Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/4rp_kzmuCsTFSF79KM0E2s8TRRA.roa
File:                     4rp_kzmuCsTFSF79KM0E2s8TRRA.roa (raw, json)
Hash identifier:          /sWVxodHmUW4o9fGfenCiWQ8Iz1pRbW+OKOeYSpw/FY=
Subject key identifier:   E2:BA:7F:93:39:AE:0A:C4:C5:48:5E:FD:28:CD:04:DA:CF:13:45:10
Certificate issuer:       /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial:       84
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/4rp_kzmuCsTFSF79KM0E2s8TRRA.roa
Signing time:             Tue 31 Mar 2026 07:37:59 +0000
ROA not before:           Tue 31 Mar 2026 07:37:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        2001:e44::/31 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
        Validity
            Not Before: Mar 31 07:37:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E2BA7F9339AE0AC4C5485EFD28CD04DACF134510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a5:fb:9e:3e:2f:52:ae:69:0a:7d:ae:1a:f1:
                    de:5b:73:d0:50:c1:c4:04:fe:16:86:d8:c7:5d:fd:
                    ab:39:22:58:71:dd:d1:5b:6f:2c:15:a5:e9:1b:82:
                    a4:50:b1:c0:4f:6b:f9:03:d1:69:cc:d8:24:34:39:
                    ca:08:c9:2d:7c:14:0b:8d:e8:af:a1:3a:c8:6a:4c:
                    be:5c:89:be:eb:92:ae:2a:8a:a4:60:23:88:82:87:
                    fb:83:84:e5:c0:10:e5:f9:33:f6:54:78:7d:3c:15:
                    45:f6:c4:00:5a:fc:ba:72:0a:f4:e7:92:6b:d0:05:
                    c3:e8:f5:bc:41:f1:01:f8:58:f6:e9:3a:7c:31:e6:
                    9d:5f:a7:94:c8:c3:0f:57:f3:8f:c9:09:0e:69:c6:
                    7a:fe:83:5f:cf:c8:2f:d5:6b:0a:4b:5b:40:f0:7d:
                    95:87:5e:00:12:4a:72:5e:1b:59:4f:5b:ed:e2:69:
                    6b:4d:a4:83:63:8e:4b:07:99:ee:47:29:68:d4:9d:
                    01:aa:f0:c6:f4:02:8f:07:dc:00:9f:37:b4:aa:36:
                    95:02:a0:b6:f7:56:f7:75:25:ad:a8:1a:18:85:3d:
                    b0:e0:7a:e7:30:34:99:b2:80:20:5b:44:73:17:3b:
                    58:de:fa:73:27:18:f4:86:d6:7d:a1:11:86:1b:cb:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BA:7F:93:39:AE:0A:C4:C5:48:5E:FD:28:CD:04:DA:CF:13:45:10
            X509v3 Authority Key Identifier:
                keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/4rp_kzmuCsTFSF79KM0E2s8TRRA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e44::/31

    Signature Algorithm: sha256WithRSAEncryption
         9e:54:d7:b3:21:fb:41:c2:f2:dc:17:02:ed:86:e4:ce:94:4a:
         60:41:4a:19:1e:04:d4:b6:9c:2a:0e:3e:fa:58:9e:80:c4:b8:
         94:eb:b8:8a:80:77:06:30:d7:6e:65:7f:12:0c:ff:4c:76:04:
         80:83:10:c6:04:95:38:b8:10:81:06:e4:bf:a6:59:c1:c4:42:
         51:50:1e:b3:a0:c1:8c:f7:db:7b:1e:be:b8:1e:71:2f:23:0c:
         38:a9:15:3b:72:15:f1:9b:7a:6e:04:87:73:66:b6:36:82:64:
         30:55:65:68:4f:a3:a8:d6:68:f6:a9:09:90:5a:fa:c0:d9:28:
         06:89:b7:cb:bf:ca:0a:62:ad:e5:ad:32:32:24:73:8c:ff:6f:
         eb:8b:10:66:3b:e2:e1:6d:e1:03:ac:3d:89:aa:57:35:21:f0:
         00:7e:a0:44:79:79:1e:df:f4:08:9d:eb:f7:10:4c:21:85:57:
         7c:ff:ee:1a:db:f2:4a:12:c4:3f:8b:ec:6c:99:51:31:a1:33:
         0e:e4:1d:d4:cf:e0:9e:ea:bb:0d:fa:65:d9:fb:72:a2:95:53:
         63:fe:b3:d2:03:cb:b2:c1:b6:a0:24:8b:84:8a:32:cb:e4:33:
         71:6a:0b:9c:f3:76:6b:23:24:4e:56:6f:97:90:51:85:4f:6e:
         b9:d5:b9:6c
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ew
MkM1QzQzQzAwRjE0RTg1QjVCMDc1OTlFREQyNjdDNUEyQjREMjAeFw0yNjAzMzEw
NzM3NTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUyQkE3RjkzMzlBRTBB
QzRDNTQ4NUVGRDI4Q0QwNERBQ0YxMzQ1MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbpfuePi9SrmkKfa4a8d5bc9BQwcQE/haG2Mdd/as5Ilhx3dFb
bywVpekbgqRQscBPa/kD0WnM2CQ0OcoIyS18FAuN6K+hOshqTL5cib7rkq4qiqRg
I4iCh/uDhOXAEOX5M/ZUeH08FUX2xABa/LpyCvTnkmvQBcPo9bxB8QH4WPbpOnwx
5p1fp5TIww9X84/JCQ5pxnr+g1/PyC/VawpLW0DwfZWHXgASSnJeG1lPW+3iaWtN
pINjjksHme5HKWjUnQGq8Mb0Ao8H3ACfN7SqNpUCoLb3Vvd1Ja2oGhiFPbDgeucw
NJmygCBbRHMXO1je+nMnGPSG1n2hEYYbyxO7AgMBAAGjggHeMIIB2jAdBgNVHQ4E
FgQU4rp/kzmuCsTFSF79KM0E2s8TRRAwHwYDVR0jBBgwFoAUygLFxDwA8U6FtbB1
me3SZ8WitNIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMDY4L3lnTEZ4RHdBOFU2RnRiQjFtZTNTWjhXaXROSS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3lnTEZ4RHdBOFU2RnRiQjFtZTNT
WjhXaXROSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDA2OC80cnBfa3ptdUNzVEZTRjc5S00wRTJzOFRSUkEucm9h
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBIAEORDANBgkqhkiG9w0BAQsF
AAOCAQEAnlTXsyH7QcLy3BcC7YbkzpRKYEFKGR4E1LacKg4++liegMS4lOu4ioB3
BjDXbmV/Egz/THYEgIMQxgSVOLgQgQbkv6ZZwcRCUVAes6DBjPfbex6+uB5xLyMM
OKkVO3IV8Zt6bgSHc2a2NoJkMFVlaE+jqNZo9qkJkFr6wNkoBom3y7/KCmKt5a0y
MiRzjP9v64sQZjvi4W3hA6w9iapXNSHwAH6gRHl5Ht/0CJ3r9xBMIYVXfP/uGtvy
ShLEP4vsbJlRMaEzDuQd1M/gnuq7Dfpl2ftyopVTY/6z0gPLssG2oCSLhIoyy+Qz
cWoLnPN2ayMkTlZvl5BRhU9uudW5bA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:18 2026 by rpki-client