Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20266/MYaGVnUi8IL1FLTVu04kGR1Y078.roa
File:                     MYaGVnUi8IL1FLTVu04kGR1Y078.roa (raw, json)
Hash identifier:          bCYhUoCyLMGkxY0na9AmbvWFSc1SX7JmYp7a4PhTffo=
Subject key identifier:   31:86:86:56:75:22:F0:82:F5:14:B4:D5:BB:4E:24:19:1D:58:D3:BF
Certificate issuer:       /CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560
Certificate serial:       1F
Authority key identifier: 40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/MYaGVnUi8IL1FLTVu04kGR1Y078.roa
Signing time:             Tue 31 Mar 2026 08:43:27 +0000
ROA not before:           Tue 31 Mar 2026 08:43:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18526
IP address blocks:        160.25.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560
        Validity
            Not Before: Mar 31 08:43:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=318686567522F082F514B4D5BB4E24191D58D3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:77:59:fb:2f:9d:3f:fe:5b:18:66:1f:d5:
                    3e:a4:4a:79:2b:ef:6a:a0:9e:82:ca:91:47:ee:14:
                    21:f0:f8:4b:18:6a:16:7b:f2:0d:dc:e1:d6:74:93:
                    28:52:de:c2:6e:8d:63:62:b0:db:79:61:4e:b2:18:
                    11:2a:50:fb:ae:11:2a:43:a7:c3:a1:bf:93:65:16:
                    a6:90:cc:ee:fe:6a:cc:9a:07:4b:b2:c7:0c:9d:c1:
                    d5:d4:11:8b:46:1d:b5:da:ab:fe:f8:92:33:c7:8d:
                    ce:59:76:b2:4e:ef:8b:a2:d9:a1:98:09:ef:37:bd:
                    1d:80:ee:7d:0d:c6:ba:85:d9:54:ec:d4:9e:38:aa:
                    16:aa:60:ab:31:78:d9:b4:4c:64:83:ee:00:40:4c:
                    e5:3b:e1:62:82:14:46:76:a0:0e:08:ab:73:5e:9b:
                    dc:0f:3b:ce:48:f1:cd:20:d8:c8:3c:b3:30:24:ce:
                    f2:58:37:7f:4d:28:1a:9b:b2:b3:7f:6a:c4:b7:1f:
                    d8:e4:39:13:4b:f7:15:f5:10:2d:c7:07:93:d0:55:
                    d5:e3:e4:ef:3f:6e:f3:36:25:84:a9:41:ca:62:38:
                    7d:3b:0d:77:ae:9f:f8:79:23:c2:d3:76:dd:1e:40:
                    d7:6e:a1:cb:47:91:4f:0a:3a:bf:f9:26:be:6d:63:
                    e3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:86:56:75:22:F0:82:F5:14:B4:D5:BB:4E:24:19:1D:58:D3:BF
            X509v3 Authority Key Identifier:
                keyid:40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/MYaGVnUi8IL1FLTVu04kGR1Y078.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:6b:b1:76:39:8a:c6:75:09:32:3e:2f:7f:12:94:5c:28:1b:
         53:98:97:75:29:40:d3:27:d2:ba:4d:33:39:bf:13:aa:52:99:
         44:e0:32:ed:a9:15:3d:57:a5:4c:9a:13:25:27:80:63:16:81:
         ed:9a:5b:a7:5e:43:2a:b2:f7:1d:01:71:10:a1:a8:36:1e:ea:
         8f:44:99:3f:f9:3b:58:a8:be:58:e0:54:3c:f1:1f:58:d5:7e:
         81:6f:e5:e2:e2:75:c3:f6:b3:89:3f:d8:55:03:05:00:ea:46:
         c6:96:e9:93:c2:1c:bb:f1:82:5d:cf:dc:2d:f5:24:3f:9d:59:
         ca:88:7b:b2:35:81:76:78:b5:30:99:d3:1a:83:cc:b2:7b:ff:
         cb:b2:67:6f:08:cd:c7:44:c7:80:22:a8:e3:76:04:50:ee:93:
         c5:39:d8:1d:9e:7c:b4:2c:54:73:37:e3:47:fd:37:0b:4a:05:
         ff:f6:bd:1b:86:4f:bb:16:be:b9:6c:10:20:9d:94:c6:0c:4a:
         df:d2:8d:e1:b7:4f:5e:d9:8c:a4:b5:ce:75:4a:fa:f0:a6:06:
         0d:66:61:30:e7:5b:8d:36:3a:d2:55:76:49:1c:42:29:0e:ad:
         bd:c2:56:87:25:76:2b:c1:2c:e3:9f:0a:6a:8d:97:a6:9c:db:
         72:5f:13:08
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MERB
Q0NFMjAwNkNFN0E2QThDNzZCNTMyMEEwRTE4OTg0NUQxNTYwMB4XDTI2MDMzMTA4
NDMyN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzE4Njg2NTY3NTIyRjA4
MkY1MTRCNEQ1QkI0RTI0MTkxRDU4RDNCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMxJd1n7L50//lsYZh/VPqRKeSvvaqCegsqRR+4UIfD4SxhqFnvy
Ddzh1nSTKFLewm6NY2Kw23lhTrIYESpQ+64RKkOnw6G/k2UWppDM7v5qzJoHS7LH
DJ3B1dQRi0Ydtdqr/viSM8eNzll2sk7vi6LZoZgJ7ze9HYDufQ3GuoXZVOzUnjiq
FqpgqzF42bRMZIPuAEBM5TvhYoIURnagDgirc16b3A87zkjxzSDYyDyzMCTO8lg3
f00oGpuys39qxLcf2OQ5E0v3FfUQLccHk9BV1ePk7z9u8zYlhKlBymI4fTsNd66f
+HkjwtN23R5A126hy0eRTwo6v/kmvm1j4z8CAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQxhoZWdSLwgvUUtNW7TiQZHVjTvzAfBgNVHSMEGDAWgBRA2sziAGznpqjHa1Mg
oOGJhF0VYDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyNjYvUU5yTTRnQnM1NmFveDJ0VElLRGhpWVJkRldBLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUU5yTTRnQnM1NmFveDJ0VElLRGhp
WVJkRldBLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjY2L01ZYUdWblVpOElMMUZMVFZ1MDRrR1IxWTA3OC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgGYYwDQYJKoZIhvcNAQELBQAD
ggEBAK1rsXY5isZ1CTI+L38SlFwoG1OYl3UpQNMn0rpNMzm/E6pSmUTgMu2pFT1X
pUyaEyUngGMWge2aW6deQyqy9x0BcRChqDYe6o9EmT/5O1iovljgVDzxH1jVfoFv
5eLidcP2s4k/2FUDBQDqRsaW6ZPCHLvxgl3P3C31JD+dWcqIe7I1gXZ4tTCZ0xqD
zLJ7/8uyZ28IzcdEx4AiqON2BFDuk8U52B2efLQsVHM340f9NwtKBf/2vRuGT7sW
vrlsECCdlMYMSt/SjeG3T17ZjKS1znVK+vCmBg1mYTDnW402OtJVdkkcQikOrb3C
VocldivBLOOfCmqNl6ac23JfEwg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:20 2026 by rpki-client