Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20219/9-w9cTzJdY-LPpqDGcOECxFospk.roa
File:                     9-w9cTzJdY-LPpqDGcOECxFospk.roa (raw, json)
Hash identifier:          FhutR+NmaiMjl6hWnzqJ+ywiuDlMmjfaa1nyUdVai1Y=
Subject key identifier:   F7:EC:3D:71:3C:C9:75:8F:8B:3E:9A:83:19:C3:84:0B:11:68:B2:99
Certificate issuer:       /CN=2F6DF65BA24733C4B4EBC3FCD1D7F45AC2AB64AC
Certificate serial:       09
Authority key identifier: 2F:6D:F6:5B:A2:47:33:C4:B4:EB:C3:FC:D1:D7:F4:5A:C2:AB:64:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L232W6JHM8S068P80df0WsKrZKw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/9-w9cTzJdY-LPpqDGcOECxFospk.roa
Signing time:             Tue 31 Mar 2026 08:32:32 +0000
ROA not before:           Tue 31 Mar 2026 08:32:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63801
IP address blocks:        192.50.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/L232W6JHM8S068P80df0WsKrZKw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/L232W6JHM8S068P80df0WsKrZKw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L232W6JHM8S068P80df0WsKrZKw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F6DF65BA24733C4B4EBC3FCD1D7F45AC2AB64AC
        Validity
            Not Before: Mar 31 08:32:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F7EC3D713CC9758F8B3E9A8319C3840B1168B299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:cf:d6:a5:47:85:6b:85:8b:39:ae:6c:fd:
                    57:5e:4d:ad:73:f5:3e:9f:f6:3d:93:73:9d:11:fe:
                    d2:c7:29:15:53:09:88:53:82:95:32:da:a9:79:75:
                    de:d4:e3:b1:78:08:e9:61:1f:ed:a6:44:5a:5c:da:
                    19:1e:90:50:01:0e:15:4e:c0:3b:50:70:a2:cc:81:
                    6a:a8:8c:5c:a3:fd:7e:6b:ad:5d:02:4e:4b:54:41:
                    9e:e5:b9:f3:d6:8a:c4:38:0c:17:2c:3c:11:99:76:
                    5f:dd:80:20:f9:f3:4a:eb:63:5f:96:4d:86:aa:a8:
                    0a:4f:10:0b:fc:2f:52:5a:9b:25:92:82:7a:6b:41:
                    09:62:38:60:58:c9:b4:ce:59:4f:99:c8:4b:14:67:
                    06:1e:bb:35:a5:c9:bf:0a:d0:94:6f:1b:b0:5f:48:
                    1b:3b:00:51:ac:98:fb:20:3a:e2:e4:bc:b0:eb:a7:
                    96:cc:fa:b7:6e:f1:74:0b:15:7c:46:bd:5e:04:d3:
                    89:a2:4c:68:94:62:7e:5d:85:38:e7:3c:e7:d1:b6:
                    b8:07:c0:ca:3f:bf:0a:1e:e5:d8:90:41:c1:9a:2c:
                    eb:f8:de:55:4b:f9:a1:fc:0a:52:a2:9b:41:7e:9a:
                    9b:3a:33:5f:b7:71:0c:55:19:c2:0e:e7:62:82:7b:
                    97:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EC:3D:71:3C:C9:75:8F:8B:3E:9A:83:19:C3:84:0B:11:68:B2:99
            X509v3 Authority Key Identifier:
