Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/igEtRbOjvZbbybEMwlPe1q4GTRw.roa
File:                     igEtRbOjvZbbybEMwlPe1q4GTRw.roa (raw, json)
Hash identifier:          z9fZ89d98/7hmtzXcxFN/iUvaFtL9TQqljftmy8fgWM=
Subject key identifier:   8A:01:2D:45:B3:A3:BD:96:DB:C9:B1:0C:C2:53:DE:D6:AE:06:4D:1C
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       F5
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/igEtRbOjvZbbybEMwlPe1q4GTRw.roa
Signing time:             Tue 31 Mar 2026 07:51:21 +0000
ROA not before:           Tue 31 Mar 2026 07:51:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9351
IP address blocks:        219.103.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar 31 07:51:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8A012D45B3A3BD96DBC9B10CC253DED6AE064D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fc:5b:f2:5d:24:83:91:af:70:d1:f1:51:a3:
                    ed:07:35:d6:7a:e7:4f:4b:27:94:fa:b4:57:db:0d:
                    ea:f6:66:f6:b9:61:2e:4a:82:c9:aa:56:ed:8b:b5:
                    71:b2:7a:4c:1d:e4:c1:f0:fc:e0:b7:f5:1a:06:aa:
                    f8:60:82:b2:61:0c:d8:ca:52:91:c2:85:16:ca:b0:
                    f7:72:9d:b4:0e:7b:84:dc:8d:b2:09:fa:39:0c:61:
                    c6:90:0b:15:9f:e3:81:77:c4:e3:d6:95:34:87:16:
                    11:5d:0c:8a:46:6b:b2:2b:4e:ac:62:70:c1:6b:8a:
                    87:b8:6d:c2:ae:ff:d4:6b:01:4e:fa:f3:84:0e:97:
                    17:12:08:2c:0e:de:18:ee:5b:52:09:d2:db:e3:ae:
                    c8:dc:fc:e1:16:9e:ba:9e:67:98:14:6b:7f:d5:9f:
                    45:57:2b:2f:3a:c6:c9:71:bd:ce:84:c4:ab:90:ab:
                    24:28:77:e8:87:9e:a0:22:f8:aa:49:2d:36:d4:27:
                    37:5d:b5:bb:1b:1e:41:14:ea:6e:6c:f7:bc:37:a3:
                    09:2f:9d:24:18:e6:45:20:99:d0:85:42:03:74:24:
                    f5:4b:84:f2:42:49:fc:00:a0:5f:ba:d3:23:00:d3:
                    1d:09:66:f4:0b:60:cd:32:3d:ba:08:82:4f:71:82:
                    82:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:01:2D:45:B3:A3:BD:96:DB:C9:B1:0C:C2:53:DE:D6:AE:06:4D:1C
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/igEtRbOjvZbbybEMwlPe1q4GTRw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.103.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:e6:aa:fa:76:ef:c9:3e:91:43:7c:63:ea:aa:41:c7:c4:
         55:f0:e1:9c:dc:ad:58:90:c1:4f:1f:f9:e9:0d:4e:8e:0b:ab:
         23:4d:67:59:1c:8d:c2:00:7f:3b:cc:e4:98:f7:17:91:1a:ce:
         d7:5e:74:ab:b9:c4:00:74:b2:21:e1:b0:76:c7:02:61:2c:82:
         cc:be:b0:3b:17:22:f1:8e:1c:ab:60:99:0f:11:73:3e:cc:05:
         4a:31:da:90:d7:89:ef:a5:ab:0e:9b:69:c2:ad:48:a1:bc:7a:
         a4:a5:f5:8e:a7:59:33:34:8d:85:a2:97:da:a3:6b:5a:70:9f:
         6b:e0:a5:78:53:f4:b5:1f:07:4c:9f:22:2b:b4:6c:2d:dd:7d:
         62:1d:59:be:27:b3:d1:79:2f:bd:7c:ff:93:b3:78:ab:2c:5c:
         5a:f3:17:2a:2e:a7:f4:48:0a:04:97:f8:72:a8:dc:2f:1f:46:
         3f:8a:75:2b:56:f2:67:c7:22:e4:46:34:90:78:46:51:6a:92:
         5c:a9:85:83:e9:80:38:ec:36:82:9c:d3:d9:db:e2:e0:cf:70:
         88:d2:e1:b2:a1:43:43:0c:84:2e:da:8b:0c:26:3c:a4:a1:41:
         c5:2d:9d:22:26:40:97:e5:31:a1:a2:db:14:41:cc:62:be:b7:
         1e:4c:1b:d5
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw
RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNjAzMzEw
NzUxMjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhBMDEyRDQ1QjNBM0JE
OTZEQkM5QjEwQ0MyNTNERUQ2QUUwNjREMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDz/FvyXSSDka9w0fFRo+0HNdZ6509LJ5T6tFfbDer2Zva5YS5K
gsmqVu2LtXGyekwd5MHw/OC39RoGqvhggrJhDNjKUpHChRbKsPdynbQOe4TcjbIJ
+jkMYcaQCxWf44F3xOPWlTSHFhFdDIpGa7IrTqxicMFrioe4bcKu/9RrAU7684QO
lxcSCCwO3hjuW1IJ0tvjrsjc/OEWnrqeZ5gUa3/Vn0VXKy86xslxvc6ExKuQqyQo
d+iHnqAi+KpJLTbUJzddtbsbHkEU6m5s97w3owkvnSQY5kUgmdCFQgN0JPVLhPJC
SfwAoF+60yMA0x0JZvQLYM0yPboIgk9xgoK9AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUigEtRbOjvZbbybEMwlPe1q4GTRwwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u
QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj
a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjM0L2lnRXRSYk9qdlpiYnliRU13bFBlMXE0R1RSdy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATbZ0AwDQYJKoZIhvcNAQELBQADggEB
AFuS5qr6du/JPpFDfGPqqkHHxFXw4ZzcrViQwU8f+ekNTo4LqyNNZ1kcjcIAfzvM
5Jj3F5EaztdedKu5xAB0siHhsHbHAmEsgsy+sDsXIvGOHKtgmQ8Rcz7MBUox2pDX
ie+lqw6bacKtSKG8eqSl9Y6nWTM0jYWil9qja1pwn2vgpXhT9LUfB0yfIiu0bC3d
fWIdWb4ns9F5L718/5OzeKssXFrzFyoup/RICgSX+HKo3C8fRj+KdStW8mfHIuRG
NJB4RlFqklyphYPpgDjsNoKc09nb4uDPcIjS4bKhQ0MMhC7aiwwmPKShQcUtnSIm
QJflMaGi2xRBzGK+tx5MG9U=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:11 2026 by rpki-client