Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20278/iE3ahG5YBDUTqM8J3tgF8g-Jig8.roa
File:                     iE3ahG5YBDUTqM8J3tgF8g-Jig8.roa (raw, json)
Hash identifier:          WJRPjA6KWcRPyM58eRnJS90vFvWpi8kKaKM56ImSv4k=
Subject key identifier:   88:4D:DA:84:6E:58:04:35:13:A8:CF:09:DE:D8:05:F2:0F:89:8A:0F
Certificate issuer:       /CN=B693E973ABE985125266671CD05822A26A17FF02
Certificate serial:       04
Authority key identifier: B6:93:E9:73:AB:E9:85:12:52:66:67:1C:D0:58:22:A2:6A:17:FF:02
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tpPpc6vphRJSZmcc0FgiomoX_wI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/iE3ahG5YBDUTqM8J3tgF8g-Jig8.roa
Signing time:             Tue 31 Mar 2026 08:48:55 +0000
ROA not before:           Tue 31 Mar 2026 08:48:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     13150
IP address blocks:        202.75.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/tpPpc6vphRJSZmcc0FgiomoX_wI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/tpPpc6vphRJSZmcc0FgiomoX_wI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tpPpc6vphRJSZmcc0FgiomoX_wI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B693E973ABE985125266671CD05822A26A17FF02
        Validity
            Not Before: Mar 31 08:48:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=884DDA846E58043513A8CF09DED805F20F898A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:68:23:ec:9f:04:dd:bb:75:35:d7:90:6f:
                    ea:78:31:4f:14:6f:60:a2:ba:9d:11:d5:45:94:31:
                    d4:3e:09:66:88:76:e8:81:30:f2:b7:2b:2d:88:b3:
                    81:c1:73:ab:bd:ff:58:9d:94:d1:e4:94:ce:f4:a6:
                    e4:c7:3d:eb:8f:02:96:a7:0b:72:8a:53:ea:f4:c2:
                    80:58:10:a9:4c:55:46:0e:ed:dd:46:06:a9:77:b3:
                    4b:e1:a2:a6:cc:b6:31:e4:58:29:b7:00:b0:54:f3:
                    cb:d8:21:65:fc:f2:5c:8c:a4:28:47:ef:00:11:81:
                    b5:e5:c6:5d:b5:f3:28:49:6e:0f:5d:26:3c:72:7d:
                    66:f8:de:89:69:ae:52:92:35:20:86:e6:42:38:97:
                    26:a3:e9:e1:51:e4:95:ee:57:cc:09:bd:06:fb:e1:
                    6b:dd:c2:21:70:25:4b:ab:1c:43:bf:2b:1b:c3:e2:
                    b6:d8:d2:87:05:d8:49:db:34:af:ca:45:cd:01:28:
                    ff:ad:9c:df:70:22:82:63:fd:4c:4a:a3:ee:3c:9c:
                    d6:06:70:b6:10:79:59:b3:c0:ed:73:82:da:52:ac:
                    30:0f:c6:fd:28:b0:fd:8c:01:54:58:2f:24:5a:9f:
                    46:dc:14:a1:fd:e1:6f:e9:a5:5d:f7:be:9c:39:68:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4D:DA:84:6E:58:04:35:13:A8:CF:09:DE:D8:05:F2:0F:89:8A:0F
            X509v3 Authority Key Identifier:
