Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30440/OxdxH1sPWdC3StgH73ap3LEUykw.roa
File:                     OxdxH1sPWdC3StgH73ap3LEUykw.roa (raw, json)
Hash identifier:          sp0oCEkhiiUazDMx6CVn46R/Eg9/xP3ch0HtNHuGLwA=
Subject key identifier:   3B:17:71:1F:5B:0F:59:D0:B7:4A:D8:07:EF:76:A9:DC:B1:14:CA:4C
Certificate issuer:       /CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
Certificate serial:       17
Authority key identifier: 14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/OxdxH1sPWdC3StgH73ap3LEUykw.roa
Signing time:             Tue 31 Mar 2026 08:45:27 +0000
ROA not before:           Tue 31 Mar 2026 08:45:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     152858
IP address blocks:        2401:b720::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
        Validity
            Not Before: Mar 31 08:45:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3B17711F5B0F59D0B74AD807EF76A9DCB114CA4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:31:24:6f:59:ca:c2:30:64:e1:4b:43:ab:
                    45:e9:71:cf:aa:46:12:5c:97:49:32:93:2f:49:a5:
                    92:e0:7d:b1:d5:96:e1:33:d3:38:dc:ef:39:e9:5a:
                    47:0c:6f:01:38:bb:4d:42:51:53:99:70:83:3f:9d:
                    35:89:45:3b:65:00:3f:d9:32:c7:b9:a1:db:10:99:
                    f1:af:13:8b:ff:3c:4c:9e:85:ac:b5:7e:4b:9a:22:
                    2e:6b:ee:6b:2b:83:37:37:5d:40:df:51:f6:7a:24:
                    c2:1d:24:59:b2:25:46:0f:45:1c:09:b0:7b:21:9f:
                    1c:8b:a4:45:53:27:1a:65:35:1f:cc:6a:5a:2f:e8:
                    14:cd:f3:a4:4e:59:68:71:3a:f4:0c:7d:38:ee:66:
                    4d:96:74:ed:bd:db:5b:69:6a:fa:12:d2:d8:21:a9:
                    38:f2:e2:7b:89:94:02:22:17:16:26:c3:85:9b:99:
                    38:39:96:5c:fa:4e:3f:64:04:55:77:91:b7:d1:66:
                    2e:5e:4e:62:1e:79:d6:8c:5d:6a:e9:66:40:bd:d4:
                    bf:de:51:92:b3:3c:93:d6:25:45:52:59:4d:0c:9d:
                    df:32:90:82:ec:ca:29:82:9c:3b:88:5e:4b:d8:0a:
                    f5:24:dd:0f:3b:34:2f:89:0a:a4:86:6c:40:56:9c:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:17:71:1F:5B:0F:59:D0:B7:4A:D8:07:EF:76:A9:DC:B1:14:CA:4C
            X509v3 Authority Key Identifier:
                keyid:14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/OxdxH1sPWdC3StgH73ap3LEUykw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b720::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:00:de:26:9c:14:20:25:76:34:1f:53:ea:5e:8f:0d:d7:
         40:91:13:77:f6:97:83:86:91:ce:d7:91:d2:14:09:7b:ec:dc:
         4b:89:6e:85:cc:aa:57:b9:0a:3f:15:36:b9:d0:03:f1:ae:7a:
         0f:c2:69:2e:58:3f:41:3c:da:f0:b1:34:83:60:df:84:7c:d0:
         fd:04:75:ae:dd:79:89:8d:65:c5:9b:74:15:bc:5a:33:d3:d6:
         ff:80:98:ae:6f:b7:dd:5f:4e:29:83:a5:27:f9:88:ec:34:ae:
         9e:cc:c8:ed:b9:f4:77:5e:7d:e1:81:f8:a8:41:50:f2:e1:53:
         f6:13:ff:09:0d:f7:cd:f8:4d:15:fc:73:39:1b:b7:07:c5:bd:
         30:4b:ab:16:8c:17:1b:d2:27:b1:9b:39:74:a9:d4:36:b3:d0:
         38:b9:c8:6b:af:c3:0b:de:56:07:d9:47:7f:a9:65:fa:f0:0e:
         9f:80:28:7b:72:5a:d7:5c:32:6a:2d:67:74:b6:79:bd:15:ad:
         ab:c3:9b:56:34:b7:74:05:5a:01:d0:ea:00:e4:06:ec:17:7a:
         9d:e8:37:07:9a:91:a3:35:9e:e6:25:87:85:2b:d7:1d:67:86:
         7f:32:11:a8:0c:cb:17:d1:6b:2b:c7:1e:f7:62:c0:51:42:4f:
         b1:60:f3:34
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDdF
QjMzMjgyM0UxQzEzMjlEQ0U3NEFFOEVEN0QyNjBDQThGRDgyMB4XDTI2MDMzMTA4
NDUyN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoM0IxNzcxMUY1QjBGNTlE
MEI3NEFEODA3RUY3NkE5RENCMTE0Q0E0QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL3cMSRvWcrCMGThS0OrRelxz6pGElyXSTKTL0mlkuB9sdWW4TPT
ONzvOelaRwxvATi7TUJRU5lwgz+dNYlFO2UAP9kyx7mh2xCZ8a8Ti/88TJ6FrLV+
S5oiLmvuayuDNzddQN9R9nokwh0kWbIlRg9FHAmweyGfHIukRVMnGmU1H8xqWi/o
FM3zpE5ZaHE69Ax9OO5mTZZ07b3bW2lq+hLS2CGpOPLie4mUAiIXFibDhZuZODmW
XPpOP2QEVXeRt9FmLl5OYh551oxdaulmQL3Uv95RkrM8k9YlRVJZTQyd3zKQguzK
KYKcO4heS9gK9STdDzs0L4kKpIZsQFacwmsCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBQ7F3EfWw9Z0LdK2AfvdqncsRTKTDAfBgNVHSMEGDAWgBQUfrMygj4cEync50ro
7X0mDKj9gjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0NDAvRkg2ek1vSS1IQk1wM09kSzZPMTlKZ3lvX1lJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRkg2ek1vSS1IQk1wM09kSzZPMTlK
Z3lvX1lJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwNDQwL094ZHhIMXNQV2RDM1N0Z0g3M2FwM0xFVXlrdy5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAbcgMA0GCSqGSIb3DQEBCwUA
A4IBAQAbWwDeJpwUICV2NB9T6l6PDddAkRN39peDhpHO15HSFAl77NxLiW6FzKpX
uQo/FTa50APxrnoPwmkuWD9BPNrwsTSDYN+EfND9BHWu3XmJjWXFm3QVvFoz09b/
gJiub7fdX04pg6Un+YjsNK6ezMjtufR3Xn3hgfioQVDy4VP2E/8JDffN+E0V/HM5
G7cHxb0wS6sWjBcb0iexmzl0qdQ2s9A4uchrr8ML3lYH2Ud/qWX68A6fgCh7clrX
XDJqLWd0tnm9Fa2rw5tWNLd0BVoB0OoA5AbsF3qd6DcHmpGjNZ7mJYeFK9cdZ4Z/
MhGoDMsX0Wsrxx73YsBRQk+xYPM0
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:36 2026 by rpki-client