Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1453/iuijm8h1ujbtjlJ385Qedc2wVSw.roa
File:                     iuijm8h1ujbtjlJ385Qedc2wVSw.roa (raw, json)
Hash identifier:          S8MN8BBUTpqyY4i9r4F1QK9NcCaFqxYaEDfkqnfLccU=
Subject key identifier:   8A:E8:A3:9B:C8:75:BA:36:ED:8E:52:77:F3:94:1E:75:CD:B0:55:2C
Certificate issuer:       /CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
Certificate serial:       24
Authority key identifier: 01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/iuijm8h1ujbtjlJ385Qedc2wVSw.roa
Signing time:             Tue 31 Mar 2026 08:41:52 +0000
ROA not before:           Tue 31 Mar 2026 08:41:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        202.255.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
        Validity
            Not Before: Mar 31 08:41:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8AE8A39BC875BA36ED8E5277F3941E75CDB0552C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:51:f5:8d:25:10:1e:6e:51:87:0d:86:c2:
                    29:d7:a1:be:9a:b2:21:ce:6e:b6:d4:04:60:3d:43:
                    85:2d:f8:06:23:b4:c0:b1:cb:ae:92:4d:c4:84:29:
                    20:00:55:d4:dd:d6:19:53:8a:4b:77:8e:b4:51:de:
                    69:ae:b9:4d:91:ab:e0:dd:0d:f3:fe:2c:1a:5a:e9:
                    53:3d:69:1e:b4:f2:e2:09:0e:c4:71:21:d5:0a:e3:
                    6c:72:37:a7:12:02:c7:a5:ca:e8:20:2c:e8:ab:06:
                    63:c9:29:83:f0:e2:e2:21:d3:f0:10:e0:44:6c:03:
                    db:99:eb:ee:c1:cb:41:67:3d:95:d3:89:a9:db:7d:
                    a2:d5:07:a4:11:8a:9b:90:2c:f6:b9:22:be:66:f8:
                    44:8b:ce:44:b2:be:0f:2f:12:4e:1a:bb:3a:05:e8:
                    74:01:01:c2:11:85:f1:db:0f:96:cc:85:8b:46:c3:
                    bd:1e:2b:4c:45:7f:fe:45:ac:1a:2c:bb:15:8e:5f:
                    b6:cc:f5:df:99:48:7e:e2:ed:e7:8d:fd:0d:3f:b2:
                    fa:fe:ff:e5:36:60:c2:a0:8b:1b:4d:fe:c9:e2:4e:
                    0d:b8:76:5f:72:b3:38:81:0f:91:50:c6:ed:26:c3:
                    41:08:2b:9b:6b:ba:b4:86:36:65:43:d0:65:80:32:
                    33:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E8:A3:9B:C8:75:BA:36:ED:8E:52:77:F3:94:1E:75:CD:B0:55:2C
            X509v3 Authority Key Identifier:
                keyid:01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/iuijm8h1ujbtjlJ385Qedc2wVSw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:78:09:01:c3:26:19:29:46:72:4e:8d:6e:5f:41:48:7a:be:
         76:6a:dd:05:04:5c:0a:a2:b5:1e:b5:8e:88:d6:3b:d9:62:ad:
         e5:75:a5:c6:39:5f:7a:8e:71:7e:0e:b2:70:ce:8f:3b:c5:a6:
         40:7f:0b:b0:f8:22:ce:e3:a9:b9:0a:34:e5:68:43:90:b9:f3:
         01:d0:7b:66:48:43:f1:30:00:fd:22:1a:d6:bb:30:92:28:99:
         67:e7:d4:08:4d:37:69:ce:8e:c1:b1:a7:9d:26:d4:68:ad:2b:
         4f:34:85:ff:f5:bb:e3:da:8e:87:24:f1:4b:62:9f:ad:6f:f3:
         34:1a:3f:fb:44:61:7d:d3:49:9a:bc:32:36:08:46:c4:d6:7f:
         41:f1:1e:4c:2f:0a:fc:90:aa:b9:8c:9f:bf:38:15:a0:5b:0a:
         31:32:71:dd:b1:db:49:1a:93:1d:5b:1a:85:fe:b8:54:f9:82:
         62:d8:44:ef:ea:6b:0a:5b:58:6f:6e:83:ad:99:aa:34:e5:15:
         68:33:8e:b7:3d:8b:e2:55:4c:06:3c:b9:30:f8:f8:a7:9a:c8:
         ac:0a:48:47:df:b0:e4:db:16:52:4a:77:bd:f4:6e:d4:9c:9d:
         31:e7:61:00:10:6e:cd:4d:6f:22:8b:e5:53:1b:29:a2:7a:19:
         ba:d6:c0:1b
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMTFB
NTU2RkZDNEJBMzlFQjkwQTU5MjRBMzZBRkRBMzdFOTgxOUI2MB4XDTI2MDMzMTA4
NDE1MloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEFFOEEzOUJDODc1QkEz
NkVEOEU1Mjc3RjM5NDFFNzVDREIwNTUyQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALQcUfWNJRAeblGHDYbCKdehvpqyIc5uttQEYD1DhS34BiO0wLHL
rpJNxIQpIABV1N3WGVOKS3eOtFHeaa65TZGr4N0N8/4sGlrpUz1pHrTy4gkOxHEh
1QrjbHI3pxICx6XK6CAs6KsGY8kpg/Di4iHT8BDgRGwD25nr7sHLQWc9ldOJqdt9
otUHpBGKm5As9rkivmb4RIvORLK+Dy8SThq7OgXodAEBwhGF8dsPlsyFi0bDvR4r
TEV//kWsGiy7FY5ftsz135lIfuLt5439DT+y+v7/5TZgwqCLG03+yeJODbh2X3Kz
OIEPkVDG7SbDQQgrm2u6tIY2ZUPQZYAyM9cCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBSK6KObyHW6Nu2OUnfzlB51zbBVLDAfBgNVHSMEGDAWgBQBGlVv/EujnrkKWSSj
av2jfpgZtjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTQ1My9BUnBWYl94TG81NjVDbGtrbzJyOW8zNllHYlkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9BUnBWYl94TG81NjVDbGtrbzJyOW8z
NllHYlkuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTQ1My9pdWlqbThoMXVqYnRqbEozODVRZWRjMndWU3cucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyv9nMA0GCSqGSIb3DQEBCwUAA4IB
AQCYeAkBwyYZKUZyTo1uX0FIer52at0FBFwKorUetY6I1jvZYq3ldaXGOV96jnF+
DrJwzo87xaZAfwuw+CLO46m5CjTlaEOQufMB0HtmSEPxMAD9IhrWuzCSKJln59QI
TTdpzo7BsaedJtRorStPNIX/9bvj2o6HJPFLYp+tb/M0Gj/7RGF900mavDI2CEbE
1n9B8R5MLwr8kKq5jJ+/OBWgWwoxMnHdsdtJGpMdWxqF/rhU+YJi2ETv6msKW1hv
boOtmao05RVoM463PYviVUwGPLkw+PinmsisCkhH37Dk2xZSSne99G7UnJ0x52EA
EG7NTW8ii+VTGymiehm61sAb
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:28 2026 by rpki-client