Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/lOC0QBrEkIV1enOwhXwKqDuoGDw.roa
File:                     lOC0QBrEkIV1enOwhXwKqDuoGDw.roa (raw, json)
Hash identifier:          WNCxfgIBgttjjNLnwKFaLW8m8wgTsK3m/BuB+S1hgRU=
Subject key identifier:   94:E0:B4:40:1A:C4:90:85:75:7A:73:B0:85:7C:0A:A8:3B:A8:18:3C
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       98
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/lOC0QBrEkIV1enOwhXwKqDuoGDw.roa
Signing time:             Tue 31 Mar 2026 07:35:19 +0000
ROA not before:           Tue 31 Mar 2026 07:35:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        153.121.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Mar 31 07:35:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=94E0B4401AC49085757A73B0857C0AA83BA8183C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:7b:a3:6d:fd:f5:f2:9f:f8:66:37:55:ba:
                    c1:98:a7:28:4f:15:a3:8d:1e:3f:fc:2c:87:51:12:
                    c4:f3:67:59:4b:eb:90:33:58:0e:9d:fb:3a:cd:82:
                    69:1a:6e:3b:7d:d3:d6:66:c5:09:1f:b1:a3:e3:84:
                    68:9b:4b:0b:74:51:51:0d:bc:1a:32:65:6d:bc:53:
                    9b:83:89:93:bd:46:59:b9:ef:15:76:31:60:c9:4b:
                    7a:95:58:1f:1e:ef:d0:ca:da:f9:4e:d9:24:3f:70:
                    f7:40:87:6a:a4:5e:b4:0e:1c:92:0f:65:10:8a:a9:
                    f8:1f:72:81:e8:71:8d:9f:26:2b:7d:c4:82:4e:5c:
                    52:26:bd:03:c2:87:35:c1:9b:7a:77:fc:b6:0b:56:
                    cc:a6:d0:03:57:b7:69:41:33:6f:a1:81:43:75:6d:
                    70:ec:fb:44:b4:cb:5f:22:a4:dc:65:e6:db:72:c6:
                    37:7d:80:b6:41:d8:cb:14:15:ed:15:25:52:3a:07:
                    8b:21:a9:bf:7b:4f:39:b3:26:10:c7:8d:ab:df:69:
                    c3:d7:ae:04:90:5f:74:10:7d:c4:a3:01:05:b3:4a:
                    62:38:6b:ae:c0:28:77:08:64:99:eb:6f:76:64:43:
                    98:03:d6:d0:94:ef:39:ae:9f:14:f4:12:d3:2b:b1:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E0:B4:40:1A:C4:90:85:75:7A:73:B0:85:7C:0A:A8:3B:A8:18:3C
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/lOC0QBrEkIV1enOwhXwKqDuoGDw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:85:5d:ae:1f:eb:b2:d0:90:2d:66:74:1e:1d:8f:79:74:
         88:06:0b:83:d3:7e:b8:3b:12:7e:de:ad:fa:32:be:50:1a:ae:
         92:df:c9:02:29:2c:8d:21:2d:ae:b9:ee:5c:3d:14:3a:30:19:
         95:6d:4a:91:cb:30:85:5c:4a:b6:e8:41:27:16:c7:37:be:80:
         f5:ef:79:ab:95:db:75:e4:fe:11:09:d6:5e:90:1d:6a:a0:98:
         13:0e:9b:85:1f:9d:c4:1e:9a:1a:18:f8:0e:3c:73:38:ce:e6:
         df:62:e0:8a:b6:23:6c:8c:51:81:d4:c3:dd:4f:05:80:f1:79:
         fa:5c:c9:b4:28:cd:0d:53:c9:67:fa:51:12:44:48:67:25:91:
         4f:0f:a6:41:3a:c5:c7:36:37:92:af:3e:40:d4:b7:89:37:1e:
         20:7a:3d:2a:56:55:7e:1a:ef:c0:9c:64:b6:62:f9:66:3e:75:
         eb:a5:2b:44:00:e3:f2:1d:0d:e5:6f:a4:11:d4:df:0d:a0:36:
         23:81:14:fa:a8:7a:80:5d:58:2d:39:8b:32:38:f7:82:f8:07:
         ec:3b:92:f8:99:10:df:c2:ae:c6:e4:2c:28:bf:eb:f1:b3:39:
         dc:0e:62:6b:c6:cb:97:31:8b:53:e9:f6:62:b3:f2:df:c5:f2:
         e9:63:6d:b9
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
MTU2NDlBODI1N0Y2NEZDOTQyMTY3RTMxMEFEMzhBRDAyQ0RCQzAeFw0yNjAzMzEw
NzM1MTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0RTBCNDQwMUFDNDkw
ODU3NTdBNzNCMDg1N0MwQUE4M0JBODE4M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4p3ujbf318p/4ZjdVusGYpyhPFaONHj/8LIdREsTzZ1lL65Az
WA6d+zrNgmkabjt909ZmxQkfsaPjhGibSwt0UVENvBoyZW28U5uDiZO9Rlm57xV2
MWDJS3qVWB8e79DK2vlO2SQ/cPdAh2qkXrQOHJIPZRCKqfgfcoHocY2fJit9xIJO
XFImvQPChzXBm3p3/LYLVsym0ANXt2lBM2+hgUN1bXDs+0S0y18ipNxl5ttyxjd9
gLZB2MsUFe0VJVI6B4shqb97TzmzJhDHjavfacPXrgSQX3QQfcSjAQWzSmI4a67A
KHcIZJnrb3ZkQ5gD1tCU7zmunxT0EtMrsVLtAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUlOC0QBrEkIV1enOwhXwKqDuoGDwwHwYDVR0jBBgwFoAU78FWSaglf2T8lCFn
4xCtOK0CzbwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzExMjQ3Lzc4RldTYWdsZjJUOGxDRm40eEN0T0swQ3pidy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzc4RldTYWdsZjJUOGxDRm40eEN0
T0swQ3pidy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMTI0Ny9sT0MwUUJyRWtJVjFlbk93aFh3S3FEdW9HRHcucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmXmAMA0GCSqGSIb3DQEBCwUA
A4IBAQAW2IVdrh/rstCQLWZ0Hh2PeXSIBguD0364OxJ+3q36Mr5QGq6S38kCKSyN
IS2uue5cPRQ6MBmVbUqRyzCFXEq26EEnFsc3voD173mrldt15P4RCdZekB1qoJgT
DpuFH53EHpoaGPgOPHM4zubfYuCKtiNsjFGB1MPdTwWA8Xn6XMm0KM0NU8ln+lES
REhnJZFPD6ZBOsXHNjeSrz5A1LeJNx4gej0qVlV+Gu/AnGS2YvlmPnXrpStEAOPy
HQ3lb6QR1N8NoDYjgRT6qHqAXVgtOYsyOPeC+AfsO5L4mRDfwq7G5Cwov+vxsznc
DmJrxsuXMYtT6fZis/LfxfLpY225
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:52 2026 by rpki-client