Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/AvH6wmMIQ76SlDHX43Puz1_PyCM.roa
File:                     AvH6wmMIQ76SlDHX43Puz1_PyCM.roa (raw, json)
Hash identifier:          z9CZYj5cL1NJ7+ywhWz3XTCYVNdAA0sHsu3T0xsCcNw=
Subject key identifier:   02:F1:FA:C2:63:08:43:BE:92:94:31:D7:E3:73:EE:CF:5F:CF:C8:23
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       74
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/AvH6wmMIQ76SlDHX43Puz1_PyCM.roa
Signing time:             Sun 01 Feb 2026 01:35:58 +0000
ROA not before:           Sun 01 Feb 2026 01:35:58 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        219.113.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Feb  1 01:35:58 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=02F1FAC2630843BE929431D7E373EECF5FCFC823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:b9:a6:51:7c:85:5f:3f:34:ac:9e:76:52:
                    29:46:9b:9a:13:6e:69:e2:ff:f9:14:dc:88:db:c4:
                    8d:a3:99:50:57:57:b9:f3:39:ca:a7:2f:46:d3:4d:
                    fa:da:3c:38:07:2e:bd:b2:09:66:39:ed:46:f3:f5:
                    e0:ec:3c:13:90:12:c8:c8:fe:d6:5f:db:25:68:87:
                    83:7e:4b:8f:1a:0c:6e:e0:3d:dc:86:c4:ff:44:37:
                    54:17:b7:f2:b7:02:28:a3:eb:b9:f5:bb:5b:52:d3:
                    72:d1:00:50:3f:6e:40:2b:a3:04:ce:a3:f1:f6:1d:
                    65:05:72:ed:8e:a1:0c:7c:11:42:4b:fa:c0:b6:90:
                    e9:e6:48:e9:35:3b:a3:e3:e6:d1:f7:0a:ec:d3:ca:
                    cf:f9:32:1a:6b:30:08:07:34:a3:38:47:62:27:b5:
                    45:5e:61:d3:58:63:59:00:ec:b3:27:9f:b3:3c:d1:
                    53:31:4b:04:94:3d:34:81:02:eb:4e:c3:56:0b:2f:
                    84:73:de:04:77:ec:e0:51:f8:66:98:2d:6f:52:d5:
                    34:0c:50:42:6a:0d:ba:40:82:be:63:7d:bc:85:64:
                    73:1d:95:c7:bb:9c:ef:84:98:d2:35:68:1e:c3:e9:
                    f6:d0:ee:ae:f1:7c:7a:c3:bb:e5:57:1a:69:d9:d4:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F1:FA:C2:63:08:43:BE:92:94:31:D7:E3:73:EE:CF:5F:CF:C8:23
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/AvH6wmMIQ76SlDHX43Puz1_PyCM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:d4:26:c5:8d:14:9c:6c:2c:ef:c1:ac:8e:06:5b:f6:31:be:
         95:c9:f8:4b:fd:fa:5f:7d:0b:06:1c:0e:d9:11:8e:ca:a3:ac:
         89:2f:5e:5e:a8:e3:5d:6a:4c:f5:11:4a:de:87:c0:a3:85:ac:
         ab:4f:b6:cd:0a:ae:18:b2:84:22:0b:62:60:09:0a:50:ac:7e:
         96:04:62:f2:6c:ab:c3:ba:a0:58:6d:28:b0:ae:d1:14:ca:35:
         d0:4b:b1:ee:3a:4e:a2:b0:5f:ee:c9:20:e0:a7:3b:e4:41:f1:
         3f:ca:35:38:ad:00:d6:a2:ed:3d:88:74:a8:b1:71:d0:21:6e:
         5a:9e:c2:0f:c6:2a:37:3b:1e:84:6d:99:83:9c:22:12:58:2b:
         49:d0:f7:0d:3c:67:4c:fb:0e:b8:77:cd:71:89:76:ef:1c:22:
         d1:71:a2:d5:18:68:8b:68:f6:af:aa:6b:a8:d6:7c:19:5b:44:
         16:e7:15:57:d2:0b:ca:30:96:05:d8:eb:9b:aa:2a:2d:68:6b:
         f7:32:2c:ae:b2:dd:7b:99:54:7c:50:12:3b:34:82:29:2d:7e:
         fd:e3:ef:74:d7:dc:f5:b5:b5:42:da:5f:ac:e0:df:cc:02:9a:
         ce:9d:09:8c:bc:3a:6e:78:70:68:43:3e:85:28:9b:a5:ba:6a:
         f8:64:d8:95
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG
OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI2MDIwMTAx
MzU1OFoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoMDJGMUZBQzI2MzA4NDNC
RTkyOTQzMUQ3RTM3M0VFQ0Y1RkNGQzgyMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOCDuaZRfIVfPzSsnnZSKUabmhNuaeL/+RTciNvEjaOZUFdXufM5
yqcvRtNN+to8OAcuvbIJZjntRvP14Ow8E5ASyMj+1l/bJWiHg35LjxoMbuA93IbE
/0Q3VBe38rcCKKPrufW7W1LTctEAUD9uQCujBM6j8fYdZQVy7Y6hDHwRQkv6wLaQ
6eZI6TU7o+Pm0fcK7NPKz/kyGmswCAc0ozhHYie1RV5h01hjWQDssyefszzRUzFL
BJQ9NIEC607DVgsvhHPeBHfs4FH4Zpgtb1LVNAxQQmoNukCCvmN9vIVkcx2Vx7uc
74SY0jVoHsPp9tDurvF8esO75VcaadnU3ukCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQC8frCYwhDvpKUMdfjc+7PX8/IIzAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo
xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf
MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwODIyL0F2SDZ3bU1JUTc2U2xESFg0M1B1ejFfUHlDTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBATbcTAwDQYJKoZIhvcNAQELBQADggEBAEHUJsWNFJxsLO/BrI4GW/Yx
vpXJ+Ev9+l99CwYcDtkRjsqjrIkvXl6o411qTPURSt6HwKOFrKtPts0KrhiyhCIL
YmAJClCsfpYEYvJsq8O6oFhtKLCu0RTKNdBLse46TqKwX+7JIOCnO+RB8T/KNTit
ANai7T2IdKixcdAhblqewg/GKjc7HoRtmYOcIhJYK0nQ9w08Z0z7Drh3zXGJdu8c
ItFxotUYaIto9q+qa6jWfBlbRBbnFVfSC8owlgXY65uqKi1oa/cyLK6y3XuZVHxQ
Ejs0giktfv3j73TX3PW1tULaX6zg38wCms6dCYy8Om54cGhDPoUom6W6avhk2JU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:57:03 2026 by rpki-client