Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/224/_vgTRC7IBziGiK0lkhCxWey6N_I.roa
File:                     _vgTRC7IBziGiK0lkhCxWey6N_I.roa (raw, json)
Hash identifier:          HdVRUxazzYubglcCS7JLTUKKHnGP3uE7nkzVVTEOhhk=
Subject key identifier:   FE:F8:13:44:2E:C8:07:38:86:88:AD:25:92:10:B1:59:EC:BA:37:F2
Certificate issuer:       /CN=D623C38C2A127007F93E7C840DF875022E51C547
Certificate serial:       30
Authority key identifier: D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/_vgTRC7IBziGiK0lkhCxWey6N_I.roa
Signing time:             Tue 31 Mar 2026 08:41:26 +0000
ROA not before:           Tue 31 Mar 2026 08:41:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7668
IP address blocks:        210.250.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D623C38C2A127007F93E7C840DF875022E51C547
        Validity
            Not Before: Mar 31 08:41:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FEF813442EC807388688AD259210B159ECBA37F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:0b:ad:38:a4:2c:b2:e7:1e:60:82:a2:77:
                    54:68:2a:ee:2f:10:8b:52:b2:af:a7:aa:73:a5:49:
                    df:55:e9:f0:10:14:c4:e7:6c:3a:4a:a2:ea:f1:5a:
                    ad:e5:2f:a7:dc:b5:5d:cf:3d:3b:c0:a7:c9:62:84:
                    55:1a:fe:bb:16:7f:9b:c9:26:c4:61:2e:79:4b:9d:
                    15:e3:30:6f:43:e3:3f:de:28:04:93:aa:d1:b3:fb:
                    f3:1a:09:7d:e0:18:de:b2:b4:43:e9:9d:e8:c6:d9:
                    8d:38:e7:86:ab:b2:6e:44:55:a9:0f:20:ed:d7:ef:
                    1a:4f:fd:56:48:36:24:29:20:f6:70:9b:a6:de:3e:
                    4e:b9:11:6a:98:b1:39:fa:fc:7a:59:05:0a:53:1f:
                    5c:df:d9:4d:74:9c:40:f2:1d:bb:5a:c5:5a:18:d8:
                    48:71:61:5b:de:b8:4f:ec:4e:8b:b7:d0:4c:8e:b8:
                    05:49:53:f2:26:7b:48:d9:1e:9e:26:80:d3:5a:b4:
                    b0:26:21:d6:c6:23:5f:66:6b:1a:0d:b1:df:c5:b3:
                    72:88:07:b8:11:74:b9:dc:ad:0d:30:f8:cd:32:a5:
                    cf:50:2c:77:84:63:02:7e:e8:08:a4:a7:de:4a:31:
                    2c:6b:b5:a7:c1:3e:68:79:81:a1:8d:30:c7:91:e8:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F8:13:44:2E:C8:07:38:86:88:AD:25:92:10:B1:59:EC:BA:37:F2
            X509v3 Authority Key Identifier:
                keyid:D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/_vgTRC7IBziGiK0lkhCxWey6N_I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:21:69:57:f9:87:af:0d:9e:e6:7a:0b:cd:85:11:05:5c:2e:
         8b:b3:9b:eb:20:92:22:d4:fb:26:a3:45:ca:cb:64:90:e2:b4:
         8a:4b:2a:7a:9a:c2:42:d3:ee:81:40:8e:7e:7b:f2:94:5c:01:
         e3:1a:2e:a0:b6:e0:de:a1:e3:ee:18:c8:46:ee:b5:92:3a:2a:
         9c:24:33:fa:e5:b9:83:65:e1:52:c8:4a:d1:aa:82:c2:13:c0:
         c4:74:00:13:80:65:5d:6e:46:ec:9d:f9:6c:a3:42:29:73:9a:
         99:56:5a:e7:70:59:08:bf:7d:82:95:15:b9:c9:e1:0a:ce:45:
         60:1f:21:d6:a6:e5:4f:62:ff:43:db:f5:3e:60:87:5e:bd:8f:
         6b:8d:eb:ad:41:34:7b:92:bb:d8:9c:42:e9:0a:a6:e1:86:5a:
         57:18:ec:19:75:55:7c:77:09:21:bd:24:c7:d6:e2:f3:3c:13:
         b8:f6:03:35:75:c1:29:96:d3:1a:be:a6:3c:82:bf:18:20:a9:
         5d:cf:68:eb:7b:25:1d:5b:4d:c6:58:fa:0a:74:41:a8:c8:c3:
         ae:9b:1f:c6:57:b4:74:c7:86:06:92:fb:c9:d1:0b:29:de:cb:
         a1:79:4d:09:06:47:10:36:24:29:6b:e1:45:11:66:9a:43:47:
         1e:0f:86:e8
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjIz
QzM4QzJBMTI3MDA3RjkzRTdDODQwREY4NzUwMjJFNTFDNTQ3MB4XDTI2MDMzMTA4
NDEyNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRkVGODEzNDQyRUM4MDcz
ODg2ODhBRDI1OTIxMEIxNTlFQ0JBMzdGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL2JC604pCyy5x5ggqJ3VGgq7i8Qi1Kyr6eqc6VJ31Xp8BAUxOds
Okqi6vFareUvp9y1Xc89O8CnyWKEVRr+uxZ/m8kmxGEueUudFeMwb0PjP94oBJOq
0bP78xoJfeAY3rK0Q+md6MbZjTjnhquybkRVqQ8g7dfvGk/9Vkg2JCkg9nCbpt4+
TrkRapixOfr8elkFClMfXN/ZTXScQPIdu1rFWhjYSHFhW964T+xOi7fQTI64BUlT
8iZ7SNkeniaA01q0sCYh1sYjX2ZrGg2x38WzcogHuBF0udytDTD4zTKlz1Asd4Rj
An7oCKSn3koxLGu1p8E+aHmBoY0wx5Ho6B8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBT++BNELsgHOIaIrSWSELFZ7Lo38jAfBgNVHSMEGDAWgBTWI8OMKhJwB/k+fIQN
+HUCLlHFRzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjI0LzFpUERqQ29TY0FmNVBueUVEZmgxQWk1UnhVYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFpUERqQ29TY0FmNVBueUVEZmgxQWk1
UnhVYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yMjQvX3ZnVFJDN0lCemlHaUswbGtoQ3hXZXk2Tl9JLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANL6vzANBgkqhkiG9w0BAQsFAAOCAQEA
fyFpV/mHrw2e5noLzYURBVwui7Ob6yCSItT7JqNFystkkOK0iksqeprCQtPugUCO
fnvylFwB4xouoLbg3qHj7hjIRu61kjoqnCQz+uW5g2XhUshK0aqCwhPAxHQAE4Bl
XW5G7J35bKNCKXOamVZa53BZCL99gpUVucnhCs5FYB8h1qblT2L/Q9v1PmCHXr2P
a43rrUE0e5K72JxC6Qqm4YZaVxjsGXVVfHcJIb0kx9bi8zwTuPYDNXXBKZbTGr6m
PIK/GCCpXc9o63slHVtNxlj6CnRBqMjDrpsfxle0dMeGBpL7ydELKd7LoXlNCQZH
EDYkKWvhRRFmmkNHHg+G6A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:20:12 2026 by rpki-client