Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/2drO1Z2SrgoLMqnncCcYIuySgJc.roa
File:                     2drO1Z2SrgoLMqnncCcYIuySgJc.roa (raw, json)
Hash identifier:          wiZHUkoUQcHGufxCfVqmxOKcby3563m71geiIH6b9CE=
Subject key identifier:   D9:DA:CE:D5:9D:92:AE:0A:0B:32:A9:E7:70:27:18:22:EC:92:80:97
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       FC
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/2drO1Z2SrgoLMqnncCcYIuySgJc.roa
Signing time:             Tue 31 Mar 2026 07:31:15 +0000
ROA not before:           Tue 31 Mar 2026 07:31:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18126
IP address blocks:        218.216.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Mar 31 07:31:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D9DACED59D92AE0A0B32A9E770271822EC928097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:2f:fd:ee:0d:5b:a4:78:51:b3:81:77:7d:
                    b6:68:05:97:9f:fe:15:68:f2:17:73:ea:82:2c:4b:
                    ff:b7:6e:52:e6:bd:43:05:34:50:92:fc:60:65:5c:
                    6c:0f:c1:6d:bf:03:a7:65:7d:91:13:f3:f5:d5:b9:
                    4f:02:60:a0:6c:05:e6:fe:1e:7c:1a:d7:3e:07:e5:
                    82:c1:ce:0b:1a:e1:60:f4:ff:e9:d4:a2:96:40:2f:
                    c3:f0:a0:04:68:7c:3b:70:a8:bb:25:b9:19:41:e3:
                    6e:11:0c:0b:fd:e5:da:49:0b:01:fd:3a:bb:15:64:
                    51:74:a6:06:cd:fe:b3:44:d4:05:a0:18:f1:18:71:
                    5f:f5:b2:b7:37:9a:d7:b3:e1:7d:d0:7c:cf:ab:05:
                    99:51:d3:41:a0:6f:97:53:de:08:7b:4d:2b:99:aa:
                    1e:bf:cc:ff:12:b4:6e:c1:e8:ba:e5:f9:7c:18:06:
                    f0:dd:03:a2:ed:e2:09:64:13:2f:ec:e1:ad:99:fb:
                    7c:6c:9f:9f:26:59:a9:7b:30:24:a1:64:db:23:03:
                    dd:b9:36:47:6f:25:38:17:7a:df:5a:fc:f8:0c:3d:
                    e6:1c:fa:11:d9:97:77:98:de:58:cd:2f:6d:01:d6:
                    9a:33:70:b6:7a:c8:3b:28:c0:c7:c8:9a:71:87:14:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DA:CE:D5:9D:92:AE:0A:0B:32:A9:E7:70:27:18:22:EC:92:80:97
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/2drO1Z2SrgoLMqnncCcYIuySgJc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:0d:0e:3a:7a:86:03:8a:9f:a1:bb:de:d5:8e:e1:90:74:43:
         57:89:0e:47:e5:2e:96:f8:2f:ee:65:ef:0c:28:1c:f0:72:7c:
         9d:ac:bc:1d:ec:20:b1:21:dd:ab:fb:5a:53:d0:c1:cb:80:13:
         a7:b8:dd:a1:a9:46:4e:2a:66:55:e1:80:f0:08:f4:9c:63:21:
         ff:a6:e2:9e:3f:b4:65:56:ae:b6:99:f1:6a:59:20:90:1e:57:
         fb:c0:1d:31:e9:b5:f0:d6:7e:37:dc:fc:48:bd:fa:c4:b8:ca:
         6f:bd:fd:b0:62:dc:9e:4d:e4:bb:e2:ac:8d:f3:6b:ac:3a:a7:
         1a:55:64:4c:bf:8d:83:a7:51:3d:49:7c:0d:ac:61:6b:0b:7a:
         42:25:2f:9a:8c:c0:3f:7b:9e:c8:f2:e1:e0:b5:db:ed:9d:b9:
         ec:38:34:12:48:50:3d:dc:f9:29:4f:32:2a:c9:40:59:5d:27:
         1d:01:f7:9e:7a:9b:95:e8:49:b4:d6:69:42:77:df:1e:64:e6:
         e4:1c:09:0d:03:e9:7b:f0:8e:bc:83:59:98:fc:90:da:35:c5:
         f8:38:a9:82:00:a8:9f:63:18:ab:8a:84:a4:f1:80:12:6d:10:
         9c:84:c4:d1:37:88:2a:9a:d4:da:b6:19:ef:fa:41:e3:92:9f:
         bf:d3:ac:71
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz
MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNjAzMzEw
NzMxMTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5REFDRUQ1OUQ5MkFF
MEEwQjMyQTlFNzcwMjcxODIyRUM5MjgwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCVC/97g1bpHhRs4F3fbZoBZef/hVo8hdz6oIsS/+3blLmvUMF
NFCS/GBlXGwPwW2/A6dlfZET8/XVuU8CYKBsBeb+Hnwa1z4H5YLBzgsa4WD0/+nU
opZAL8PwoARofDtwqLsluRlB424RDAv95dpJCwH9OrsVZFF0pgbN/rNE1AWgGPEY
cV/1src3mtez4X3QfM+rBZlR00Ggb5dT3gh7TSuZqh6/zP8StG7B6Lrl+XwYBvDd
A6Lt4glkEy/s4a2Z+3xsn58mWal7MCShZNsjA925NkdvJTgXet9a/PgMPeYc+hHZ
l3eY3ljNL20B1pozcLZ6yDsowMfImnGHFHA7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU2drO1Z2SrgoLMqnncCcYIuySgJcwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA
yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP
RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTczLzJkck8xWjJTcmdvTE1xbm5jQ2NZSXV5U2dKYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATa2LAwDQYJKoZIhvcNAQELBQADggEB
AHwNDjp6hgOKn6G73tWO4ZB0Q1eJDkflLpb4L+5l7wwoHPByfJ2svB3sILEh3av7
WlPQwcuAE6e43aGpRk4qZlXhgPAI9JxjIf+m4p4/tGVWrraZ8WpZIJAeV/vAHTHp
tfDWfjfc/Ei9+sS4ym+9/bBi3J5N5LvirI3za6w6pxpVZEy/jYOnUT1JfA2sYWsL
ekIlL5qMwD97nsjy4eC12+2duew4NBJIUD3c+SlPMirJQFldJx0B9556m5XoSbTW
aUJ33x5k5uQcCQ0D6XvwjryDWZj8kNo1xfg4qYIAqJ9jGKuKhKTxgBJtEJyExNE3
iCqa1Nq2Ge/6QeOSn7/TrHE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:56 2026 by rpki-client