Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/221/ku5N9qUUN-HESXI2G0ZpQva1HAI.roa
File:                     ku5N9qUUN-HESXI2G0ZpQva1HAI.roa (raw, json)
Hash identifier:          WAAFGa/k08qnGT6ap/gs/nU9D2cAts/qTlk+6v1u1b4=
Subject key identifier:   92:EE:4D:F6:A5:14:37:E1:C4:49:72:36:1B:46:69:42:F6:B5:1C:02
Certificate issuer:       /CN=B04B6A76E1BF616D6B4050684A33BB930CC18C32
Certificate serial:       1B
Authority key identifier: B0:4B:6A:76:E1:BF:61:6D:6B:40:50:68:4A:33:BB:93:0C:C1:8C:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sEtqduG_YW1rQFBoSjO7kwzBjDI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/ku5N9qUUN-HESXI2G0ZpQva1HAI.roa
Signing time:             Tue 31 Mar 2026 08:44:05 +0000
ROA not before:           Tue 31 Mar 2026 08:44:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7677
IP address blocks:        210.133.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/sEtqduG_YW1rQFBoSjO7kwzBjDI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/sEtqduG_YW1rQFBoSjO7kwzBjDI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sEtqduG_YW1rQFBoSjO7kwzBjDI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04B6A76E1BF616D6B4050684A33BB930CC18C32
        Validity
            Not Before: Mar 31 08:44:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=92EE4DF6A51437E1C44972361B466942F6B51C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:d3:ba:18:8d:a6:0a:8d:f4:ec:bb:60:2c:
                    fb:ee:40:e8:cb:b1:e9:df:a4:27:a0:45:1f:28:b0:
                    8d:33:c6:99:d0:b1:41:9a:ad:05:6a:c6:41:a6:d2:
                    7e:78:3e:60:ae:ca:7c:3f:52:0c:ff:d8:da:7e:8f:
                    a4:98:7a:a8:02:3e:12:a3:e0:b6:77:ea:4c:9c:14:
                    53:a5:f8:35:13:73:f2:2f:58:38:33:69:e0:f8:b4:
                    20:fb:bb:79:2f:2f:b5:f8:d2:8a:8a:a5:49:1e:3b:
                    3b:bb:48:e0:a4:44:83:5f:7a:10:2b:c5:f8:fd:d9:
                    07:4d:49:ad:0b:12:94:e5:19:6f:fc:0b:df:68:b0:
                    8e:6e:1b:14:65:4b:95:b6:5a:bd:d0:42:27:dd:b8:
                    7a:8c:81:9a:ed:c0:73:e5:be:15:d9:06:d3:d8:e0:
                    05:a2:ec:48:82:8b:27:26:f3:67:12:3f:cc:9a:7f:
                    73:90:53:0e:e6:6f:f6:6b:4a:67:94:bf:6c:42:de:
                    91:e1:8d:3d:be:fb:19:db:cc:06:a5:59:27:b4:5a:
                    b5:34:2a:90:85:9e:c4:43:9f:62:e3:16:ef:52:ee:
                    40:a6:e8:bf:91:1d:b3:1b:fe:e7:01:ed:33:8f:3e:
                    33:6f:67:a9:e8:fc:37:7c:3e:75:83:7e:71:8e:bf:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EE:4D:F6:A5:14:37:E1:C4:49:72:36:1B:46:69:42:F6:B5:1C:02
            X509v3 Authority Key Identifier:
