0z5EanR4gwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL1V0QU1iRW5pbWFjaGZpQXZ5dTB6NUVhblI0Zy5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAOwTANBgkqhkiG9w0BAQsFAAOCAQEA
PYl1Ki6m5pq9/MprSnlFku9GfMhzUIrk4IAmPX+PAHamJFdD24hXFAbyAvA5L24R
Bb+TAizitPeynYJ5AfQX8tRIbbmcXHiah17SXD0cWJaqkNyKMWgHnNmDdKatfLHe
h8rB2DatJ3+5CqXbXDmoTdS23nVpUvcdskfxzEyqRrHBOJot0fa3t6XFdF0o0qLy
5ZknpVsz4z/blTHXwTkYCpXdrqKYXJ3DlQB95Vg37Vg0aDhK7ENHP5Z9TY4wg6xa
UmuMvE4N0kz5ONRnw22nNcexgdWi2/gIDxSycTQvFLYQB+ptNJ+ELqMtuSQP8EVt
Hg7dyvr1S3Tv2c85XPL1mg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:54:20 2026 by rpki-client