Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/elLwY-Dcy-iUNIsjWQcAHru3u5E.roa
File:                     elLwY-Dcy-iUNIsjWQcAHru3u5E.roa (raw, json)
Hash identifier:          xzs8c9H2Yum9YlwMJh+gVMozgShnKGJ9qyAAWjN1t+k=
Subject key identifier:   7A:52:F0:63:E0:DC:CB:E8:94:34:8B:23:59:07:00:1E:BB:B7:BB:91
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       5D
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/elLwY-Dcy-iUNIsjWQcAHru3u5E.roa
Signing time:             Tue 31 Mar 2026 07:51:46 +0000
ROA not before:           Tue 31 Mar 2026 07:51:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     138384
IP address blocks:        210.157.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Mar 31 07:51:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7A52F063E0DCCBE894348B235907001EBBB7BB91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:d1:71:74:79:41:22:7d:ef:4c:1a:92:1a:
                    91:a3:5e:ab:0c:32:a9:79:7d:21:26:f2:ca:24:1a:
                    98:89:e4:d3:f9:72:e2:ce:21:99:df:23:27:80:81:
                    91:dc:2b:64:bb:44:a2:3c:2f:55:34:5d:f3:6a:95:
                    22:24:4b:f9:f4:47:05:c0:75:4a:95:c7:22:bb:74:
                    08:66:a0:71:19:23:b4:fd:76:bb:8a:f5:4c:0a:0a:
                    2c:1b:42:5f:53:9f:96:37:b2:80:0a:31:cc:af:5b:
                    50:45:20:ed:b6:0e:31:ca:41:f6:ed:47:aa:79:03:
                    c7:b8:7b:f6:15:04:cd:c2:a1:3c:9c:88:e6:ba:40:
                    c1:fe:0e:aa:f4:20:d9:ec:1c:62:c2:72:9a:cf:e6:
                    80:b6:99:57:90:59:3c:26:17:e7:e7:26:49:4c:03:
                    c6:4b:8d:0b:d0:a9:55:d5:35:9b:e9:a8:a6:32:3c:
                    3a:97:82:2b:92:cd:31:5e:ee:6c:d9:0a:c6:4c:48:
                    76:df:ff:be:0d:9c:b1:b2:ac:a4:21:97:73:b5:55:
                    ce:c7:a2:43:4e:dd:2a:d6:16:80:a8:7b:1c:cd:c6:
                    e3:95:a0:17:04:aa:5f:dd:18:a5:97:31:8e:fa:f6:
                    66:f2:34:1b:3c:b9:c0:5e:cc:df:76:2e:f6:15:c7:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:52:F0:63:E0:DC:CB:E8:94:34:8B:23:59:07:00:1E:BB:B7:BB:91
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/elLwY-Dcy-iUNIsjWQcAHru3u5E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.157.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:90:e4:50:50:2f:cd:f3:21:30:83:95:e9:9c:c9:dd:4b:eb:
         e5:83:fa:1b:ae:bb:dd:da:61:a9:41:f4:67:9a:f8:81:e1:97:
         ca:d7:41:86:24:e8:d1:c8:50:1c:12:a6:92:63:89:c0:6e:94:
         b3:1e:ba:4c:6a:38:f4:1a:6f:a6:55:7d:b4:07:37:0e:fb:32:
         99:b0:61:b7:be:07:2d:eb:f8:7b:5f:52:2e:a9:1f:83:4e:69:
         c7:ec:98:b3:7c:ba:2b:87:20:2d:fd:e4:ef:49:4a:44:87:f2:
         53:d5:7a:71:44:fd:57:02:77:c6:11:31:a5:d5:c5:f1:93:dc:
         90:34:d4:c7:12:d3:7e:fe:a2:98:43:35:96:a8:77:8d:13:d1:
         00:8d:c6:6a:a5:9f:1e:2a:7c:c1:de:21:c3:34:d7:a3:c3:d9:
         c4:27:ab:f7:ff:af:9a:29:4a:9a:0f:84:89:24:ac:38:b3:e9:
         07:75:e3:d3:2a:e7:77:41:b7:50:80:de:1b:95:d6:d9:ab:57:
         c3:2f:b9:b6:4a:87:06:97:de:07:cc:f2:04:6d:02:ff:a2:ad:
         b8:5d:59:ae:19:61:32:36:f4:45:22:d3:aa:7e:9a:69:92:b8:
         c1:69:fb:ba:5e:0f:e8:8c:e4:0d:a4:f1:f4:3c:35:b8:5b:71:
         cd:ae:a1:2e
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0OENE
MTYyODI0QzFGODYzODcxODk5MjY3Q0MxNjAyODA3NzY1MzFGMB4XDTI2MDMzMTA3
NTE0NloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0E1MkYwNjNFMERDQ0JF
ODk0MzQ4QjIzNTkwNzAwMUVCQkI3QkI5MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKXI0XF0eUEife9MGpIakaNeqwwyqXl9ISbyyiQamInk0/ly4s4h
md8jJ4CBkdwrZLtEojwvVTRd82qVIiRL+fRHBcB1SpXHIrt0CGagcRkjtP12u4r1
TAoKLBtCX1OfljeygAoxzK9bUEUg7bYOMcpB9u1HqnkDx7h79hUEzcKhPJyI5rpA
wf4OqvQg2ewcYsJyms/mgLaZV5BZPCYX5+cmSUwDxkuNC9CpVdU1m+mopjI8OpeC
K5LNMV7ubNkKxkxIdt//vg2csbKspCGXc7VVzseiQ07dKtYWgKh7HM3G45WgFwSq
X90YpZcxjvr2ZvI0Gzy5wF7M33Yu9hXHQLUCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBR6UvBj4NzL6JQ0iyNZBwAeu7e7kTAfBgNVHSMEGDAWgBRIzRYoJMH4Y4cYmSZ8
wWAoB3ZTHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODgvU00wV0tDVEItR09IR0prbWZNRmdLQWQyVXg4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvU00wV0tDVEItR09IR0prbWZNRmdL
QWQyVXg4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDg4L2VsTHdZLURjeS1pVU5Jc2pXUWNBSHJ1M3U1RS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXSncAwDQYJKoZIhvcNAQELBQAD
ggEBAFSQ5FBQL83zITCDlemcyd1L6+WD+huuu93aYalB9Gea+IHhl8rXQYYk6NHI
UBwSppJjicBulLMeukxqOPQab6ZVfbQHNw77MpmwYbe+By3r+HtfUi6pH4NOacfs
mLN8uiuHIC395O9JSkSH8lPVenFE/VcCd8YRMaXVxfGT3JA01McS037+ophDNZao
d40T0QCNxmqlnx4qfMHeIcM016PD2cQnq/f/r5opSpoPhIkkrDiz6Qd149Mq53dB
t1CA3huV1tmrV8MvubZKhwaX3gfM8gRtAv+irbhdWa4ZYTI29EUi06p+mmmSuMFp
+7peD+iM5A2k8fQ8Nbhbcc2uoS4=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:15 2026 by rpki-client