                keyid:B0:4B:6A:76:E1:BF:61:6D:6B:40:50:68:4A:33:BB:93:0C:C1:8C:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/sEtqduG_YW1rQFBoSjO7kwzBjDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sEtqduG_YW1rQFBoSjO7kwzBjDI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/ku5N9qUUN-HESXI2G0ZpQva1HAI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.133.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:16:db:fa:c8:10:36:64:b2:9f:6f:19:16:b2:78:60:70:9d:
         cb:43:19:46:8b:1d:c8:b2:c0:01:23:9a:11:d1:01:4c:47:04:
         56:30:38:cf:74:67:91:9a:b6:25:76:8c:a4:0b:1f:c5:45:ec:
         a5:88:2a:e3:9f:86:ed:ef:63:95:35:d9:5e:a4:b8:d8:f3:37:
         d0:80:08:e6:2b:aa:75:05:e4:73:d2:b6:3a:fe:eb:64:3a:99:
         da:a5:8d:0a:3b:3e:a1:8c:7c:84:4a:32:0f:be:68:94:c2:72:
         8c:c3:92:1a:84:2c:ff:69:00:30:e3:05:7a:42:63:bf:c7:ce:
         7d:e8:1c:8b:8e:ff:a6:07:0b:ca:3d:49:56:59:c6:ff:a6:2a:
         12:3c:59:3d:15:9a:b7:bf:3b:21:49:52:16:4c:83:54:9d:55:
         b9:7b:fc:9c:8f:7e:55:ed:f3:23:e7:2e:90:24:b2:33:fb:26:
         33:60:a7:b6:9f:49:9b:df:27:5f:e2:d2:1f:6f:fc:c7:e2:7b:
         18:f9:a3:b8:86:17:29:c1:f4:7d:95:19:a7:8f:e4:d2:49:3f:
         d4:4b:87:d6:ac:0b:6f:48:98:c9:1e:97:41:9f:f6:2d:69:10:
         3a:50:97:f6:5c:0f:74:94:7b:6a:0f:fe:55:cb:df:15:ae:62:
         40:f4:d6:bf
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMDRC
NkE3NkUxQkY2MTZENkI0MDUwNjg0QTMzQkI5MzBDQzE4QzMyMB4XDTI2MDMzMTA4
NDQwNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTJFRTRERjZBNTE0MzdF
MUM0NDk3MjM2MUI0NjY5NDJGNkI1MUMwMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM+t07oYjaYKjfTsu2As++5A6Mux6d+kJ6BFHyiwjTPGmdCxQZqt
BWrGQabSfng+YK7KfD9SDP/Y2n6PpJh6qAI+EqPgtnfqTJwUU6X4NRNz8i9YODNp
4Pi0IPu7eS8vtfjSioqlSR47O7tI4KREg196ECvF+P3ZB01JrQsSlOUZb/wL32iw
jm4bFGVLlbZavdBCJ924eoyBmu3Ac+W+FdkG09jgBaLsSIKLJybzZxI/zJp/c5BT
DuZv9mtKZ5S/bELekeGNPb77GdvMBqVZJ7RatTQqkIWexEOfYuMW71LuQKbov5Ed
sxv+5wHtM48+M29nqej8N3w+dYN+cY6/qq8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSS7k32pRQ34cRJcjYbRmlC9rUcAjAfBgNVHSMEGDAWgBSwS2p24b9hbWtAUGhK
M7uTDMGMMjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjIxL3NFdHFkdUdfWVcxclFGQm9Tak83a3d6QmpESS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3NFdHFkdUdfWVcxclFGQm9Tak83a3d6
QmpESS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yMjEva3U1TjlxVVVOLUhFU1hJMkcwWnBRdmExSEFJLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANKFbjANBgkqhkiG9w0BAQsFAAOCAQEA
Ihbb+sgQNmSyn28ZFrJ4YHCdy0MZRosdyLLAASOaEdEBTEcEVjA4z3RnkZq2JXaM
pAsfxUXspYgq45+G7e9jlTXZXqS42PM30IAI5iuqdQXkc9K2Ov7rZDqZ2qWNCjs+
oYx8hEoyD75olMJyjMOSGoQs/2kAMOMFekJjv8fOfegci47/pgcLyj1JVlnG/6Yq
EjxZPRWat787IUlSFkyDVJ1VuXv8nI9+Ve3zI+cukCSyM/smM2Cntp9Jm98nX+LS
H2/8x+J7GPmjuIYXKcH0fZUZp4/k0kk/1EuH1qwLb0iYyR6XQZ/2LWkQOlCX9lwP
dJR7ag/+VcvfFa5iQPTWvw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:38 2026 by rpki-client