Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/z4qs_-Ixe2NjjhvIs8aDi6IeyEE.roa
File:                     z4qs_-Ixe2NjjhvIs8aDi6IeyEE.roa (raw, json)
Hash identifier:          AMOf/AzRcdZDywJRfQ+mH+aERwzYDfGAG6XNJe0ChpU=
Subject key identifier:   CF:8A:AC:FF:E2:31:7B:63:63:8E:1B:C8:B3:C6:83:8B:A2:1E:C8:41
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0487
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/z4qs_-Ixe2NjjhvIs8aDi6IeyEE.roa
Signing time:             Tue 31 Mar 2026 08:12:43 +0000
ROA not before:           Tue 31 Mar 2026 08:12:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        202.178.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159 (0x487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CF8AACFFE2317B63638E1BC8B3C6838BA21EC841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7b:6d:25:46:66:ef:c5:85:3e:e4:13:42:0b:
                    3f:69:87:35:6b:d7:c4:02:35:df:6f:34:85:d0:4a:
                    23:07:4a:f3:c5:b6:53:b0:2f:d3:20:db:7d:b5:92:
                    f9:06:bc:ed:7d:54:c7:22:00:4b:a3:06:ba:b8:54:
                    38:30:6f:1f:d2:d0:35:15:d1:9b:42:1d:76:98:1a:
                    19:6b:8a:ba:a5:a4:3b:6d:50:29:bc:42:cf:68:fe:
                    4e:02:57:25:a0:66:54:66:f4:db:71:3e:57:cc:c1:
                    35:36:41:f8:46:c6:5f:38:a5:82:93:31:06:ca:17:
                    8b:07:90:95:50:63:da:03:bf:83:89:a5:a3:55:1a:
                    a0:d5:41:69:97:ff:c2:79:f7:77:9a:a6:93:ea:ea:
                    42:ea:c8:07:54:a2:98:3f:c8:4b:42:ac:9e:dd:0a:
                    b9:e5:fb:25:50:d6:e2:85:9f:87:07:dd:77:5d:68:
                    7b:52:e9:19:23:2e:fa:24:b5:58:7f:2e:25:bf:2e:
                    29:c6:88:42:fb:c1:8c:98:7d:7c:f1:64:84:4a:d0:
                    0b:0c:46:3e:b8:0a:69:82:7b:77:d8:51:b7:fd:18:
                    c7:03:45:eb:6b:01:76:d5:d4:8a:44:90:dd:d4:3b:
                    c9:1a:c7:bb:32:70:ba:4a:59:fa:be:3a:43:96:32:
                    af:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8A:AC:FF:E2:31:7B:63:63:8E:1B:C8:B3:C6:83:8B:A2:1E:C8:41
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/z4qs_-Ixe2NjjhvIs8aDi6IeyEE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.178.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:4c:90:a6:99:9b:5e:8c:51:2d:69:b5:a2:8b:8c:ab:19:61:
         9b:29:20:be:d2:5e:99:ba:59:bd:ec:34:65:74:bc:5f:63:4b:
         2f:12:52:54:aa:9f:14:b7:8e:54:48:15:77:c4:ee:a2:ed:81:
         73:f8:2a:89:eb:0d:4b:9c:e9:07:1e:61:fe:05:b2:69:b8:c1:
         99:9a:ec:34:cb:6e:2e:65:06:84:c8:c4:f9:86:b6:5c:eb:e6:
         af:da:95:ec:0a:9c:f8:1c:76:ba:14:18:7d:85:89:3d:67:b5:
         50:be:32:99:d0:70:8d:4c:2c:b3:f5:6b:c8:b1:cb:7a:b9:b8:
         92:18:8b:eb:67:c5:bf:f9:ce:0c:a5:cf:44:bd:10:34:34:94:
         ee:16:5a:aa:a5:03:2d:80:97:79:81:74:37:19:dc:cd:6c:2b:
         2b:ae:35:03:80:00:98:db:46:03:72:3a:bc:cb:a0:dd:2e:7d:
         41:76:5e:de:8c:67:76:37:00:86:d7:ee:6e:bd:12:17:a9:30:
         2c:65:be:ee:66:d7:53:e7:ec:6d:6d:c9:c6:ff:97:ef:d7:aa:
         d1:1a:80:86:cc:5b:38:27:c4:9a:e3:05:c0:55:32:67:f0:37:
         30:9a:70:16:cb:d0:d5:11:39:0d:fb:65:bb:0c:81:1f:62:22:
         62:32:6b:3d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEyNDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENGOEFBQ0ZGRTIzMTdC
NjM2MzhFMUJDOEIzQzY4MzhCQTIxRUM4NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDee20lRmbvxYU+5BNCCz9phzVr18QCNd9vNIXQSiMHSvPFtlOw
L9Mg2321kvkGvO19VMciAEujBrq4VDgwbx/S0DUV0ZtCHXaYGhlrirqlpDttUCm8
Qs9o/k4CVyWgZlRm9NtxPlfMwTU2QfhGxl84pYKTMQbKF4sHkJVQY9oDv4OJpaNV
GqDVQWmX/8J593eappPq6kLqyAdUopg/yEtCrJ7dCrnl+yVQ1uKFn4cH3XddaHtS
6RkjLvoktVh/LiW/LinGiEL7wYyYfXzxZIRK0AsMRj64CmmCe3fYUbf9GMcDRetr
AXbV1IpEkN3UO8kax7sycLpKWfq+OkOWMq/nAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUz4qs/+Ixe2NjjhvIs8aDi6IeyEEwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL3o0cXNfLUl4ZTJOampodklzOGFEaTZJZXlFRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKslAwDQYJKoZIhvcNAQELBQADggEB
AE1MkKaZm16MUS1ptaKLjKsZYZspIL7SXpm6Wb3sNGV0vF9jSy8SUlSqnxS3jlRI
FXfE7qLtgXP4KonrDUuc6QceYf4Fsmm4wZma7DTLbi5lBoTIxPmGtlzr5q/alewK
nPgcdroUGH2FiT1ntVC+MpnQcI1MLLP1a8ixy3q5uJIYi+tnxb/5zgylz0S9EDQ0
lO4WWqqlAy2Al3mBdDcZ3M1sKyuuNQOAAJjbRgNyOrzLoN0ufUF2Xt6MZ3Y3AIbX
7m69EhepMCxlvu5m11Pn7G1tycb/l+/XqtEagIbMWzgnxJrjBcBVMmfwNzCacBbL
0NUROQ37ZbsMgR9iImIyaz0=
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:59 2026 by rpki-client