Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/9IdjPKZ5qpvv9DitP4m6916H9jg.roa
File:                     9IdjPKZ5qpvv9DitP4m6916H9jg.roa (raw, json)
Hash identifier:          WFp2W9KBJnmf+sE/XWpgGNCMu6nd8uHJbgJXyavDanA=
Subject key identifier:   F4:87:63:3C:A6:79:AA:9B:EF:F4:38:AD:3F:89:BA:F7:5E:87:F6:38
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       78
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/9IdjPKZ5qpvv9DitP4m6916H9jg.roa
Signing time:             Sun 01 Feb 2026 01:36:01 +0000
ROA not before:           Sun 01 Feb 2026 01:36:01 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        221.121.192.0/18 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 22:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Feb  1 01:36:01 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=F487633CA679AA9BEFF438AD3F89BAF75E87F638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c4:ec:6b:96:71:42:55:87:69:90:9f:ba:f3:
                    ef:3b:27:e0:bd:2c:01:3d:ab:da:b7:d3:d5:0f:e3:
                    1a:bf:ac:7d:a5:e3:92:f9:6b:8b:a2:bf:82:b9:ee:
                    89:af:0c:85:bf:59:52:f7:41:25:2f:0a:de:9a:7e:
                    63:4c:13:22:3b:0e:2d:0b:d0:34:80:2f:ea:07:d0:
                    ec:1a:1e:7e:e7:3c:6b:14:a1:09:d5:72:c7:3d:1a:
                    22:1e:b9:f1:a5:86:cd:f8:17:45:1c:ac:4b:3c:b3:
                    bc:51:38:fd:42:ad:bf:ef:28:3f:33:64:74:6e:35:
                    08:f2:35:60:33:ca:d1:43:21:3f:55:e4:42:0b:2a:
                    fa:59:94:9a:7c:3c:93:22:3d:c9:05:34:ea:f2:e2:
                    9b:7d:c0:e7:f3:ad:91:a2:92:dc:30:ff:6b:b6:ca:
                    96:a6:01:21:17:21:59:de:ae:14:40:3d:21:8b:e6:
                    dc:1f:b7:ee:b4:1b:f1:10:e3:48:06:5a:ad:15:c8:
                    99:32:ab:45:c4:69:e0:b0:01:6d:b4:fb:f2:61:d0:
                    a6:a8:87:d9:5f:b9:53:25:f7:c4:d5:a5:47:33:02:
                    68:67:45:d3:21:ef:20:68:0e:64:17:76:d3:ef:df:
                    b6:e5:38:26:8b:2f:9c:ee:9c:60:2f:10:4b:f2:13:
                    51:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:87:63:3C:A6:79:AA:9B:EF:F4:38:AD:3F:89:BA:F7:5E:87:F6:38
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/9IdjPKZ5qpvv9DitP4m6916H9jg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.121.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         69:71:67:11:c3:0a:62:5b:d4:27:66:00:17:f6:ff:54:31:dd:
         56:76:f2:69:83:e5:ab:d6:3f:e6:b0:35:1d:12:d1:ec:64:17:
         a1:6f:87:b7:4f:15:d0:30:25:bb:a1:f1:3c:19:6e:be:e2:82:
         fe:27:5a:d4:54:94:78:43:0a:13:0c:2c:20:9f:1f:a6:be:00:
         28:54:4d:c9:a7:f4:15:c9:b4:20:6f:f6:c5:f4:21:05:d7:db:
         2d:74:91:7d:50:f7:32:94:d7:bf:ee:1b:15:c5:b5:76:b2:1c:
         40:f0:97:bd:84:e6:1e:10:80:57:d0:4d:67:e8:a9:09:37:59:
         a5:cd:7b:d8:f5:db:d2:8b:08:9b:aa:91:6c:9d:25:9a:0d:b6:
         b1:6b:b5:d2:0f:ac:0d:b3:12:d2:c0:5b:ef:ba:7e:24:a1:30:
         2e:19:1f:9c:38:dd:45:39:2b:c5:fe:41:74:c8:87:8a:18:d8:
         b6:91:02:04:a8:3b:24:4b:0c:32:da:36:5c:aa:6f:dc:e9:03:
         02:f5:45:ff:2b:0c:d7:34:95:7c:49:14:b3:b4:b8:ca:bc:01:
         c0:18:69:14:b9:6c:77:75:b3:e3:da:b4:a9:91:34:f8:cd:58:
         56:42:9c:ef:05:44:a9:51:7a:8b:08:8f:83:84:9b:16:45:11:
         83:5b:cf:21
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBeDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG
OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI2MDIwMTAx
MzYwMVoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoRjQ4NzYzM0NBNjc5QUE5
QkVGRjQzOEFEM0Y4OUJBRjc1RTg3RjYzODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN3E7GuWcUJVh2mQn7rz7zsn4L0sAT2r2rfT1Q/jGr+sfaXjkvlr
i6K/grnuia8Mhb9ZUvdBJS8K3pp+Y0wTIjsOLQvQNIAv6gfQ7Boefuc8axShCdVy
xz0aIh658aWGzfgXRRysSzyzvFE4/UKtv+8oPzNkdG41CPI1YDPK0UMhP1XkQgsq
+lmUmnw8kyI9yQU06vLim33A5/OtkaKS3DD/a7bKlqYBIRchWd6uFEA9IYvm3B+3
7rQb8RDjSAZarRXImTKrRcRp4LABbbT78mHQpqiH2V+5UyX3xNWlRzMCaGdF0yHv
IGgOZBd20+/ftuU4JosvnO6cYC8QS/ITUa0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBT0h2M8pnmqm+/0OK0/ibr3Xof2ODAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo
xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf
MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwODIyLzlJZGpQS1o1cXB2djlEaXRQNG02OTE2SDlqZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAbdecAwDQYJKoZIhvcNAQELBQADggEBAGlxZxHDCmJb1CdmABf2/1Qx
3VZ28mmD5avWP+awNR0S0exkF6Fvh7dPFdAwJbuh8TwZbr7igv4nWtRUlHhDChMM
LCCfH6a+AChUTcmn9BXJtCBv9sX0IQXX2y10kX1Q9zKU17/uGxXFtXayHEDwl72E
5h4QgFfQTWfoqQk3WaXNe9j129KLCJuqkWydJZoNtrFrtdIPrA2zEtLAW++6fiSh
MC4ZH5w43UU5K8X+QXTIh4oY2LaRAgSoOyRLDDLaNlyqb9zpAwL1Rf8rDNc0lXxJ
FLO0uMq8AcAYaRS5bHd1s+PatKmRNPjNWFZCnO8FRKlReosIj4OEmxZFEYNbzyE=
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:55:12 2026 by rpki-client