Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/seANHiavISC1AYZrssHHIPJf1Os.roa
File:                     seANHiavISC1AYZrssHHIPJf1Os.roa (raw, json)
Hash identifier:          Tnjeb0y/3q53y7UBrQXcMOVeZkBcc219MOVSOLJMyyk=
Subject key identifier:   B1:E0:0D:1E:26:AF:21:20:B5:01:86:6B:B2:C1:C7:20:F2:5F:D4:EB
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       89
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/seANHiavISC1AYZrssHHIPJf1Os.roa
Signing time:             Tue 31 Mar 2026 07:32:39 +0000
ROA not before:           Tue 31 Mar 2026 07:32:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2907
IP address blocks:        202.241.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Mar 31 07:32:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B1E00D1E26AF2120B501866BB2C1C720F25FD4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:7f:86:4a:fe:fa:ce:6c:76:2c:59:58:f2:
                    f8:17:f3:53:6e:03:68:5e:44:1d:f6:d4:6d:00:a9:
                    3c:b9:8c:96:7d:c4:fb:3c:a3:c5:3a:1c:71:e8:91:
                    e7:02:fc:eb:4b:5a:76:09:2c:91:e1:54:d8:74:99:
                    c8:c5:33:06:1f:7f:6d:e1:c0:4c:1a:96:77:68:f5:
                    74:15:05:9c:e1:08:e3:ef:ff:97:52:4b:96:07:a4:
                    c6:8a:2b:dc:c2:83:76:a8:18:a5:fd:80:c0:37:b2:
                    db:8f:e5:94:78:d0:e0:49:2e:64:45:52:37:cd:17:
                    ed:5d:b2:d7:30:69:34:74:70:ef:cf:30:b7:e3:61:
                    a9:eb:17:a2:d7:8f:83:da:f1:01:5f:62:e4:28:d8:
                    9f:ee:7a:42:3a:8a:b0:de:52:de:ca:c2:68:46:84:
                    9b:d9:c3:5f:7a:c1:d8:d5:d3:a3:58:0b:bf:af:4a:
                    a8:b8:b7:8d:2d:03:09:16:7c:de:46:69:e2:5c:9e:
                    3f:df:05:dd:72:1e:d9:c1:62:16:34:84:7f:98:8c:
                    9c:a7:05:6f:e0:d4:ce:b1:21:ab:8e:9b:00:64:a3:
                    bf:a2:12:97:cf:a5:48:6b:7b:e2:81:ca:8f:86:39:
                    0c:3c:99:4c:e3:c0:d2:04:67:18:5e:3c:9c:f0:5e:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E0:0D:1E:26:AF:21:20:B5:01:86:6B:B2:C1:C7:20:F2:5F:D4:EB
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/seANHiavISC1AYZrssHHIPJf1Os.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.241.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1d:17:b6:96:b4:a7:75:66:2e:ad:28:a4:7e:89:6e:c1:9d:1c:
         e5:fe:86:b8:ca:9b:b9:67:2c:3c:11:53:9f:71:a5:dc:90:01:
         4d:86:f4:73:ce:70:6d:37:7f:1f:0f:52:50:0e:16:75:b0:20:
         1e:74:28:f8:c1:1b:18:97:30:fa:65:a7:05:32:6f:d0:d2:f1:
         7d:a8:11:be:bc:ea:5d:9e:d5:ce:3a:2c:3d:86:02:16:10:74:
         bf:fb:89:c1:c0:f3:74:59:6b:e3:15:9f:8a:99:ea:77:a7:11:
         58:f3:d3:b1:b8:ec:9f:af:2b:d4:74:bf:75:0c:db:54:07:fb:
         51:fa:e0:7e:e5:ba:f1:b3:b8:c6:65:ef:b6:71:3c:7f:c3:aa:
         7b:c8:97:1e:72:14:cf:36:a1:59:08:6f:df:aa:4f:ed:be:fb:
         52:18:7d:f5:3e:80:47:71:8f:ac:16:ec:d1:ff:f9:8e:8a:71:
         db:ae:2c:4f:d0:d3:d4:8a:db:ea:80:d8:b2:46:64:ef:fe:50:
         a1:72:99:a2:c3:60:12:75:30:7b:0a:d1:97:96:1d:33:8c:5a:
         e7:62:11:a0:1b:14:71:ec:ad:05:52:6f:48:08:18:4e:79:74:
         9e:24:70:9c:f0:fc:2a:60:7a:d6:b4:68:bb:87:d8:7b:f8:60:
         71:bf:a9:bd
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTU4
OUVFQ0NDNjcxOEM2NTI2MzhDRjRFOTJDNjAwMDNDNTZGQjY5NzAeFw0yNjAzMzEw
NzMyMzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxRTAwRDFFMjZBRjIx
MjBCNTAxODY2QkIyQzFDNzIwRjI1RkQ0RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+4H+GSv76zmx2LFlY8vgX81NuA2heRB321G0AqTy5jJZ9xPs8
o8U6HHHokecC/OtLWnYJLJHhVNh0mcjFMwYff23hwEwalndo9XQVBZzhCOPv/5dS
S5YHpMaKK9zCg3aoGKX9gMA3stuP5ZR40OBJLmRFUjfNF+1dstcwaTR0cO/PMLfj
YanrF6LXj4Pa8QFfYuQo2J/uekI6irDeUt7KwmhGhJvZw196wdjV06NYC7+vSqi4
t40tAwkWfN5GaeJcnj/fBd1yHtnBYhY0hH+YjJynBW/g1M6xIauOmwBko7+iEpfP
pUhre+KByo+GOQw8mUzjwNIEZxhePJzwXiZ1AgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUseANHiavISC1AYZrssHHIPJf1OswHwYDVR0jBBgwFoAUFYnuzMZxjGUmOM9O
ksYAA8VvtpcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEyL0ZZbnV6TVp4akdVbU9NOU9rc1lBQThWdnRwYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZZbnV6TVp4akdVbU9NOU9rc1lBQThW
dnRwYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xMi9zZUFOSGlhdklTQzFBWVpyc3NISElQSmYxT3Mucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHyvEAMA0GCSqGSIb3DQEBCwUAA4IBAQAd
F7aWtKd1Zi6tKKR+iW7BnRzl/oa4ypu5Zyw8EVOfcaXckAFNhvRzznBtN38fD1JQ
DhZ1sCAedCj4wRsYlzD6ZacFMm/Q0vF9qBG+vOpdntXOOiw9hgIWEHS/+4nBwPN0
WWvjFZ+Kmep3pxFY89OxuOyfryvUdL91DNtUB/tR+uB+5brxs7jGZe+2cTx/w6p7
yJcechTPNqFZCG/fqk/tvvtSGH31PoBHcY+sFuzR//mOinHbrixP0NPUitvqgNiy
RmTv/lChcpmiw2ASdTB7CtGXlh0zjFrnYhGgGxRx7K0FUm9ICBhOeXSeJHCc8Pwq
YHrWtGi7h9h7+GBxv6m9
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:38:32 2026 by rpki-client