Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/zv9QBCXRBOQveW6jqnAbAUePriU.roa
File:                     zv9QBCXRBOQveW6jqnAbAUePriU.roa (raw, json)
Hash identifier:          ue7Jmh16xQAGu9ng+wkM/KY9SK/mv8aY8sDw19vN8iQ=
Subject key identifier:   CE:FF:50:04:25:D1:04:E4:2F:79:6E:A3:AA:70:1B:01:47:8F:AE:25
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       012D
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/zv9QBCXRBOQveW6jqnAbAUePriU.roa
Signing time:             Tue 31 Mar 2026 07:36:43 +0000
ROA not before:           Tue 31 Mar 2026 07:36:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        61.211.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Mar 31 07:36:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CEFF500425D104E42F796EA3AA701B01478FAE25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:8a:d3:04:bf:ad:c5:6a:7c:79:3e:79:03:
                    30:3b:ec:73:67:71:40:ec:8f:50:a2:d1:8f:d3:38:
                    c2:36:37:a3:81:97:fc:73:d7:50:b8:78:17:21:42:
                    92:f7:96:8f:aa:9d:19:2b:78:12:f6:98:ca:eb:d1:
                    bd:8f:fa:8b:6c:11:c7:44:aa:64:9a:c9:c0:bb:62:
                    84:a3:71:01:d3:1d:bc:e9:a5:6c:55:0b:20:f7:53:
                    a2:75:aa:52:74:77:63:db:9b:21:73:7c:d6:40:e9:
                    69:e7:ff:d1:ca:a3:c2:fe:9c:b7:bf:02:87:93:66:
                    62:83:2e:50:85:b2:05:6a:80:c5:a3:ce:28:6a:38:
                    af:af:49:05:31:14:36:19:15:5d:9b:5b:b4:42:86:
                    cf:1c:b7:cc:c7:87:22:99:9b:63:1d:4e:5c:02:8e:
                    a9:17:f0:8b:0b:b7:9b:82:54:87:d8:73:8a:7d:01:
                    39:8e:51:51:4c:e4:97:02:f8:9e:4d:16:41:0d:4f:
                    83:b0:e6:4d:8d:e7:22:2f:df:70:59:79:6e:c5:95:
                    6f:7f:19:a8:12:d3:f9:62:a0:60:59:9f:dc:6a:6c:
                    a2:0a:7c:fb:3b:d4:b3:58:95:b3:1f:c4:f1:9d:90:
                    42:02:84:ea:b5:b9:8f:90:a9:e9:8c:a0:fd:37:9b:
                    45:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FF:50:04:25:D1:04:E4:2F:79:6E:A3:AA:70:1B:01:47:8F:AE:25
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/zv9QBCXRBOQveW6jqnAbAUePriU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:80:7b:7e:5f:c9:9b:4c:18:ec:52:cf:34:a4:6c:19:8f:57:
         7c:e9:24:87:f5:41:64:1b:aa:d0:6b:ea:87:d9:11:b1:34:4f:
         b2:d4:58:db:9c:04:bf:41:1c:47:ef:3a:af:c9:2d:f8:f3:52:
         95:04:85:6d:3c:48:82:3a:de:1d:7e:79:fc:40:5f:93:bf:27:
         cb:bf:3d:ed:1e:e8:3b:ef:5f:ef:1a:8f:68:19:0a:0e:57:33:
         97:5b:08:e4:3b:69:31:82:64:82:32:c4:64:4a:65:c4:91:e8:
         b9:64:04:78:1e:b7:52:53:27:ca:40:53:d7:68:45:f6:b9:bb:
         ea:bc:21:1c:f4:0a:7e:8a:70:a1:70:e6:f6:7c:38:53:6a:d3:
         8c:ed:4b:8b:90:4e:3d:bd:f7:cb:f3:05:90:fa:01:20:6f:c4:
         62:b0:2f:0b:9f:28:44:ca:ac:1f:f9:f5:8e:37:7d:df:c3:85:
         c1:d1:fb:ef:61:1e:b5:8c:2f:56:5f:54:b3:d4:af:64:ed:e5:
         40:35:74:a4:3c:44:cf:f0:45:66:7d:bb:25:57:70:5c:fa:1f:
         c8:bc:f5:ac:34:00:f8:1d:bf:04:1e:21:53:e7:52:49:11:26:
         fb:9b:f5:49:e4:20:ad:8d:a0:dd:0c:e0:1c:77:5c:77:2c:f6:
         36:4c:6b:d5
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNjAzMzEw
NzM2NDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENFRkY1MDA0MjVEMTA0
RTQyRjc5NkVBM0FBNzAxQjAxNDc4RkFFMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvWYrTBL+txWp8eT55AzA77HNncUDsj1Ci0Y/TOMI2N6OBl/xz
11C4eBchQpL3lo+qnRkreBL2mMrr0b2P+otsEcdEqmSaycC7YoSjcQHTHbzppWxV
CyD3U6J1qlJ0d2PbmyFzfNZA6Wnn/9HKo8L+nLe/AoeTZmKDLlCFsgVqgMWjzihq
OK+vSQUxFDYZFV2bW7RChs8ct8zHhyKZm2MdTlwCjqkX8IsLt5uCVIfYc4p9ATmO
UVFM5JcC+J5NFkENT4Ow5k2N5yIv33BZeW7FlW9/GagS0/lioGBZn9xqbKIKfPs7
1LNYlbMfxPGdkEIChOq1uY+QqemMoP03m0VzAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUzv9QBCXRBOQveW6jqnAbAUePriUwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjQ3L3p2OVFCQ1hSQk9RdmVXNmpxbkFiQVVlUHJpVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ90+AwDQYJKoZIhvcNAQELBQADggEB
AIqAe35fyZtMGOxSzzSkbBmPV3zpJIf1QWQbqtBr6ofZEbE0T7LUWNucBL9BHEfv
Oq/JLfjzUpUEhW08SII63h1+efxAX5O/J8u/Pe0e6DvvX+8aj2gZCg5XM5dbCOQ7
aTGCZIIyxGRKZcSR6LlkBHget1JTJ8pAU9doRfa5u+q8IRz0Cn6KcKFw5vZ8OFNq
04ztS4uQTj2998vzBZD6ASBvxGKwLwufKETKrB/59Y43fd/DhcHR++9hHrWML1Zf
VLPUr2Tt5UA1dKQ8RM/wRWZ9uyVXcFz6H8i89aw0APgdvwQeIVPnUkkRJvub9Unk
IK2NoN0M4Bx3XHcs9jZMa9U=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:18 2026 by rpki-client