Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2432/EMtKA0Afs4B3HYXIPL4yFvbNE6U.roa
File:                     EMtKA0Afs4B3HYXIPL4yFvbNE6U.roa (raw, json)
Hash identifier:          AKYBFwgRl3YlH3ncLP25RpgXsPf2dJPtaSAafEnrlvw=
Subject key identifier:   10:CB:4A:03:40:1F:B3:80:77:1D:85:C8:3C:BE:32:16:F6:CD:13:A5
Certificate issuer:       /CN=E62F69C95A098F8073F5F3C3C1A98B76CBF8502A
Certificate serial:       72
Authority key identifier: E6:2F:69:C9:5A:09:8F:80:73:F5:F3:C3:C1:A9:8B:76:CB:F8:50:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/EMtKA0Afs4B3HYXIPL4yFvbNE6U.roa
Signing time:             Tue 31 Mar 2026 07:30:43 +0000
ROA not before:           Tue 31 Mar 2026 07:30:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        157.4.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5i9pyVoJj4Bz9fPDwamLdsv4UCo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5i9pyVoJj4Bz9fPDwamLdsv4UCo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F69C95A098F8073F5F3C3C1A98B76CBF8502A
        Validity
            Not Before: Mar 31 07:30:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=10CB4A03401FB380771D85C83CBE3216F6CD13A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:d2:48:80:e7:1e:ca:c5:59:9b:18:a6:05:
                    d2:b9:8d:79:ff:83:43:d0:a8:23:67:f1:e0:b5:6b:
                    f6:d9:c0:11:72:27:e6:84:46:df:ab:29:c6:63:b3:
                    38:8a:00:b5:78:c4:43:22:d8:3a:3b:de:fe:d0:8c:
                    02:2f:af:02:76:f0:46:55:e5:1d:df:89:f9:3c:8e:
                    16:b2:28:c2:84:c8:aa:96:9d:97:b9:30:d1:f7:5a:
                    27:12:f7:08:1c:f8:d5:cb:74:26:03:9b:13:3f:37:
                    38:34:72:f1:57:d4:65:f9:e2:20:e2:8f:15:6f:d6:
                    d2:55:83:21:87:a0:7b:8a:5b:de:66:e1:33:c1:60:
                    a5:3a:24:60:4b:4f:9e:de:8a:bd:f6:7e:d3:16:60:
                    f6:4c:7c:66:a7:a0:02:cd:2f:4f:71:64:ac:20:2f:
                    ce:ce:48:38:12:20:5b:38:3e:a6:78:07:13:c8:87:
                    2e:fa:0a:4b:7b:10:aa:83:73:cf:b9:94:69:8e:13:
                    5a:d3:b9:dc:fd:97:80:ee:e7:70:f0:a5:a8:9c:87:
                    18:77:e4:53:70:25:5f:69:bd:ee:c8:a3:1a:a3:e0:
                    5f:9f:6f:cc:99:63:d1:84:3d:ab:c1:e7:67:bc:e2:
                    4c:64:a5:a7:4d:bd:71:c7:b2:ed:d6:83:7b:e8:7e:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CB:4A:03:40:1F:B3:80:77:1D:85:C8:3C:BE:32:16:F6:CD:13:A5
            X509v3 Authority Key Identifier:
