Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/tYWmUjb9BIBV060uRZKrRRW1jeo.roa
File:                     tYWmUjb9BIBV060uRZKrRRW1jeo.roa (raw, json)
Hash identifier:          obL6fj6ECwTHuAQ23hJfkFGZ7PROhyFdXAbZrKix8Nw=
Subject key identifier:   B5:85:A6:52:36:FD:04:80:55:D3:AD:2E:45:92:AB:45:15:B5:8D:EA
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       96
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/tYWmUjb9BIBV060uRZKrRRW1jeo.roa
Signing time:             Sun 01 Feb 2026 01:28:37 +0000
ROA not before:           Sun 01 Feb 2026 01:28:37 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        2403:7800::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Feb  1 01:28:37 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=B585A65236FD048055D3AD2E4592AB4515B58DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:b3:32:06:70:72:19:0f:56:39:7d:e8:bf:
                    32:af:c7:34:3f:50:9c:63:ed:60:fb:dc:9a:66:55:
                    96:8d:1b:e7:b0:1a:dc:f6:00:a8:3b:b9:ed:f4:e2:
                    a5:37:82:89:b2:0d:c6:98:2d:f6:2a:62:6d:ab:92:
                    c6:bb:94:d4:78:db:b8:fd:fb:af:2e:b7:df:39:b7:
                    f1:85:26:79:7c:7f:a0:07:78:b8:cd:b4:13:41:ad:
                    44:10:a3:73:8e:ec:39:98:8b:04:00:a3:6a:a0:c0:
                    e5:29:b2:10:48:de:d6:3b:7c:7f:a9:8d:5d:65:66:
                    bf:39:f5:b6:de:74:98:54:0f:be:ec:a5:75:d7:7a:
                    d4:64:43:2c:76:e0:35:25:92:8d:d7:e0:56:71:a5:
                    bb:ae:c9:ef:ea:8f:e2:df:fd:e4:7a:d3:fd:36:81:
                    a9:c9:53:4e:e7:01:2b:2d:9c:30:d8:23:f8:74:fb:
                    77:70:3d:d6:0c:95:75:30:30:70:11:cc:ea:a0:4a:
                    07:23:41:43:c3:e0:fd:cb:de:00:c0:09:ed:c7:91:
                    36:72:e1:13:7e:6a:0e:1e:3d:78:4d:ad:26:53:4f:
                    8c:18:cb:a8:7e:b7:c9:be:e4:4b:63:40:12:cd:0d:
                    ee:b7:eb:e2:1f:99:fa:b8:5f:62:3c:20:0d:9e:67:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:85:A6:52:36:FD:04:80:55:D3:AD:2E:45:92:AB:45:15:B5:8D:EA
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/tYWmUjb9BIBV060uRZKrRRW1jeo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:73:de:01:ad:a4:c9:d4:75:97:e2:41:53:c6:b6:e5:43:f1:
         ce:85:94:fe:99:51:27:a1:12:d0:f5:e7:07:cb:94:7e:00:98:
         ef:72:5e:8d:ee:fc:88:08:11:3f:d2:c1:2f:d4:d7:0d:12:5e:
         aa:a9:21:f5:55:6f:35:a9:3f:99:a6:1d:72:22:80:65:f0:0c:
         a3:81:82:95:50:53:8b:b7:ce:2b:5b:2c:67:06:e8:f5:8d:19:
         f0:a3:9c:94:e4:1d:4b:fb:d8:4d:2c:9c:fc:19:1c:94:72:41:
         bc:b3:06:8a:89:ad:cb:22:7d:e7:5f:f1:16:90:2e:2b:fd:0b:
         60:4c:19:ac:be:c6:f2:90:67:a7:5c:16:b1:7b:17:26:e8:81:
         19:01:68:24:3d:6b:38:8e:39:8a:10:fb:02:9e:35:08:82:68:
         4d:c9:98:ed:1b:0c:75:65:7f:1f:7e:8d:af:4a:44:03:1a:ee:
         e5:99:bc:f4:48:ec:9f:b2:e8:fe:a6:6b:e2:17:46:cd:5c:c2:
         6f:1c:41:1e:dd:b6:ff:a0:4c:83:d6:63:0e:1c:a4:63:2b:66:
         1a:1e:3d:f8:f5:38:9e:6f:69:04:60:18:29:03:26:57:36:ec:
         d6:ce:85:ff:0b:9c:d1:58:bd:bf:92:43:c1:07:80:39:23:94:
         20:40:d2:c7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDEw
RDg4NjU4MkJEREY0OEIwNDE4NTFDMzhDMEI2MzIxMTVGNUMyMTAeFw0yNjAyMDEw
MTI4MzdaFw0yNzAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI1ODVBNjUyMzZGRDA0
ODA1NUQzQUQyRTQ1OTJBQjQ1MTVCNThERUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAi7MyBnByGQ9WOX3ovzKvxzQ/UJxj7WD73JpmVZaNG+ewGtz2
AKg7ue304qU3gomyDcaYLfYqYm2rksa7lNR427j9+68ut985t/GFJnl8f6AHeLjN
tBNBrUQQo3OO7DmYiwQAo2qgwOUpshBI3tY7fH+pjV1lZr859bbedJhUD77spXXX
etRkQyx24DUlko3X4FZxpbuuye/qj+Lf/eR60/02ganJU07nASstnDDYI/h0+3dw
PdYMlXUwMHARzOqgSgcjQUPD4P3L3gDACe3HkTZy4RN+ag4ePXhNrSZTT4wYy6h+
t8m+5EtjQBLNDe636+Ifmfq4X2I8IA2eZ1UZAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUtYWmUjb9BIBV060uRZKrRRW1jeowHwYDVR0jBBgwFoAU0Q2IZYK930iwQYUc
OMC2MhFfXCEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMjI4LzBRMklaWUs5MzBpd1FZVWNPTUMyTWhGZlhDRS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBRMklaWUs5MzBpd1FZVWNPTUMy
TWhGZlhDRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDIyOC90WVdtVWpiOUJJQlYwNjB1UlpLclJSVzFqZW8u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAN4ADANBgkqhkiG9w0BAQsFAAOCAQEAdHPeAa2kydR1l+JBU8a2
5UPxzoWU/plRJ6ES0PXnB8uUfgCY73Jeje78iAgRP9LBL9TXDRJeqqkh9VVvNak/
maYdciKAZfAMo4GClVBTi7fOK1ssZwbo9Y0Z8KOclOQdS/vYTSyc/BkclHJBvLMG
iomtyyJ951/xFpAuK/0LYEwZrL7G8pBnp1wWsXsXJuiBGQFoJD1rOI45ihD7Ap41
CIJoTcmY7RsMdWV/H36Nr0pEAxru5Zm89Ejsn7Lo/qZr4hdGzVzCbxxBHt22/6BM
g9ZjDhykYytmGh49+PU4nm9pBGAYKQMmVzbs1s6F/wuc0Vi9v5JDwQeAOSOUIEDS
xw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:54:38 2026 by rpki-client