Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/SU1D1E9tb52SgoZl1jshFrTVFKo.roa
File:                     SU1D1E9tb52SgoZl1jshFrTVFKo.roa (raw, json)
Hash identifier:          tKqceLiF4Zwqs/xvzBojbCslagEmWJXSdJCybOKbzo4=
Subject key identifier:   49:4D:43:D4:4F:6D:6F:9D:92:82:86:65:D6:3B:21:16:B4:D5:14:AA
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       71
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/SU1D1E9tb52SgoZl1jshFrTVFKo.roa
Signing time:             Sun 01 Feb 2026 01:35:56 +0000
ROA not before:           Sun 01 Feb 2026 01:35:56 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        203.223.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Feb  1 01:35:56 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=494D43D44F6D6F9D92828665D63B2116B4D514AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:d0:1c:3c:65:69:0f:91:5d:bd:30:fe:c1:
                    fc:1b:b0:e5:fe:08:e8:ee:7d:1d:b0:3d:36:15:42:
                    47:f5:fc:ef:f5:59:6b:70:33:a6:b5:5e:f7:17:51:
                    92:b3:0a:9e:6a:29:5b:b0:e0:e9:00:3c:c7:34:54:
                    a3:29:4b:c5:86:b4:0f:5f:30:f4:08:94:92:34:7b:
                    b5:e7:2f:d5:a4:1d:9c:61:23:41:5f:c4:5d:df:96:
                    f9:08:4f:f3:76:31:28:f2:92:f7:bd:69:cf:6d:05:
                    13:dc:d5:df:94:e2:1d:ac:24:ed:f7:51:14:a6:56:
                    10:52:22:9a:f8:8a:12:2e:1d:5f:76:ee:47:73:92:
                    d4:16:2d:b3:eb:c2:55:ab:8d:59:c1:6a:02:c7:a3:
                    bb:90:50:62:c4:a5:e7:8f:e5:6f:65:19:30:63:ff:
                    46:51:96:b3:79:a6:41:6e:95:d3:5d:c5:4d:7b:9b:
                    c9:f6:66:2c:59:f3:ed:c1:13:0a:13:ff:b7:90:65:
                    8c:6d:2d:57:00:4d:6b:f9:78:b2:d6:8c:11:c0:e1:
                    86:bb:88:6a:7b:46:b0:1b:0c:6d:11:a5:2f:49:04:
                    41:7e:e8:8d:4a:a4:99:2c:e3:62:2f:01:41:1c:88:
                    63:8e:01:b0:6b:a2:6f:a8:9f:5f:75:94:bd:9b:45:
                    4b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4D:43:D4:4F:6D:6F:9D:92:82:86:65:D6:3B:21:16:B4:D5:14:AA
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/SU1D1E9tb52SgoZl1jshFrTVFKo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:75:bc:70:24:6a:43:48:db:8a:6c:85:ac:9a:a0:de:28:3c:
         f5:3a:47:a0:aa:85:f4:8b:9c:a4:38:01:c7:03:39:44:ee:8a:
         ef:40:c3:a8:e3:b2:af:36:67:f7:5b:25:7f:ac:9b:f3:85:42:
         ff:87:03:d1:35:a9:46:b6:d7:56:17:ec:53:06:3b:5a:4d:ff:
         30:d2:fb:e0:63:93:ef:69:b6:6a:a6:2b:17:ab:51:04:69:69:
         3e:b5:fd:e4:f1:cb:da:47:de:f5:e8:be:dd:59:ae:2d:4f:d4:
         49:25:dd:cf:c6:2f:2e:ac:28:83:ca:d5:42:87:2e:f5:cf:f9:
         8e:2b:30:89:df:13:c2:ef:59:aa:8e:cb:dc:17:f2:84:04:38:
         95:dc:a5:0b:ca:89:31:34:c7:ab:9e:21:ab:88:21:dd:54:fd:
         2b:01:e7:2d:f5:68:70:e1:89:cf:3d:0b:42:81:6a:d2:27:71:
         3a:78:20:6e:a1:32:37:12:b6:a7:6c:30:34:49:3a:98:cd:3b:
         16:08:49:67:4b:d8:7a:a5:ba:b9:c5:17:6d:0a:f6:c0:13:c4:
         9c:cd:46:7e:5a:61:b8:24:1c:fc:a0:c6:6e:a3:90:ae:a3:e9:
         00:db:72:1d:21:df:2d:a7:2b:8f:6c:8c:27:da:0a:7c:11:14:
         1c:bf:1a:44
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG
OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI2MDIwMTAx
MzU1NloXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoNDk0RDQzRDQ0RjZENkY5
RDkyODI4NjY1RDYzQjIxMTZCNEQ1MTRBQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALPm0Bw8ZWkPkV29MP7B/Buw5f4I6O59HbA9NhVCR/X87/VZa3Az
prVe9xdRkrMKnmopW7Dg6QA8xzRUoylLxYa0D18w9AiUkjR7tecv1aQdnGEjQV/E
Xd+W+QhP83YxKPKS971pz20FE9zV35TiHawk7fdRFKZWEFIimviKEi4dX3buR3OS
1BYts+vCVauNWcFqAseju5BQYsSl54/lb2UZMGP/RlGWs3mmQW6V013FTXubyfZm
LFnz7cETChP/t5BljG0tVwBNa/l4staMEcDhhruIantGsBsMbRGlL0kEQX7ojUqk
mSzjYi8BQRyIY44BsGuib6ifX3WUvZtFSy8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRJTUPUT21vnZKChmXWOyEWtNUUqjAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo
xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf
MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwODIyL1NVMUQxRTl0YjUyU2dvWmwxanNoRnJUVkZLby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALL37QwDQYJKoZIhvcNAQELBQADggEBAEV1vHAkakNI24pshayaoN4o
PPU6R6CqhfSLnKQ4AccDOUTuiu9Aw6jjsq82Z/dbJX+sm/OFQv+HA9E1qUa211YX
7FMGO1pN/zDS++Bjk+9ptmqmKxerUQRpaT61/eTxy9pH3vXovt1Zri1P1Ekl3c/G
Ly6sKIPK1UKHLvXP+Y4rMInfE8LvWaqOy9wX8oQEOJXcpQvKiTE0x6ueIauIId1U
/SsB5y31aHDhic89C0KBatIncTp4IG6hMjcStqdsMDRJOpjNOxYISWdL2HqlurnF
F20K9sATxJzNRn5aYbgkHPygxm6jkK6j6QDbch0h3y2nK49sjCfaCnwRFBy/GkQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:57:53 2026 by rpki-client