Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/r6a2vHXLvXluZ8eAOoOE3iZUYc0.roa
File:                     r6a2vHXLvXluZ8eAOoOE3iZUYc0.roa (raw, json)
Hash identifier:          zI0fBp9QsLdloZIfvgnJOGLGqTKSL8XMrquqzG1aEPA=
Subject key identifier:   AF:A6:B6:BC:75:CB:BD:79:6E:67:C7:80:3A:83:84:DE:26:54:61:CD
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0163
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/r6a2vHXLvXluZ8eAOoOE3iZUYc0.roa
Signing time:             Tue 31 Mar 2026 07:48:08 +0000
ROA not before:           Tue 31 Mar 2026 07:48:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63199
IP address blocks:        124.40.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AFA6B6BC75CBBD796E67C7803A8384DE265461CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:bf:51:8e:0e:e6:50:6c:66:27:f6:8e:20:
                    73:27:0a:b2:be:dc:5d:24:71:be:91:b4:67:3e:0b:
                    bd:44:2a:e4:07:a4:f8:ae:5d:fc:fc:3c:5b:46:96:
                    0b:70:34:d4:cf:e7:25:d0:84:7f:4d:e7:36:7d:e0:
                    63:78:40:54:fe:01:cc:b1:c4:a3:ff:eb:81:27:58:
                    a5:13:06:b1:da:85:d0:25:7c:cd:21:05:65:bc:b5:
                    58:33:cc:74:f0:36:5d:2a:75:bd:ee:4d:8c:19:65:
                    fc:a8:91:6b:2f:79:a9:10:f1:e1:bb:07:43:88:6b:
                    0e:c0:23:c4:1f:8b:30:e8:7a:af:ee:be:b1:14:aa:
                    2a:ca:2f:e0:f0:97:39:50:01:04:44:fd:42:34:86:
                    92:08:38:0d:03:84:00:3f:97:d9:d4:59:62:42:30:
                    c9:39:f6:91:af:f4:ca:80:87:61:70:75:5a:c1:df:
                    fb:6c:3a:f9:88:d7:d9:a7:ce:1a:bd:fe:c9:fa:c0:
                    92:e5:be:22:67:81:f2:49:19:bc:c9:44:c5:f2:c5:
                    28:e0:8d:70:e3:6a:53:0b:d0:26:55:a6:b4:e0:21:
                    df:63:56:87:66:03:3b:5f:a5:c0:79:9d:d3:c8:88:
                    f2:a9:e2:5f:d6:ba:9f:de:54:22:20:fc:84:49:8b:
                    04:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A6:B6:BC:75:CB:BD:79:6E:67:C7:80:3A:83:84:DE:26:54:61:CD
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/r6a2vHXLvXluZ8eAOoOE3iZUYc0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:cc:59:5d:e6:25:3c:1a:d6:c0:3f:1b:ed:11:4a:92:59:5d:
         65:ff:7c:14:62:27:9e:b6:18:33:b2:ac:08:23:2e:57:77:ce:
         1a:47:61:5b:ac:28:e1:d8:3e:13:bf:c8:61:b5:a8:95:1d:fc:
         b9:c5:c1:be:e7:00:9d:d5:c2:d1:4e:99:8b:02:39:0b:11:c3:
         ec:22:41:8a:56:8b:fd:ba:26:5d:07:d6:7d:86:53:c1:b2:95:
         13:c1:2b:dc:ab:6b:54:88:00:8c:82:f3:72:d7:86:64:eb:a7:
         c0:57:11:30:6f:fc:ad:08:58:92:83:74:a2:36:8a:96:6f:d2:
         99:94:86:0a:6c:82:a8:21:b2:8d:ef:e4:f4:1e:23:0c:b7:d0:
         62:d2:34:b3:db:52:be:25:fc:cd:3a:0b:81:6b:01:42:5e:89:
         a4:95:1b:f3:e3:ce:f3:ff:46:51:2c:8a:c4:c1:00:45:a9:f3:
         dd:62:69:24:d9:cd:8c:aa:42:11:88:75:41:a3:a8:00:ee:ea:
         94:4b:cd:27:92:6d:a8:a2:0f:21:2c:30:73:c6:24:98:50:19:
         17:95:74:d9:15:62:45:c7:0c:1e:e2:3c:50:c4:59:16:c0:e9:
         a0:cb:06:fc:3f:04:9e:7e:74:41:2d:39:5e:5a:5e:a7:a7:97:
         2a:47:40:a8
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw
NzQ4MDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGQTZCNkJDNzVDQkJE
Nzk2RTY3Qzc4MDNBODM4NERFMjY1NDYxQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/sr9Rjg7mUGxmJ/aOIHMnCrK+3F0kcb6RtGc+C71EKuQHpPiu
Xfz8PFtGlgtwNNTP5yXQhH9N5zZ94GN4QFT+AcyxxKP/64EnWKUTBrHahdAlfM0h
BWW8tVgzzHTwNl0qdb3uTYwZZfyokWsveakQ8eG7B0OIaw7AI8QfizDoeq/uvrEU
qirKL+DwlzlQAQRE/UI0hpIIOA0DhAA/l9nUWWJCMMk59pGv9MqAh2FwdVrB3/ts
OvmI19mnzhq9/sn6wJLlviJngfJJGbzJRMXyxSjgjXDjalML0CZVprTgId9jVodm
AztfpcB5ndPIiPKp4l/Wup/eVCIg/IRJiwRbAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUr6a2vHXLvXluZ8eAOoOE3iZUYc0wHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDEyOC9yNmEydkhYTHZYbHVaOGVBT29PRTNpWlVZYzAucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBfCg4MA0GCSqGSIb3DQEBCwUA
A4IBAQAIzFld5iU8GtbAPxvtEUqSWV1l/3wUYieethgzsqwIIy5Xd84aR2FbrCjh
2D4Tv8hhtaiVHfy5xcG+5wCd1cLRTpmLAjkLEcPsIkGKVov9uiZdB9Z9hlPBspUT
wSvcq2tUiACMgvNy14Zk66fAVxEwb/ytCFiSg3SiNoqWb9KZlIYKbIKoIbKN7+T0
HiMMt9Bi0jSz21K+JfzNOguBawFCXomklRvz487z/0ZRLIrEwQBFqfPdYmkk2c2M
qkIRiHVBo6gA7uqUS80nkm2oog8hLDBzxiSYUBkXlXTZFWJFxwwe4jxQxFkWwOmg
ywb8PwSefnRBLTleWl6np5cqR0Co
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:08 2026 by rpki-client