Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/9RIuTi-_-9YCcS3HMFOmwD5Wj9g.roa
File:                     9RIuTi-_-9YCcS3HMFOmwD5Wj9g.roa (raw, json)
Hash identifier:          G2pwaGlY6GSFW8Www0U7mNuppCLrV6NlX812RHJne2Y=
Subject key identifier:   F5:12:2E:4E:2F:BF:FB:D6:02:71:2D:C7:30:53:A6:C0:3E:56:8F:D8
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       58
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/9RIuTi-_-9YCcS3HMFOmwD5Wj9g.roa
Signing time:             Tue 31 Mar 2026 08:33:26 +0000
ROA not before:           Tue 31 Mar 2026 08:33:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     150362
IP address blocks:        2401:d20:b000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Mar 31 08:33:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F5122E4E2FBFFBD602712DC73053A6C03E568FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:5b:8e:7e:be:21:2e:7f:ff:50:2c:70:ed:
                    90:c6:1d:0c:fb:9e:fa:4f:90:61:98:bb:04:58:61:
                    bb:fe:ea:00:81:ea:26:0e:6f:06:08:44:fc:a3:4b:
                    a7:ed:49:27:b6:b3:db:8a:58:f7:27:23:01:9b:25:
                    af:34:81:fa:10:25:bd:73:bd:12:f0:bc:72:dd:e5:
                    40:46:1a:33:df:b7:ee:4a:03:67:a8:d1:52:3f:38:
                    3b:11:d0:85:5d:91:00:6f:4a:74:d6:25:c8:9f:b5:
                    e2:fc:b4:61:0b:40:57:ea:17:60:eb:f1:9f:b5:e8:
                    03:b8:03:be:30:65:60:9c:05:0c:40:36:4c:b5:ce:
                    95:f9:bd:2b:32:15:5b:23:39:4f:3d:13:13:16:b0:
                    cd:b0:c7:4a:69:67:6c:a2:12:4f:66:73:30:15:b9:
                    f4:1c:cd:8e:e6:7c:ac:d4:1d:d4:e4:91:3d:b3:7c:
                    d0:ff:9e:a2:c6:0e:71:83:3a:19:f5:96:04:76:0d:
                    b6:dc:09:70:13:b6:0a:7d:b0:0b:88:bc:91:d8:23:
                    b7:54:bf:3f:4c:70:40:52:4a:c6:0f:a4:da:1a:49:
                    8a:1e:99:98:4c:a1:24:91:d4:ad:53:8d:27:47:c2:
                    61:86:8b:e8:e2:96:43:38:76:1a:9e:01:42:95:8f:
                    37:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:12:2E:4E:2F:BF:FB:D6:02:71:2D:C7:30:53:A6:C0:3E:56:8F:D8
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/9RIuTi-_-9YCcS3HMFOmwD5Wj9g.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         75:cf:e4:7d:cd:85:c9:ec:67:d4:66:6c:8e:a3:83:de:8e:83:
         e6:b5:b4:e4:99:c8:15:b3:62:34:8d:0e:e3:4f:2e:68:0d:3a:
         13:97:da:2f:26:b3:57:1e:53:d6:9a:60:17:d3:0d:f9:68:9b:
         aa:fd:cc:61:88:e0:2b:c4:cd:b3:98:79:4c:49:ea:f4:bf:16:
         4a:6e:81:5f:58:a7:0e:cc:53:0b:41:12:29:17:75:d9:54:a7:
         a7:cf:55:4b:98:3a:93:ac:63:6d:09:f3:d6:a5:47:af:8f:7f:
         0d:9d:59:d0:53:d7:d9:0e:3e:1d:3d:ec:d0:9d:4b:ea:28:48:
         06:cb:03:ab:f1:76:8e:de:a2:93:96:da:22:fe:05:8e:b8:a0:
         d6:2e:d6:06:19:1c:a9:10:b2:e8:3e:62:15:43:6d:1a:12:85:
         59:de:7f:ac:78:46:6c:38:6f:13:25:06:87:7e:d6:b8:0e:7e:
         87:f9:3f:7f:e9:35:c7:b5:88:97:12:5e:9d:d3:27:ef:cd:cd:
         40:4f:ac:68:62:65:71:31:bf:19:35:33:04:5b:a0:67:d2:ae:
         59:44:cc:00:5a:09:04:8a:ee:72:6f:af:8e:bc:f2:ac:da:63:
         04:d1:83:d0:f2:99:49:d4:c6:2d:5f:1a:1b:ec:2b:1a:c4:bb:
         87:86:3a:46
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw
QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTI2MDMzMTA4
MzMyNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjUxMjJFNEUyRkJGRkJE
NjAyNzEyREM3MzA1M0E2QzAzRTU2OEZEODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMmsW45+viEuf/9QLHDtkMYdDPue+k+QYZi7BFhhu/7qAIHqJg5v
BghE/KNLp+1JJ7az24pY9ycjAZslrzSB+hAlvXO9EvC8ct3lQEYaM9+37koDZ6jR
Uj84OxHQhV2RAG9KdNYlyJ+14vy0YQtAV+oXYOvxn7XoA7gDvjBlYJwFDEA2TLXO
lfm9KzIVWyM5Tz0TExawzbDHSmlnbKIST2ZzMBW59BzNjuZ8rNQd1OSRPbN80P+e
osYOcYM6GfWWBHYNttwJcBO2Cn2wC4i8kdgjt1S/P0xwQFJKxg+k2hpJih6ZmEyh
JJHUrVONJ0fCYYaL6OKWQzh2Gp4BQpWPN7kCAwEAAaOCAd8wggHbMB0GA1UdDgQW
BBT1Ei5OL7/71gJxLccwU6bAPlaP2DAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq
br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x
X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwNDIzLzlSSXVUaS1fLTlZQ2NTM0hNRk9td0Q1V2o5Zy5yb2Ew
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkAQ0gsDANBgkqhkiG9w0BAQsF
AAOCAQEAdc/kfc2Fyexn1GZsjqOD3o6D5rW05JnIFbNiNI0O408uaA06E5faLyaz
Vx5T1ppgF9MN+Wibqv3MYYjgK8TNs5h5TEnq9L8WSm6BX1inDsxTC0ESKRd12VSn
p89VS5g6k6xjbQnz1qVHr49/DZ1Z0FPX2Q4+HT3s0J1L6ihIBssDq/F2jt6ik5ba
Iv4Fjrig1i7WBhkcqRCy6D5iFUNtGhKFWd5/rHhGbDhvEyUGh37WuA5+h/k/f+k1
x7WIlxJendMn783NQE+saGJlcTG/GTUzBFugZ9KuWUTMAFoJBIrucm+vjrzyrNpj
BNGD0PKZSdTGLV8aG+wrGsS7h4Y6Rg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:59 2026 by rpki-client