Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/YQwG-AZx5CHtaKU8hOpggMMKsak.roa
File:                     YQwG-AZx5CHtaKU8hOpggMMKsak.roa (raw, json)
Hash identifier:          hrQoTXzOOdFaXbIEVUQHzBDTstOc9mxlN6T+ZcVuwn0=
Subject key identifier:   61:0C:06:F8:06:71:E4:21:ED:68:A5:3C:84:EA:60:80:C3:0A:B1:A9
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       59
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/YQwG-AZx5CHtaKU8hOpggMMKsak.roa
Signing time:             Tue 31 Mar 2026 08:33:27 +0000
ROA not before:           Tue 31 Mar 2026 08:33:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59098
IP address blocks:        2401:d20:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Mar 31 08:33:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=610C06F80671E421ED68A53C84EA6080C30AB1A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:dd:3a:7c:13:9b:74:f7:dd:28:38:e0:51:
                    0a:9a:be:be:0c:79:40:65:ad:1e:dc:66:b4:b6:4b:
                    fc:7c:ac:24:b5:57:3e:20:e7:87:5a:e7:a3:65:07:
                    dd:4c:79:30:ea:9f:db:5b:ca:d1:de:bf:d0:5a:7b:
                    1e:c1:7d:64:d5:ee:60:dc:d9:8c:c5:9e:9a:5d:3f:
                    c3:8d:02:a7:ed:20:05:d4:b9:16:96:55:24:cc:27:
                    75:39:40:d4:54:78:04:94:a1:09:80:1b:2b:37:ff:
                    57:1c:52:79:6c:d0:22:a7:0b:97:ea:e3:cf:84:16:
                    73:a7:6e:50:d9:d2:05:47:61:f3:fa:7d:06:49:d8:
                    ce:e8:e0:d4:45:8c:41:68:9a:25:c2:52:81:a5:41:
                    ad:ab:ce:cd:15:8d:2f:09:f5:65:a9:c5:a2:09:d1:
                    9d:91:e7:39:c4:d9:38:03:23:05:cb:94:e6:87:21:
                    04:c6:9e:55:19:46:1b:d6:d0:af:73:04:6c:0d:b0:
                    5c:1f:f8:32:52:d7:18:7f:be:ed:da:16:65:d3:be:
                    7d:d2:a1:4e:de:5f:de:90:89:50:4e:b9:d7:1f:97:
                    c8:7a:52:df:74:17:e2:e1:8a:b2:b5:ca:1b:18:88:
                    2e:04:02:7f:46:93:48:1c:9b:02:5f:3a:27:bd:c9:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0C:06:F8:06:71:E4:21:ED:68:A5:3C:84:EA:60:80:C3:0A:B1:A9
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/YQwG-AZx5CHtaKU8hOpggMMKsak.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:e3:b2:4c:6a:11:e9:b1:ef:59:c4:40:b4:b7:53:f8:c1:47:
         94:f9:75:dc:46:54:e0:86:0f:20:03:3e:2f:26:9e:b8:0c:5d:
         ee:da:33:3f:97:66:f9:fe:09:af:19:34:80:ec:28:1d:46:ad:
         a5:6a:7d:4c:44:96:dd:6b:f4:4c:5c:a7:14:85:76:09:26:25:
         ed:6a:f2:f4:67:4d:35:03:28:56:ee:98:86:5d:e8:10:4c:68:
         8e:6b:f6:3f:a6:f1:0d:29:54:14:06:d8:6e:74:8d:d6:54:42:
         7b:b1:cd:48:92:5c:9b:c8:88:51:19:65:b1:46:d3:3a:e8:9e:
         54:68:e3:6f:f1:8c:44:db:b9:8c:93:15:47:08:41:c7:dc:20:
         1f:7f:46:a0:2b:ba:5f:25:0f:e3:8e:72:76:ad:da:ae:27:4f:
         7c:ea:80:c5:e4:2a:87:a9:3c:40:08:18:c5:a5:5c:3d:04:11:
         31:a0:0f:19:d0:0d:46:66:ad:a4:e4:2d:e3:f6:5d:48:68:20:
         e2:6f:71:80:70:dc:b7:1e:18:36:82:1e:73:35:08:d1:27:6c:
         37:64:c6:f0:89:ea:17:aa:ca:e8:59:2e:07:b6:8f:a0:bf:26:
         24:41:49:cd:26:f3:0a:90:cf:2d:4f:77:0a:12:50:56:3f:98:
         f0:ab:4d:df
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw
QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTI2MDMzMTA4
MzMyN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjEwQzA2RjgwNjcxRTQy
MUVENjhBNTNDODRFQTYwODBDMzBBQjFBOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK5Q3Tp8E5t0990oOOBRCpq+vgx5QGWtHtxmtLZL/HysJLVXPiDn
h1rno2UH3Ux5MOqf21vK0d6/0Fp7HsF9ZNXuYNzZjMWeml0/w40Cp+0gBdS5FpZV
JMwndTlA1FR4BJShCYAbKzf/VxxSeWzQIqcLl+rjz4QWc6duUNnSBUdh8/p9BknY
zujg1EWMQWiaJcJSgaVBravOzRWNLwn1ZanFognRnZHnOcTZOAMjBcuU5ochBMae
VRlGG9bQr3MEbA2wXB/4MlLXGH++7doWZdO+fdKhTt5f3pCJUE651x+XyHpS33QX
4uGKsrXKGxiILgQCf0aTSBybAl86J73JB+cCAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBRhDAb4BnHkIe1opTyE6mCAwwqxqTAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq
br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x
X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwNDIzL1lRd0ctQVp4NUNIdGFLVThoT3BnZ01NS3Nhay5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAQ0gAAswDQYJKoZIhvcNAQEL
BQADggEBAFrjskxqEemx71nEQLS3U/jBR5T5ddxGVOCGDyADPi8mnrgMXe7aMz+X
Zvn+Ca8ZNIDsKB1GraVqfUxElt1r9ExcpxSFdgkmJe1q8vRnTTUDKFbumIZd6BBM
aI5r9j+m8Q0pVBQG2G50jdZUQnuxzUiSXJvIiFEZZbFG0zronlRo42/xjETbuYyT
FUcIQcfcIB9/RqArul8lD+OOcnat2q4nT3zqgMXkKoepPEAIGMWlXD0EETGgDxnQ
DUZmraTkLeP2XUhoIOJvcYBw3LceGDaCHnM1CNEnbDdkxvCJ6heqyuhZLge2j6C/
JiRBSc0m8wqQzy1PdwoSUFY/mPCrTd8=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:01 2026 by rpki-client