                keyid:E6:2F:69:C9:5A:09:8F:80:73:F5:F3:C3:C1:A9:8B:76:CB:F8:50:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5i9pyVoJj4Bz9fPDwamLdsv4UCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/EMtKA0Afs4B3HYXIPL4yFvbNE6U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         24:d8:56:3b:7a:16:01:d5:0d:51:43:d8:ac:83:5f:55:07:e0:
         a2:63:eb:a2:d3:5b:65:95:8a:59:67:07:8d:25:6f:df:03:71:
         d4:b5:23:4a:90:36:2f:8c:49:75:d3:84:14:64:14:3a:ba:20:
         f4:22:48:4f:78:28:7c:73:19:1b:a7:3a:f1:73:f1:64:78:e0:
         bd:d2:c0:80:61:68:ec:8d:fa:ed:27:c8:78:b9:49:9f:a5:49:
         81:04:eb:d9:06:e5:48:70:72:13:4e:2c:9c:d4:b6:7d:f9:64:
         14:1c:40:a7:01:41:20:b7:22:5c:da:dd:53:a2:47:54:27:8c:
         37:86:6e:f1:9a:9a:1c:dd:5e:a4:0b:8f:ac:87:e9:45:0c:f2:
         e3:3b:a2:d3:24:ab:5a:cd:d9:38:3a:8d:f0:0f:4d:85:b4:a7:
         f0:39:21:f1:a1:8f:45:c4:1b:e2:b4:24:e5:74:ce:30:d6:0e:
         c0:43:fa:5d:7c:bc:fe:1b:31:15:ff:1a:eb:e3:bd:06:9c:71:
         e1:f3:f2:38:7f:87:43:a1:7b:d4:74:f7:5f:d0:45:ab:2a:31:
         d0:56:cb:9d:91:f6:80:ef:01:14:e8:90:3e:bf:0f:ff:73:58:
         be:3e:95:69:10:3b:34:f7:49:f8:a2:3e:28:8b:1f:c5:58:7c:
         5d:45:f4:f4
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjJG
NjlDOTVBMDk4RjgwNzNGNUYzQzNDMUE5OEI3NkNCRjg1MDJBMB4XDTI2MDMzMTA3
MzA0M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTBDQjRBMDM0MDFGQjM4
MDc3MUQ4NUM4M0NCRTMyMTZGNkNEMTNBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANG40kiA5x7KxVmbGKYF0rmNef+DQ9CoI2fx4LVr9tnAEXIn5oRG
36spxmOzOIoAtXjEQyLYOjve/tCMAi+vAnbwRlXlHd+J+TyOFrIowoTIqpadl7kw
0fdaJxL3CBz41ct0JgObEz83ODRy8VfUZfniIOKPFW/W0lWDIYege4pb3mbhM8Fg
pTokYEtPnt6KvfZ+0xZg9kx8ZqegAs0vT3FkrCAvzs5IOBIgWzg+pngHE8iHLvoK
S3sQqoNzz7mUaY4TWtO53P2XgO7ncPClqJyHGHfkU3AlX2m97sijGqPgX59vzJlj
0YQ9q8HnZ7ziTGSlp029ccey7daDe+h+r/8CAwEAAaOCAdowggHWMB0GA1UdDgQW
BBQQy0oDQB+zgHcdhcg8vjIW9s0TpTAfBgNVHSMEGDAWgBTmL2nJWgmPgHP188PB
qYt2y/hQKjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQzMi81aTlweVZvSmo0Qno5ZlBEd2FtTGRzdjRVQ28uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC81aTlweVZvSmo0Qno5ZlBEd2FtTGRz
djRVQ28uY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjQzMi9FTXRLQTBBZnM0QjNIWVhJUEw0eUZ2Yk5FNlUucm9hMB4G
CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnQQwDQYJKoZIhvcNAQELBQADggEB
ACTYVjt6FgHVDVFD2KyDX1UH4KJj66LTW2WVillnB40lb98DcdS1I0qQNi+MSXXT
hBRkFDq6IPQiSE94KHxzGRunOvFz8WR44L3SwIBhaOyN+u0nyHi5SZ+lSYEE69kG
5UhwchNOLJzUtn35ZBQcQKcBQSC3Ilza3VOiR1QnjDeGbvGamhzdXqQLj6yH6UUM
8uM7otMkq1rN2Tg6jfAPTYW0p/A5IfGhj0XEG+K0JOV0zjDWDsBD+l18vP4bMRX/
GuvjvQacceHz8jh/h0Ohe9R091/QRasqMdBWy52R9oDvARTokD6/D/9zWL4+lWkQ
OzT3SfiiPiiLH8VYfF1F9PQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:07 2026 by rpki-client