Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/N7D7ob_s2UJELVbXiNoazZq_LBY.roa
File:                     N7D7ob_s2UJELVbXiNoazZq_LBY.roa (raw, json)
Hash identifier:          xwP5zamYxrbMNnrXtpqixpf91ygynNUIwzViDQ5iP6I=
Subject key identifier:   37:B0:FB:A1:BF:EC:D9:42:44:2D:56:D7:88:DA:1A:CD:9A:BF:2C:16
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       F5
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/N7D7ob_s2UJELVbXiNoazZq_LBY.roa
Signing time:             Tue 31 Mar 2026 08:17:00 +0000
ROA not before:           Tue 31 Mar 2026 08:17:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        157.65.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=37B0FBA1BFECD942442D56D788DA1ACD9ABF2C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:75:7d:11:d7:22:72:92:45:64:42:06:5a:
                    d7:3c:b4:51:99:7d:18:f6:37:82:4f:57:8d:7d:d6:
                    67:69:ed:66:7d:07:ce:fa:b4:7c:c3:bf:25:cd:15:
                    f3:42:e8:8e:8d:dd:90:55:89:36:bf:43:00:bc:d4:
                    f2:ba:a2:c0:ec:3e:71:77:b0:5e:ec:7b:fc:1d:55:
                    a3:99:ab:00:86:c8:c1:2c:c9:4e:2d:b6:a0:da:47:
                    21:b9:a7:af:a6:bc:69:2e:7e:5b:58:4b:59:a3:a4:
                    f6:4b:bd:db:9e:f9:c8:01:25:e4:e8:20:33:75:a0:
                    a9:92:42:e1:77:86:70:85:cb:7b:e3:d8:03:9d:fd:
                    2e:52:6e:5e:d4:94:bc:ac:79:7a:67:2a:21:27:fc:
                    b2:c1:fc:4a:15:86:b2:46:82:36:58:7d:e3:ab:06:
                    fb:28:89:84:5b:af:a1:24:9c:0c:57:06:e2:bf:dc:
                    90:7c:8a:bd:c8:b4:80:43:a7:ae:56:e1:a3:04:e4:
                    42:06:7c:6a:9d:b2:7c:dc:a1:e4:1f:22:18:26:5b:
                    cb:5d:8e:8c:3e:f4:b5:19:f4:07:37:49:de:dd:dd:
                    2f:5c:d4:7a:a5:bb:b2:81:3c:64:46:c5:76:24:92:
                    d0:29:bd:f1:c4:79:28:4c:50:95:6b:52:3d:a2:d1:
                    e2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B0:FB:A1:BF:EC:D9:42:44:2D:56:D7:88:DA:1A:CD:9A:BF:2C:16
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/N7D7ob_s2UJELVbXiNoazZq_LBY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:86:d7:6e:7e:33:84:4a:5d:bd:b0:67:93:56:4d:d7:e6:f2:
         a3:40:00:8a:99:24:99:96:52:9d:43:bf:fa:39:43:0b:ec:ca:
         0b:65:5d:d2:6c:c1:fc:a9:32:67:96:aa:bf:9d:f9:32:35:fb:
         2f:db:35:2c:bd:5a:b5:a1:9c:fa:6a:b1:bf:b6:b1:be:9c:55:
         3d:e6:0b:a2:b7:52:8f:e7:9a:07:b1:72:c9:92:cd:b2:e9:74:
         e1:34:29:3b:87:45:81:9b:08:11:c1:4e:c7:b3:11:9d:8d:e5:
         fb:66:10:ec:d5:f3:de:4b:c8:5c:43:5b:12:7a:ae:9b:dc:45:
         10:12:bd:79:ae:b1:53:d0:93:15:a6:ab:4f:2a:7b:5b:96:57:
         dc:66:7e:4e:d3:83:eb:57:cc:75:fa:d6:8e:35:43:bb:e1:74:
         b0:de:0d:31:8b:d2:f9:ab:fe:75:1e:0f:c3:57:86:bf:43:2b:
         34:df:7d:84:86:ee:89:6a:1b:0b:00:88:ad:7d:3b:8d:ea:0c:
         d6:6d:c6:f5:76:41:ba:18:b7:1e:b7:d8:62:62:7c:19:47:e9:
         b5:41:b4:e4:3c:67:24:ba:b9:fb:b3:d0:10:0d:4f:7f:9f:2e:
         89:ca:13:7b:9d:fc:8a:c9:b9:69:6e:d4:9c:60:5e:e8:08:04:
         12:fc:8e:6a
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw
ODE3MDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM3QjBGQkExQkZFQ0Q5
NDI0NDJENTZENzg4REExQUNEOUFCRjJDMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6LXV9EdcicpJFZEIGWtc8tFGZfRj2N4JPV4191mdp7WZ9B876
tHzDvyXNFfNC6I6N3ZBViTa/QwC81PK6osDsPnF3sF7se/wdVaOZqwCGyMEsyU4t
tqDaRyG5p6+mvGkufltYS1mjpPZLvdue+cgBJeToIDN1oKmSQuF3hnCFy3vj2AOd
/S5Sbl7UlLyseXpnKiEn/LLB/EoVhrJGgjZYfeOrBvsoiYRbr6EknAxXBuK/3JB8
ir3ItIBDp65W4aME5EIGfGqdsnzcoeQfIhgmW8tdjow+9LUZ9Ac3Sd7d3S9c1Hql
u7KBPGRGxXYkktApvfHEeShMUJVrUj2i0eLnAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUN7D7ob/s2UJELVbXiNoazZq/LBYwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yOS9ON0Q3b2JfczJVSkVMVmJYaU5vYXpacV9MQlkucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnUEgMA0GCSqGSIb3DQEBCwUAA4IBAQCo
htdufjOESl29sGeTVk3X5vKjQACKmSSZllKdQ7/6OUML7MoLZV3SbMH8qTJnlqq/
nfkyNfsv2zUsvVq1oZz6arG/trG+nFU95guit1KP55oHsXLJks2y6XThNCk7h0WB
mwgRwU7HsxGdjeX7ZhDs1fPeS8hcQ1sSeq6b3EUQEr15rrFT0JMVpqtPKntbllfc
Zn5O04PrV8x1+taONUO74XSw3g0xi9L5q/51Hg/DV4a/Qys0332Ehu6JahsLAIit
fTuN6gzWbcb1dkG6GLcet9hiYnwZR+m1QbTkPGckurn7s9AQDU9/ny6JyhN7nfyK
yblpbtScYF7oCAQS/I5q
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:22 2026 by rpki-client