Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/-wTQFYflKDASrXH92IHpy6cm0UU.roa
File:                     -wTQFYflKDASrXH92IHpy6cm0UU.roa (raw, json)
Hash identifier:          J0k7CubdrKbpVfg1aqXnjzN48R+hObJgpRIPrvkH354=
Subject key identifier:   FB:04:D0:15:87:E5:28:30:12:AD:71:FD:D8:81:E9:CB:A7:26:D1:45
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       F6
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/-wTQFYflKDASrXH92IHpy6cm0UU.roa
Signing time:             Tue 31 Mar 2026 08:17:00 +0000
ROA not before:           Tue 31 Mar 2026 08:17:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        157.65.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FB04D01587E5283012AD71FDD881E9CBA726D145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:da:98:b8:50:cd:7e:0b:d9:8d:5f:b0:d4:d1:
                    c9:21:da:2e:e3:a4:1d:1c:ae:32:f9:ce:21:ea:c8:
                    d6:71:da:4b:71:41:58:99:f9:5e:c5:68:9b:ce:7f:
                    eb:11:34:f4:aa:44:e3:72:dc:2c:79:51:e9:38:50:
                    3e:24:8c:89:55:a7:06:91:f4:f6:ef:4e:66:85:04:
                    1c:59:80:70:7c:bf:05:70:fb:97:c0:86:56:cf:cb:
                    f1:21:5c:6a:71:c0:db:02:d1:53:93:fe:0d:ff:05:
                    0a:8e:dd:de:26:bf:7e:90:82:f2:d1:5a:28:3f:e8:
                    48:da:e2:fd:49:8b:63:49:b2:2f:c0:f6:ea:56:fc:
                    cb:6e:26:1a:15:eb:32:bd:b1:b5:45:d5:fa:13:e8:
                    6d:3d:b1:b2:23:e1:de:37:7b:58:6f:66:42:c8:ff:
                    d6:3f:06:c2:1a:27:71:4d:52:d8:8d:b4:89:33:73:
                    20:0c:51:59:aa:10:c9:a5:79:d1:f8:bb:4a:0f:af:
                    71:7f:ae:bd:fc:b1:8e:1f:b8:8f:26:36:af:8e:84:
                    c6:7a:6a:9d:9d:d4:a3:fb:31:1d:cf:32:d9:a6:bc:
                    41:4f:d3:e6:98:25:c9:84:d0:95:87:ee:36:c2:86:
                    21:4d:24:a3:0f:cb:c4:2d:29:eb:33:53:91:8f:fd:
                    01:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:04:D0:15:87:E5:28:30:12:AD:71:FD:D8:81:E9:CB:A7:26:D1:45
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/-wTQFYflKDASrXH92IHpy6cm0UU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a1:2a:bb:2e:7a:c9:20:de:6e:0a:cc:b7:b8:5d:3a:46:0b:46:
         2c:dc:bc:ab:9b:0a:2c:bd:e4:8b:be:d5:d4:48:1e:a0:9e:dd:
         44:54:fd:3f:18:72:19:a1:fa:15:ab:47:ce:c0:ae:9f:8d:d5:
         f4:18:d1:60:a9:f7:19:5d:a4:ea:d8:84:8e:2e:fa:72:12:87:
         e4:38:6c:19:98:a6:51:c1:98:cc:b1:27:c7:96:84:75:e1:10:
         62:06:72:57:f3:da:cc:0d:a4:dc:c8:34:a6:1a:a9:23:eb:a8:
         2a:84:c9:df:c9:2b:a5:f0:11:e8:92:53:ab:65:37:db:1e:0b:
         21:24:1d:75:45:b3:d1:32:13:6c:37:8e:d0:04:d9:60:7a:1d:
         31:7f:f1:69:95:ed:e4:9e:98:62:1e:c9:95:ee:b0:71:05:2c:
         80:02:65:42:c7:2c:74:4c:ef:3d:37:81:3a:59:fb:a8:e9:22:
         4d:6a:47:cc:ba:d3:0c:64:b6:9d:33:59:aa:1a:3c:2e:77:2d:
         6c:bf:a0:40:46:fa:36:00:94:85:62:7b:d1:d9:13:72:d7:ee:
         e9:8a:c1:be:d2:1a:8b:ae:1f:fa:50:3f:af:f6:a6:01:a3:d1:
         61:0f:c0:ab:66:44:5f:34:2d:77:33:56:4f:c5:7f:c8:f3:6a:
         6a:ab:f7:63
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw
ODE3MDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZCMDREMDE1ODdFNTI4
MzAxMkFENzFGREQ4ODFFOUNCQTcyNkQxNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDS2pi4UM1+C9mNX7DU0ckh2i7jpB0crjL5ziHqyNZx2ktxQViZ
+V7FaJvOf+sRNPSqRONy3Cx5Uek4UD4kjIlVpwaR9PbvTmaFBBxZgHB8vwVw+5fA
hlbPy/EhXGpxwNsC0VOT/g3/BQqO3d4mv36QgvLRWig/6Eja4v1Ji2NJsi/A9upW
/MtuJhoV6zK9sbVF1foT6G09sbIj4d43e1hvZkLI/9Y/BsIaJ3FNUtiNtIkzcyAM
UVmqEMmledH4u0oPr3F/rr38sY4fuI8mNq+OhMZ6ap2d1KP7MR3PMtmmvEFP0+aY
JcmE0JWH7jbChiFNJKMPy8QtKeszU5GP/QH9AgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQU+wTQFYflKDASrXH92IHpy6cm0UUwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yOS8td1RRRllmbEtEQVNyWEg5MklIcHk2Y20wVVUucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnUFAMA0GCSqGSIb3DQEBCwUAA4IBAQCh
Krsueskg3m4KzLe4XTpGC0Ys3LyrmwosveSLvtXUSB6gnt1EVP0/GHIZofoVq0fO
wK6fjdX0GNFgqfcZXaTq2ISOLvpyEofkOGwZmKZRwZjMsSfHloR14RBiBnJX89rM
DaTcyDSmGqkj66gqhMnfySul8BHoklOrZTfbHgshJB11RbPRMhNsN47QBNlgeh0x
f/Fple3knphiHsmV7rBxBSyAAmVCxyx0TO89N4E6Wfuo6SJNakfMutMMZLadM1mq
Gjwudy1sv6BARvo2AJSFYnvR2RNy1+7pisG+0hqLrh/6UD+v9qYBo9FhD8CrZkRf
NC13M1ZPxX/I82pqq/dj
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:25 2026 by rpki-client