Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/tdFdfT2ngL6UXpI0XtSh_tQ8cdM.roa
File:                     tdFdfT2ngL6UXpI0XtSh_tQ8cdM.roa (raw, json)
Hash identifier:          J5p90hTygo4eJWUNPX6xu+GBKarOgcMDz3iHerlpXCw=
Subject key identifier:   B5:D1:5D:7D:3D:A7:80:BE:94:5E:92:34:5E:D4:A1:FE:D4:3C:71:D3
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       67
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/tdFdfT2ngL6UXpI0XtSh_tQ8cdM.roa
Signing time:             Tue 31 Mar 2026 08:34:11 +0000
ROA not before:           Tue 31 Mar 2026 08:34:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9597
IP address blocks:        180.235.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Mar 31 08:34:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B5D15D7D3DA780BE945E92345ED4A1FED43C71D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:2d:fe:18:f2:5a:4c:98:ed:3b:e4:d5:3e:
                    7b:ba:85:1e:d7:98:37:8f:27:35:56:bc:70:ae:9e:
                    9d:99:a0:3c:f8:1d:e1:71:0d:9c:c2:fd:32:22:6e:
                    23:c6:81:7e:68:a7:c0:87:4a:dd:bf:48:f9:6b:00:
                    db:76:62:b2:42:8a:74:72:ca:da:93:3e:15:2c:9a:
                    b2:29:bf:0c:d0:aa:f0:8f:4c:ac:0e:5b:8b:dd:b2:
                    13:54:a0:80:17:ed:88:f2:b8:ce:fa:91:3e:2a:45:
                    0c:fd:b7:84:b0:d0:d5:c0:77:92:cc:23:b0:ce:b2:
                    33:b5:bc:2a:27:cd:cb:dd:a4:2f:9d:cf:e1:e0:58:
                    c0:66:64:43:31:4e:c4:4d:bd:4a:b8:7c:09:9b:cc:
                    2b:4b:dd:54:41:a6:26:8c:30:1f:12:cc:ae:f9:36:
                    73:4e:3b:4c:72:d3:02:0b:b7:45:1c:d9:d7:fd:73:
                    c4:a3:0d:eb:da:2a:09:03:d2:61:0e:99:59:dc:79:
                    9c:80:53:de:76:8d:4d:22:0f:3e:4f:dc:e7:6a:b2:
                    3d:b6:cc:bb:6e:ad:60:00:37:34:4e:83:3c:d2:f2:
                    71:89:6b:09:12:a4:d0:78:35:dd:12:40:f8:bb:97:
                    f1:8e:89:04:62:05:b8:e8:d9:54:11:1f:19:61:29:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D1:5D:7D:3D:A7:80:BE:94:5E:92:34:5E:D4:A1:FE:D4:3C:71:D3
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/tdFdfT2ngL6UXpI0XtSh_tQ8cdM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.235.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:b5:e2:0a:43:9d:63:fb:cd:08:fd:f6:4a:2e:76:bc:fb:8c:
         20:2e:33:87:48:13:9d:eb:43:77:ba:4a:8e:a0:d0:83:79:67:
         1b:58:70:64:77:41:cf:a8:fc:de:43:3b:3c:84:35:1d:82:a3:
         fa:c3:0e:4b:db:c7:23:ab:87:85:24:6b:64:43:b6:8a:04:7b:
         4b:90:19:da:db:d1:23:d8:87:de:67:e8:86:2b:da:70:2c:0f:
         01:48:1b:8d:3a:75:27:6e:4b:cb:bf:50:0e:ef:2e:65:81:d4:
         bd:39:3b:5e:52:5a:03:e9:f4:13:cd:85:8b:e5:8c:fe:0f:91:
         f2:78:37:ec:ea:10:d3:d8:e1:ae:fa:b7:ba:19:f1:09:04:df:
         b7:6f:77:7c:eb:f6:31:82:33:bd:a4:b5:12:a6:af:47:69:c5:
         a7:b9:43:f9:be:b6:9e:99:3a:07:20:80:6e:3a:c2:5a:2c:2e:
         10:51:d3:a2:66:6e:0b:47:ed:a0:14:f3:fb:aa:4a:22:9d:10:
         e9:34:06:df:48:93:bb:b3:4b:99:42:89:21:b8:1f:15:2b:41:
         9b:93:b5:35:d9:39:0d:a0:76:a3:10:e5:2c:85:1c:78:73:d2:
         9f:aa:77:46:67:c2:a3:5d:03:ff:e0:79:9e:71:05:d6:a8:1b:
         0c:07:56:b3
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTY5
NjRBN0NFMEE1OEY0QUUzNjczRjQ3RDdBMUQ0MjVCRTRBMDdEMB4XDTI2MDMzMTA4
MzQxMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjVEMTVEN0QzREE3ODBC
RTk0NUU5MjM0NUVENEExRkVENDNDNzFEMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALOzLf4Y8lpMmO075NU+e7qFHteYN48nNVa8cK6enZmgPPgd4XEN
nML9MiJuI8aBfminwIdK3b9I+WsA23ZiskKKdHLK2pM+FSyasim/DNCq8I9MrA5b
i92yE1SggBftiPK4zvqRPipFDP23hLDQ1cB3kswjsM6yM7W8KifNy92kL53P4eBY
wGZkQzFOxE29Srh8CZvMK0vdVEGmJowwHxLMrvk2c047THLTAgu3RRzZ1/1zxKMN
69oqCQPSYQ6ZWdx5nIBT3naNTSIPPk/c52qyPbbMu26tYAA3NE6DPNLycYlrCRKk
0Hg13RJA+LuX8Y6JBGIFuOjZVBEfGWEpQlcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBS10V19PaeAvpRekjRe1KH+1Dxx0zAfBgNVHSMEGDAWgBS5aWSnzgpY9K42c/R9
eh1CW+SgfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2a29IMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2
a29IMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yNDAvdGRGZGZUMm5nTDZVWHBJMFh0U2hfdFE4Y2RNLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbTr4DANBgkqhkiG9w0BAQsFAAOCAQEA
krXiCkOdY/vNCP32Si52vPuMIC4zh0gTnetDd7pKjqDQg3lnG1hwZHdBz6j83kM7
PIQ1HYKj+sMOS9vHI6uHhSRrZEO2igR7S5AZ2tvRI9iH3mfohivacCwPAUgbjTp1
J25Ly79QDu8uZYHUvTk7XlJaA+n0E82Fi+WM/g+R8ng37OoQ09jhrvq3uhnxCQTf
t293fOv2MYIzvaS1EqavR2nFp7lD+b62npk6ByCAbjrCWiwuEFHTomZuC0ftoBTz
+6pKIp0Q6TQG30iTu7NLmUKJIbgfFStBm5O1Ndk5DaB2oxDlLIUceHPSn6p3RmfC
o10D/+B5nnEF1qgbDAdWsw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:34:53 2026 by rpki-client