Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13131/e51geOF9ihhQ6h5pe-eBHHsSUsE.roa
File:                     e51geOF9ihhQ6h5pe-eBHHsSUsE.roa (raw, json)
Hash identifier:          UeHrnanOEu4HMR75iIf0D0NlsUbpqmekRQvamcM8Sts=
Subject key identifier:   7B:9D:60:78:E1:7D:8A:18:50:EA:1E:69:7B:E7:81:1C:7B:12:52:C1
Certificate issuer:       /CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
Certificate serial:       79
Authority key identifier: FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/e51geOF9ihhQ6h5pe-eBHHsSUsE.roa
Signing time:             Tue 31 Mar 2026 07:27:08 +0000
ROA not before:           Tue 31 Mar 2026 07:27:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38639
IP address blocks:        220.150.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
        Validity
            Not Before: Mar 31 07:27:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7B9D6078E17D8A1850EA1E697BE7811C7B1252C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:f3:42:2e:67:cb:6c:57:7c:fb:2b:7a:7a:
                    27:b3:72:ad:3c:01:ec:03:b4:5d:dc:b9:4c:57:ae:
                    84:75:7e:4b:44:f6:bb:c0:16:c2:e0:ec:e6:b7:5b:
                    44:b4:4f:90:58:42:28:d8:be:df:b3:2d:06:4c:85:
                    b2:13:1a:d1:bf:01:96:72:a0:99:86:ee:0e:99:22:
                    da:cd:7a:8e:b9:e3:a1:c7:d8:ab:10:f3:19:6c:34:
                    97:96:a0:99:0d:15:9a:83:ab:f5:8b:d8:f4:62:8d:
                    e2:e1:42:cf:81:db:6b:1b:c0:dc:02:e0:8a:c2:09:
                    32:48:d7:81:19:60:b3:4d:21:dd:17:5d:e0:b9:5a:
                    a8:36:ca:21:4e:e1:13:ee:95:44:e9:22:94:1a:21:
                    a4:d1:81:cb:e8:7b:94:6d:f8:b1:80:e1:07:8a:b8:
                    34:ce:24:69:c5:0c:06:58:0d:36:05:68:b9:d7:4e:
                    a3:2d:f3:7a:df:f8:65:1d:05:d5:00:e3:f4:27:41:
                    2c:ae:85:fb:41:f4:ae:40:e3:07:63:58:69:1c:c5:
                    be:d0:04:64:da:b8:15:19:c4:53:19:59:99:d6:97:
                    b2:2f:84:51:0d:2b:29:46:30:df:6e:b3:2b:ea:45:
                    f6:65:45:6f:37:64:06:e4:a2:4b:e8:99:4b:fd:4b:
                    8a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9D:60:78:E1:7D:8A:18:50:EA:1E:69:7B:E7:81:1C:7B:12:52:C1
            X509v3 Authority Key Identifier:
                keyid:FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/e51geOF9ihhQ6h5pe-eBHHsSUsE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:63:d9:85:0e:f9:2d:0a:51:e8:1a:43:1a:fe:bf:3c:c1:9d:
         4d:70:c0:29:0b:86:3f:81:87:95:9f:5b:7c:33:7e:4b:ac:36:
         ad:66:d4:40:c3:c8:02:c5:48:b5:3f:fa:70:45:1b:74:e4:61:
         5f:c5:9b:83:d4:76:a4:07:9b:f7:da:a0:14:d9:49:0b:fd:12:
         34:ca:dd:df:cd:4c:e9:85:a5:bf:1d:a4:23:25:d8:ed:02:19:
         1d:41:5a:57:5e:c1:e3:84:cd:47:82:a8:21:9a:f5:34:a8:af:
         03:1d:91:fc:24:a7:4e:fb:18:76:03:e6:18:c2:7c:40:df:8d:
         f0:68:63:4b:b1:1d:76:9d:76:4a:2c:00:62:a4:e9:89:a1:dc:
         ee:86:7a:8d:e4:81:f1:7b:2e:d3:8d:74:64:ba:e1:88:a4:e4:
         4a:96:01:50:67:ff:4b:ff:7c:17:30:43:8b:83:ba:c5:35:70:
         19:a0:bc:a9:a3:b2:d3:14:f9:cd:7c:c2:4b:2a:e7:d4:b0:3c:
         e9:2c:63:76:a1:7f:92:a2:ab:5d:2a:da:38:bd:6a:1f:d8:e6:
         1a:44:fe:f4:a1:9e:42:da:d1:4e:dd:9b:03:d7:10:b5:68:7c:
         3f:b1:cc:ca:ec:40:73:d2:3d:42:54:3c:d1:1e:33:03:20:61:
         ae:88:cb:12
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGRDEz
RDgyMkE0REQ3QkEwNTA3OEY5RTYwMDI1RjhCRkYxMUJFRjgyMB4XDTI2MDMzMTA3
MjcwOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0I5RDYwNzhFMTdEOEEx
ODUwRUExRTY5N0JFNzgxMUM3QjEyNTJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN+U80IuZ8tsV3z7K3p6J7NyrTwB7AO0Xdy5TFeuhHV+S0T2u8AW
wuDs5rdbRLRPkFhCKNi+37MtBkyFshMa0b8BlnKgmYbuDpki2s16jrnjocfYqxDz
GWw0l5agmQ0VmoOr9YvY9GKN4uFCz4HbaxvA3ALgisIJMkjXgRlgs00h3Rdd4Lla
qDbKIU7hE+6VROkilBohpNGBy+h7lG34sYDhB4q4NM4kacUMBlgNNgVouddOoy3z
et/4ZR0F1QDj9CdBLK6F+0H0rkDjB2NYaRzFvtAEZNq4FRnEUxlZmdaXsi+EUQ0r
KUYw326zK+pF9mVFbzdkBuSiS+iZS/1LiuECAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBR7nWB44X2KGFDqHml754EcexJSwTAfBgNVHSMEGDAWgBT9E9gipN17oFB4+eYA
Jfi/8RvvgjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMxMzEvX1JQWUlxVGRlNkJRZVBubUFDWDR2X0ViNzRJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX1JQWUlxVGRlNkJRZVBubUFDWDR2
X0ViNzRJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEzMTMxL2U1MWdlT0Y5aWhoUTZoNXBlLWVCSEhzU1VzRS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPclsAwDQYJKoZIhvcNAQELBQAD
ggEBAChj2YUO+S0KUegaQxr+vzzBnU1wwCkLhj+Bh5WfW3wzfkusNq1m1EDDyALF
SLU/+nBFG3TkYV/Fm4PUdqQHm/faoBTZSQv9EjTK3d/NTOmFpb8dpCMl2O0CGR1B
WldeweOEzUeCqCGa9TSorwMdkfwkp077GHYD5hjCfEDfjfBoY0uxHXaddkosAGKk
6Ymh3O6Geo3kgfF7LtONdGS64Yik5EqWAVBn/0v/fBcwQ4uDusU1cBmgvKmjstMU
+c18wksq59SwPOksY3ahf5Kiq10q2ji9ah/Y5hpE/vShnkLa0U7dmwPXELVofD+x
zMrsQHPSPUJUPNEeMwMgYa6IyxI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:39 2026 by rpki-client