                keyid:B6:93:E9:73:AB:E9:85:12:52:66:67:1C:D0:58:22:A2:6A:17:FF:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/tpPpc6vphRJSZmcc0FgiomoX_wI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tpPpc6vphRJSZmcc0FgiomoX_wI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/iE3ahG5YBDUTqM8J3tgF8g-Jig8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:8d:b3:86:9b:0d:9f:c9:9d:ee:e0:7a:96:c3:b0:30:c1:fe:
         09:c6:e1:67:70:9f:02:1c:5e:45:d0:5e:58:b9:d9:e1:3e:01:
         dd:c8:c9:71:7f:15:6b:85:ba:b3:0e:7d:09:a0:13:36:85:85:
         a1:fe:6e:9e:ce:45:fb:8a:13:81:1e:0a:3b:02:19:85:ec:f9:
         e4:f9:6c:53:10:69:8a:66:58:6b:46:68:59:cf:b6:64:3a:f9:
         d9:d5:57:ef:69:ea:57:e9:7e:8b:6a:56:8b:95:d7:47:51:42:
         f3:c9:e0:3a:86:b7:9a:af:b9:b2:a7:ef:6e:f3:12:1c:24:f1:
         2a:c5:be:51:65:8e:10:9f:5f:77:b4:05:f8:96:47:b7:b2:b7:
         fa:78:16:17:0b:16:0b:0e:26:80:8c:5b:68:44:0c:a7:a1:1d:
         82:7a:2c:5e:9f:73:46:28:f9:c8:8a:0a:5b:3e:b4:bb:6a:e9:
         37:2e:4b:fc:06:a5:95:f5:3c:85:61:5f:ad:34:24:76:b2:c5:
         06:33:d6:64:ce:42:e2:5f:ea:a0:6f:35:99:81:a2:80:e3:0d:
         67:52:a3:ab:7c:ae:3e:2e:37:9f:75:4a:92:e0:17:e9:80:fa:
         c7:10:83:ad:41:45:62:31:a7:83:b5:3f:d9:73:25:12:98:3f:
         88:46:e8:15
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNjkz
RTk3M0FCRTk4NTEyNTI2NjY3MUNEMDU4MjJBMjZBMTdGRjAyMB4XDTI2MDMzMTA4
NDg1NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODg0RERBODQ2RTU4MDQz
NTEzQThDRjA5REVEODA1RjIwRjg5OEEwRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKvGaCPsnwTdu3U115Bv6ngxTxRvYKK6nRHVRZQx1D4JZoh26IEw
8rcrLYizgcFzq73/WJ2U0eSUzvSm5Mc9648ClqcLcopT6vTCgFgQqUxVRg7t3UYG
qXezS+Gipsy2MeRYKbcAsFTzy9ghZfzyXIykKEfvABGBteXGXbXzKEluD10mPHJ9
ZvjeiWmuUpI1IIbmQjiXJqPp4VHkle5XzAm9Bvvha93CIXAlS6scQ78rG8PittjS
hwXYSds0r8pFzQEo/62c33AigmP9TEqj7jyc1gZwthB5WbPA7XOC2lKsMA/G/Siw
/YwBVFgvJFqfRtwUof3hb+mlXfe+nDlobb8CAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBSITdqEblgENROozwne2AXyD4mKDzAfBgNVHSMEGDAWgBS2k+lzq+mFElJmZxzQ
WCKiahf/AjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyNzgvdHBQcGM2dnBoUkpTWm1jYzBGZ2lvbW9YX3dJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdHBQcGM2dnBoUkpTWm1jYzBGZ2lv
bW9YX3dJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjc4L2lFM2FoRzVZQkRVVHFNOEozdGdGOGctSmlnOC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKS/cwDQYJKoZIhvcNAQELBQAD
ggEBACWNs4abDZ/Jne7gepbDsDDB/gnG4WdwnwIcXkXQXli52eE+Ad3IyXF/FWuF
urMOfQmgEzaFhaH+bp7ORfuKE4EeCjsCGYXs+eT5bFMQaYpmWGtGaFnPtmQ6+dnV
V+9p6lfpfotqVouV10dRQvPJ4DqGt5qvubKn727zEhwk8SrFvlFljhCfX3e0BfiW
R7eyt/p4FhcLFgsOJoCMW2hEDKehHYJ6LF6fc0Yo+ciKCls+tLtq6TcuS/wGpZX1
PIVhX600JHayxQYz1mTOQuJf6qBvNZmBooDjDWdSo6t8rj4uN591SpLgF+mA+scQ
g61BRWIxp4O1P9lzJRKYP4hG6BU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:48 2026 by rpki-client