Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/AGqDEYg9tBL0lEV_yGZIffegy-k.roa
File:                     AGqDEYg9tBL0lEV_yGZIffegy-k.roa (raw, json)
Hash identifier:          ypxeKfUgUkoy46NUr/OAToWskdF8B2rh+y+nvUPzpAg=
Subject key identifier:   00:6A:83:11:88:3D:B4:12:F4:94:45:7F:C8:66:48:7D:F7:A0:CB:E9
Certificate issuer:       /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial:       58
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/AGqDEYg9tBL0lEV_yGZIffegy-k.roa
Signing time:             Tue 31 Mar 2026 08:16:30 +0000
ROA not before:           Tue 31 Mar 2026 08:16:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7668
IP address blocks:        210.166.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
        Validity
            Not Before: Mar 31 08:16:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=006A8311883DB412F494457FC866487DF7A0CBE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:67:47:86:a9:a5:3a:96:1c:bb:ce:60:93:
                    5a:1e:5b:8a:4e:a2:c0:0b:13:1d:2d:ef:90:30:1a:
                    63:88:34:25:08:03:0d:47:74:87:bd:a0:2d:32:3a:
                    8a:9b:53:da:38:18:04:b5:2b:b9:a4:15:59:e0:d0:
                    f0:47:6c:ba:c8:36:3e:92:a4:b0:fe:ad:f4:2c:a6:
                    9d:85:28:d8:e8:77:c7:d5:b6:b1:ff:bb:09:31:21:
                    6f:a7:92:37:33:bb:4e:64:f4:91:b6:b6:50:74:98:
                    f9:00:65:7c:6b:4e:0d:60:0a:1f:46:90:46:91:39:
                    ad:a4:42:ed:12:96:44:40:c9:25:8f:3e:89:26:ed:
                    21:b6:2f:11:e0:50:15:4c:35:de:af:43:ac:1a:8a:
                    63:7a:08:7c:ac:f3:d5:d9:2a:aa:3f:ae:9a:2c:3d:
                    76:dc:55:3f:8a:a5:af:3f:39:83:4b:d7:54:6d:6e:
                    83:34:0d:2c:29:2d:27:63:d7:06:70:b5:22:28:da:
                    1f:43:0f:76:7e:cd:a2:16:80:0c:e4:21:61:b7:07:
                    7a:8f:05:6d:98:7d:ae:45:a2:1e:23:97:dc:14:dc:
                    7c:b1:44:08:c7:52:af:ef:7a:5d:ed:56:50:f6:7d:
                    87:81:70:78:85:36:df:a8:1c:92:7f:3e:26:b2:cc:
                    a4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6A:83:11:88:3D:B4:12:F4:94:45:7F:C8:66:48:7D:F7:A0:CB:E9
            X509v3 Authority Key Identifier:
                keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/AGqDEYg9tBL0lEV_yGZIffegy-k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.166.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:fb:a3:1c:38:b3:49:d3:34:98:79:69:d1:40:ad:dd:ef:97:
         a6:5d:33:05:99:86:e6:1b:c1:ff:a6:e5:c0:d6:d9:dc:98:f9:
         3e:81:d7:d3:58:b3:9f:44:8d:d4:03:a9:66:11:89:a3:b2:2a:
         6c:77:cb:ce:c0:e3:4d:b9:2d:a1:a1:23:c5:c8:5a:a5:5f:21:
         b8:23:59:e5:de:09:fa:54:2d:09:57:b7:54:5c:f7:40:29:4d:
         d8:51:d8:95:6e:ae:4f:ee:14:90:2e:32:c2:9b:67:be:e2:04:
         23:6b:1a:6d:50:e6:05:9d:69:3c:67:c0:91:68:4e:b7:35:a2:
         fe:e4:66:c9:4c:da:5a:e9:13:d9:bc:89:47:16:bf:ad:df:1a:
         0b:c5:93:10:cd:1b:9d:9b:de:56:ca:6b:e9:6b:f6:eb:b5:60:
         fa:c9:87:67:bc:fd:0c:d0:0f:7a:bb:3a:3f:2b:d4:dd:72:42:
         8a:73:5f:b3:e5:83:0c:5a:96:db:b4:02:8c:79:ae:f2:af:16:
         16:c1:91:d9:f6:0f:a4:d7:26:2a:02:ea:d7:63:c3:33:22:bc:
         11:51:ad:25:94:10:c7:dd:3f:46:68:8a:4e:44:e0:78:21:d8:
         4f:a3:47:e0:6d:b9:4f:74:af:55:66:ab:cf:58:cb:be:e9:3c:
         2e:8a:67:e0
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy
QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI2MDMzMTA4
MTYzMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDA2QTgzMTE4ODNEQjQx
MkY0OTQ0NTdGQzg2NjQ4N0RGN0EwQ0JFOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL7NZ0eGqaU6lhy7zmCTWh5bik6iwAsTHS3vkDAaY4g0JQgDDUd0
h72gLTI6iptT2jgYBLUruaQVWeDQ8Edsusg2PpKksP6t9CymnYUo2Oh3x9W2sf+7
CTEhb6eSNzO7TmT0kba2UHSY+QBlfGtODWAKH0aQRpE5raRC7RKWREDJJY8+iSbt
IbYvEeBQFUw13q9DrBqKY3oIfKzz1dkqqj+umiw9dtxVP4qlrz85g0vXVG1ugzQN
LCktJ2PXBnC1IijaH0MPdn7NohaADOQhYbcHeo8FbZh9rkWiHiOX3BTcfLFECMdS
r+96Xe1WUPZ9h4FweIU236gckn8+JrLMpIMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQAaoMRiD20EvSURX/IZkh996DL6TAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5
YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi
SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yMzIvQUdxREVZZzl0QkwwbEVWX3lHWklmZmVneS1rLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANKmBTANBgkqhkiG9w0BAQsFAAOCAQEA
S/ujHDizSdM0mHlp0UCt3e+Xpl0zBZmG5hvB/6blwNbZ3Jj5PoHX01izn0SN1AOp
ZhGJo7IqbHfLzsDjTbktoaEjxchapV8huCNZ5d4J+lQtCVe3VFz3QClN2FHYlW6u
T+4UkC4ywptnvuIEI2sabVDmBZ1pPGfAkWhOtzWi/uRmyUzaWukT2byJRxa/rd8a
C8WTEM0bnZveVspr6Wv267Vg+smHZ7z9DNAPers6PyvU3XJCinNfs+WDDFqW27QC
jHmu8q8WFsGR2fYPpNcmKgLq12PDMyK8EVGtJZQQx90/RmiKTkTgeCHYT6NH4G25
T3SvVWarz1jLvuk8Lopn4A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:35 2026 by rpki-client