                keyid:2F:6D:F6:5B:A2:47:33:C4:B4:EB:C3:FC:D1:D7:F4:5A:C2:AB:64:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/L232W6JHM8S068P80df0WsKrZKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L232W6JHM8S068P80df0WsKrZKw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/9-w9cTzJdY-LPpqDGcOECxFospk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:3f:73:a8:a3:f3:2b:5d:81:c7:51:2d:38:34:a4:bd:2b:a8:
         b3:e4:f6:ec:ad:aa:f3:38:ac:74:98:a4:a9:bc:34:ff:d6:00:
         b0:58:93:63:c3:52:cc:06:13:f2:35:1a:44:09:19:79:d7:72:
         e3:83:ac:63:90:e6:ea:7a:a5:94:14:ae:44:b8:4e:88:03:c8:
         e7:c3:db:27:1d:dd:db:8a:8e:18:fa:11:f2:30:39:0c:ae:b7:
         73:25:70:24:46:a3:08:07:61:1a:68:b0:58:52:c8:27:2e:2c:
         71:34:8b:3f:d9:2f:42:3d:fe:4c:17:34:72:ea:81:2b:9f:af:
         af:13:9c:59:78:2e:e4:89:5f:4e:de:d9:61:30:39:f6:49:45:
         d4:82:ca:2b:28:4d:f0:4c:83:ae:e8:de:20:20:d4:57:a0:98:
         79:3a:a5:6b:e2:a1:d3:ac:84:ba:fb:f3:54:fc:a2:41:6e:51:
         10:83:84:ce:1a:ab:56:59:9e:38:89:f7:55:6a:ab:6b:f4:4e:
         1f:e8:f2:71:54:2c:e1:18:3b:e3:2b:b2:31:c8:8c:9b:cf:9b:
         8e:47:f0:05:37:be:ee:82:02:0b:13:aa:b5:b7:10:a0:97:db:
         43:a1:4c:15:6a:31:5b:20:4f:86:00:81:a2:2d:4a:e4:9d:a7:
         a2:c1:a4:96
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRjZE
RjY1QkEyNDczM0M0QjRFQkMzRkNEMUQ3RjQ1QUMyQUI2NEFDMB4XDTI2MDMzMTA4
MzIzMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjdFQzNENzEzQ0M5NzU4
RjhCM0U5QTgzMTlDMzg0MEIxMTY4QjI5OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKm0z9alR4VrhYs5rmz9V15NrXP1Pp/2PZNznRH+0scpFVMJiFOC
lTLaqXl13tTjsXgI6WEf7aZEWlzaGR6QUAEOFU7AO1BwosyBaqiMXKP9fmutXQJO
S1RBnuW589aKxDgMFyw8EZl2X92AIPnzSutjX5ZNhqqoCk8QC/wvUlqbJZKCemtB
CWI4YFjJtM5ZT5nISxRnBh67NaXJvwrQlG8bsF9IGzsAUayY+yA64uS8sOunlsz6
t27xdAsVfEa9XgTTiaJMaJRifl2FOOc859G2uAfAyj+/Ch7l2JBBwZos6/jeVUv5
ofwKUqKbQX6amzozX7dxDFUZwg7nYoJ7l9kCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBT37D1xPMl1j4s+moMZw4QLEWiymTAfBgNVHSMEGDAWgBQvbfZbokczxLTrw/zR
1/RawqtkrDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMTkvTDIzMlc2SkhNOFMwNjhQODBkZjBXc0tyWkt3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTDIzMlc2SkhNOFMwNjhQODBkZjBX
c0tyWkt3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjE5LzktdzljVHpKZFktTFBwcURHY09FQ3hGb3Nway5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAMoMwDQYJKoZIhvcNAQELBQAD
ggEBALc/c6ij8ytdgcdRLTg0pL0rqLPk9uytqvM4rHSYpKm8NP/WALBYk2PDUswG
E/I1GkQJGXnXcuODrGOQ5up6pZQUrkS4TogDyOfD2ycd3duKjhj6EfIwOQyut3Ml
cCRGowgHYRposFhSyCcuLHE0iz/ZL0I9/kwXNHLqgSufr68TnFl4LuSJX07e2WEw
OfZJRdSCyisoTfBMg67o3iAg1FegmHk6pWviodOshLr781T8okFuURCDhM4aq1ZZ
njiJ91Vqq2v0Th/o8nFULOEYO+MrsjHIjJvPm45H8AU3vu6CAgsTqrW3EKCX20Oh
TBVqMVsgT4YAgaItSuSdp6LBpJY=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:19:05 2026 by rpki-client