Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20250/PH1CX4ddOaS4bNfJwTaS8xWR4K4.roa
File:                     PH1CX4ddOaS4bNfJwTaS8xWR4K4.roa (raw, json)
Hash identifier:          V9jSdj9pVJOUZJYX61Z0MQqPTDGa4dLV+qC0kvIIBmw=
Subject key identifier:   3C:7D:42:5F:87:5D:39:A4:B8:6C:D7:C9:C1:36:92:F3:15:91:E0:AE
Certificate issuer:       /CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Certificate serial:       20
Authority key identifier: 89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/PH1CX4ddOaS4bNfJwTaS8xWR4K4.roa
Signing time:             Tue 31 Mar 2026 08:38:13 +0000
ROA not before:           Tue 31 Mar 2026 08:38:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        210.171.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
        Validity
            Not Before: Mar 31 08:38:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3C7D425F875D39A4B86CD7C9C13692F31591E0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:ab:2d:47:2c:81:1b:89:c5:ff:97:6d:cc:
                    61:a4:19:df:2b:75:e6:bd:e1:ae:73:92:c9:30:48:
                    f5:fb:77:15:ad:24:28:b1:00:99:5d:31:66:43:51:
                    06:b2:02:70:b5:dd:f3:52:ca:4b:54:40:dd:97:8d:
                    08:fc:72:91:cd:d1:45:df:82:0c:52:b7:5c:6c:af:
                    9f:94:b6:d4:cf:75:48:77:aa:a8:e3:dc:e2:1b:7a:
                    02:95:6f:06:18:13:12:f3:20:90:ab:bd:8a:20:3c:
                    c8:9b:b8:ec:c9:77:b5:03:2d:ed:86:79:94:05:d1:
                    37:b1:9d:bf:19:fb:d7:a1:48:bc:2d:68:05:9c:9d:
                    43:88:46:38:2b:82:19:e2:79:b2:6b:1e:97:f7:ff:
                    ab:b1:2b:8e:65:92:01:00:52:63:0e:30:28:55:83:
                    7f:67:d2:9d:3b:29:59:a1:dd:ce:9d:10:19:4b:36:
                    46:b2:6d:25:e6:3d:9a:54:2b:a3:93:b9:67:29:b4:
                    ae:fd:1b:5e:f0:c0:e2:9b:96:2b:12:76:9e:83:ba:
                    f4:82:70:ac:0b:2a:34:c7:71:41:7b:af:3d:2b:a7:
                    e7:2c:28:0f:c4:7f:b8:84:aa:ca:18:57:56:2a:11:
                    de:81:3e:f6:3a:68:4d:42:b3:f4:1b:94:31:b6:98:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7D:42:5F:87:5D:39:A4:B8:6C:D7:C9:C1:36:92:F3:15:91:E0:AE
            X509v3 Authority Key Identifier:
                keyid:89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/PH1CX4ddOaS4bNfJwTaS8xWR4K4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:ec:ca:c6:65:08:a0:7f:10:59:51:df:a8:ec:df:33:04:e4:
         b7:6b:7d:1f:27:45:68:f8:d5:48:cb:ee:0e:d3:11:24:c9:1d:
         66:91:42:68:fe:eb:dd:a6:97:d5:15:a7:4d:7a:d2:80:74:3b:
         77:78:f9:a3:db:d1:65:08:29:ba:ad:88:89:1e:52:5e:1d:f6:
         94:39:35:3b:80:ba:59:dd:4c:f5:af:36:c7:3f:8f:16:4e:41:
         3c:db:7c:27:d1:3f:2c:da:d2:be:24:dd:7c:38:f9:8f:15:44:
         a6:85:44:06:1a:4c:95:8c:d8:3e:23:e6:c2:43:fb:7a:8f:25:
         4f:a5:fb:ba:aa:d2:c5:6b:a5:2a:ac:70:3a:a5:7d:d6:b9:30:
         c8:13:56:94:b0:03:01:5b:67:1c:2e:9f:ae:6a:32:2a:df:22:
         b8:66:14:56:cd:3d:2d:36:f4:26:42:a5:6b:6d:0c:c5:6a:b3:
         5c:1c:37:b9:bf:12:e1:23:12:a9:f1:33:c5:66:da:9e:6c:9f:
         4d:c3:41:ec:bd:76:c5:7a:0c:8a:0e:ff:1a:b0:6b:a2:57:79:
         db:46:61:d4:b5:01:cc:c1:5c:0e:45:c8:f8:61:43:7b:be:46:
         00:c5:29:2e:71:eb:5a:15:c4:37:78:23:76:44:82:e9:e9:6a:
         1c:03:70:24
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUZG
MUFFODY0QUJGOUYxMjYxNEUzMDc2NDA0RjU1NkQ1NkZGQTgyMB4XDTI2MDMzMTA4
MzgxM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoM0M3RDQyNUY4NzVEMzlB
NEI4NkNEN0M5QzEzNjkyRjMxNTkxRTBBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMDrqy1HLIEbicX/l23MYaQZ3yt15r3hrnOSyTBI9ft3Fa0kKLEA
mV0xZkNRBrICcLXd81LKS1RA3ZeNCPxykc3RRd+CDFK3XGyvn5S21M91SHeqqOPc
4ht6ApVvBhgTEvMgkKu9iiA8yJu47Ml3tQMt7YZ5lAXRN7Gdvxn716FIvC1oBZyd
Q4hGOCuCGeJ5smsel/f/q7ErjmWSAQBSYw4wKFWDf2fSnTspWaHdzp0QGUs2RrJt
JeY9mlQro5O5Zym0rv0bXvDA4puWKxJ2noO69IJwrAsqNMdxQXuvPSun5ywoD8R/
uISqyhhXVioR3oE+9jpoTUKz9BuUMbaYI9cCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQ8fUJfh105pLhs18nBNpLzFZHgrjAfBgNVHSMEGDAWgBSJ/xroZKv58SYU4wdk
BPVW1W/6gjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyNTAvaWY4YTZHU3ItZkVtRk9NSFpBVDFWdFZ2LW9JLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaWY4YTZHU3ItZkVtRk9NSFpBVDFW
dFZ2LW9JLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjUwL1BIMUNYNGRkT2FTNGJOZkp3VGFTOHhXUjRLNC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATSq6AwDQYJKoZIhvcNAQELBQAD
ggEBALPsysZlCKB/EFlR36js3zME5LdrfR8nRWj41UjL7g7TESTJHWaRQmj+692m
l9UVp0160oB0O3d4+aPb0WUIKbqtiIkeUl4d9pQ5NTuAulndTPWvNsc/jxZOQTzb
fCfRPyza0r4k3Xw4+Y8VRKaFRAYaTJWM2D4j5sJD+3qPJU+l+7qq0sVrpSqscDql
fda5MMgTVpSwAwFbZxwun65qMirfIrhmFFbNPS029CZCpWttDMVqs1wcN7m/EuEj
EqnxM8Vm2p5sn03DQey9dsV6DIoO/xqwa6JXedtGYdS1AczBXA5FyPhhQ3u+RgDF
KS5x61oVxDd4I3ZEgunpahwDcCQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:43 2026 by rpki-client