Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/e-XeVgp-oGkKvtTzfYFrgbBLFkM.roa
File:                     e-XeVgp-oGkKvtTzfYFrgbBLFkM.roa (raw, json)
Hash identifier:          V/eyD/EY5hAIX90SeRs0wZMUr24IKB71E54R1bWLF8s=
Subject key identifier:   7B:E5:DE:56:0A:7E:A0:69:0A:BE:D4:F3:7D:81:6B:81:B0:4B:16:43
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       FD
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/e-XeVgp-oGkKvtTzfYFrgbBLFkM.roa
Signing time:             Tue 31 Mar 2026 07:31:15 +0000
ROA not before:           Tue 31 Mar 2026 07:31:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18126
IP address blocks:        202.124.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Mar 31 07:31:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7BE5DE560A7EA0690ABED4F37D816B81B04B1643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:eb:cb:40:07:5c:ac:43:ac:bb:24:b8:eb:
                    8f:39:58:aa:a5:52:8c:37:7f:d0:73:3e:b0:b5:d4:
                    7c:e3:76:60:28:44:48:3f:2b:b6:39:33:80:41:14:
                    75:62:b5:2a:74:6a:9a:37:ea:b8:c4:28:5f:68:de:
                    80:15:e9:6b:05:bd:d2:42:82:fa:74:e6:47:f6:6a:
                    6a:44:ce:88:ea:6d:63:1d:06:66:26:c8:ee:55:31:
                    74:7a:aa:45:ed:05:b6:fe:96:36:f2:5f:d4:62:c6:
                    f1:90:02:0f:11:33:ce:37:11:1b:95:8b:11:67:52:
                    28:0f:36:07:94:53:50:55:5f:ef:0b:45:af:70:a4:
                    95:7b:d0:c0:6e:37:ad:d1:2a:03:bd:98:4b:ab:2d:
                    5b:ca:37:7f:d9:28:46:74:6e:b9:47:0d:9c:a7:25:
                    b6:3d:b4:e6:a4:12:37:12:7a:58:07:fd:c5:f0:f4:
                    9c:cb:db:6f:07:18:6c:85:65:bf:47:a6:67:23:62:
                    df:74:ba:39:4d:58:e2:bc:ac:dc:33:60:2e:b3:fa:
                    8f:b9:20:a0:1c:c1:e8:7e:88:0d:6d:0c:fa:59:ba:
                    ab:d4:4f:2d:04:54:1a:c4:d2:30:35:a9:69:c0:73:
                    af:98:e6:be:14:76:c5:88:34:d8:40:1d:2d:77:ac:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E5:DE:56:0A:7E:A0:69:0A:BE:D4:F3:7D:81:6B:81:B0:4B:16:43
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/e-XeVgp-oGkKvtTzfYFrgbBLFkM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.124.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:d9:88:7a:9d:94:c1:98:b3:0a:a6:63:f5:c4:24:e9:67:2e:
         6d:07:73:42:b1:89:c9:ea:e4:6a:04:f9:44:06:7e:25:7d:e3:
         d1:0d:dc:bb:af:1b:b5:57:66:f5:da:2b:56:ce:78:7b:e4:15:
         e8:b7:5a:01:94:1e:0a:00:98:66:38:4f:72:a7:3a:5a:1b:95:
         90:76:40:ca:41:35:ac:20:6e:23:52:3a:88:f1:44:94:e0:8a:
         5f:01:69:92:ae:9f:60:73:c5:2a:f7:aa:d3:2c:23:8d:2b:a5:
         7e:16:fb:37:f2:62:32:44:70:c1:6f:a7:d8:79:2a:e0:39:f3:
         3f:e7:c7:3e:e1:39:f6:75:fe:9d:37:e6:8d:d6:78:ac:12:1f:
         a7:b1:cb:19:a1:61:30:b4:da:0e:ce:cc:8d:45:9a:50:5a:d7:
         ad:e2:32:3a:d1:7b:44:0f:48:ae:8d:7d:c3:ac:91:e1:77:ce:
         1d:03:72:48:f4:83:64:fd:b7:09:fa:31:02:f2:28:a0:ed:e8:
         a6:06:ba:15:f7:a5:c7:be:7f:81:50:fe:ba:f8:2e:bf:9d:aa:
         85:c0:8a:fb:11:51:38:bf:a2:71:5b:8e:ee:e9:ad:5b:ba:2e:
         0a:c1:ce:ab:d6:7f:1a:14:ea:17:5b:6a:68:54:4f:2a:9b:6e:
         b7:ef:16:8f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz
MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNjAzMzEw
NzMxMTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdCRTVERTU2MEE3RUEw
NjkwQUJFRDRGMzdEODE2QjgxQjA0QjE2NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnKOvLQAdcrEOsuyS46485WKqlUow3f9BzPrC11HzjdmAoREg/
K7Y5M4BBFHVitSp0apo36rjEKF9o3oAV6WsFvdJCgvp05kf2ampEzojqbWMdBmYm
yO5VMXR6qkXtBbb+ljbyX9RixvGQAg8RM843ERuVixFnUigPNgeUU1BVX+8LRa9w
pJV70MBuN63RKgO9mEurLVvKN3/ZKEZ0brlHDZynJbY9tOakEjcSelgH/cXw9JzL
228HGGyFZb9HpmcjYt90ujlNWOK8rNwzYC6z+o+5IKAcweh+iA1tDPpZuqvUTy0E
VBrE0jA1qWnAc6+Y5r4UdsWINNhAHS13rE6PAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUe+XeVgp+oGkKvtTzfYFrgbBLFkMwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA
yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP
RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTczL2UtWGVWZ3Atb0drS3Z0VHpmWUZyZ2JCTEZrTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKfAAwDQYJKoZIhvcNAQELBQADggEB
ACHZiHqdlMGYswqmY/XEJOlnLm0Hc0Kxicnq5GoE+UQGfiV949EN3LuvG7VXZvXa
K1bOeHvkFei3WgGUHgoAmGY4T3KnOloblZB2QMpBNawgbiNSOojxRJTgil8BaZKu
n2BzxSr3qtMsI40rpX4W+zfyYjJEcMFvp9h5KuA58z/nxz7hOfZ1/p035o3WeKwS
H6exyxmhYTC02g7OzI1FmlBa163iMjrRe0QPSK6NfcOskeF3zh0Dckj0g2T9twn6
MQLyKKDt6KYGuhX3pce+f4FQ/rr4Lr+dqoXAivsRUTi/onFbju7prVu6LgrBzqvW
fxoU6hdbamhUTyqbbrfvFo8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:19 2026 by rpki-client