Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30453/xV0Mnz5siF6iXdM7cMohOVkb1DE.roa
File:                     xV0Mnz5siF6iXdM7cMohOVkb1DE.roa (raw, json)
Hash identifier:          Twzsg1joXPhNeWVbXNH0aVaIEQ2MgRAMHyCfGrnotnA=
Subject key identifier:   C5:5D:0C:9F:3E:6C:88:5E:A2:5D:D3:3B:70:CA:21:39:59:1B:D4:31
Certificate issuer:       /CN=1DB87B4C0EE51E664465468DB7C26033FB44A0A2
Certificate serial:       02
Authority key identifier: 1D:B8:7B:4C:0E:E5:1E:66:44:65:46:8D:B7:C2:60:33:FB:44:A0:A2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Hbh7TA7lHmZEZUaNt8JgM_tEoKI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30453/xV0Mnz5siF6iXdM7cMohOVkb1DE.roa
Signing time:             Wed 08 Apr 2026 23:52:51 +0000
ROA not before:           Wed 08 Apr 2026 23:52:51 +0000
ROA not after:            Thu 08 Apr 2027 23:39:55 +0000
asID:                     152876
IP address blocks:        2402:3ee0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30453/Hbh7TA7lHmZEZUaNt8JgM_tEoKI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30453/Hbh7TA7lHmZEZUaNt8JgM_tEoKI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Hbh7TA7lHmZEZUaNt8JgM_tEoKI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DB87B4C0EE51E664465468DB7C26033FB44A0A2
        Validity
            Not Before: Apr  8 23:52:51 2026 GMT
            Not After : Apr  8 23:39:55 2027 GMT
        Subject: CN=C55D0C9F3E6C885EA25DD33B70CA2139591BD431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:86:a0:5f:13:ac:90:04:af:b6:08:e7:2b:
                    39:ef:0b:74:85:fa:69:72:af:dd:b3:0a:99:cc:1c:
                    67:e7:70:d8:39:25:ce:58:bf:d0:cb:e4:5a:89:45:
                    16:64:ba:3e:47:78:ac:b9:2b:7d:50:91:7d:76:32:
                    9c:92:89:78:40:2e:af:cc:d8:15:16:74:4d:63:79:
                    b6:e4:b4:00:03:bb:d0:7c:5f:00:76:1c:a3:93:5a:
                    30:64:1c:96:8e:01:11:f5:b8:c3:b9:ef:dd:c4:0c:
                    10:e9:8b:6f:bc:2b:2a:69:56:0a:c4:b3:bb:71:12:
                    56:ab:d2:9a:7d:44:23:62:f8:14:e7:07:4a:9b:31:
                    fc:62:b7:bf:70:a9:91:54:9f:f3:40:6b:60:4c:b5:
                    a7:2a:4e:ea:36:dc:b3:d3:96:43:57:b6:50:25:be:
                    71:fe:c2:28:4a:b2:12:a9:f6:6d:3e:4a:4a:04:85:
                    37:a3:8f:84:ee:91:fb:e2:2e:3c:f5:c5:bf:5e:6b:
                    4e:bd:eb:3c:f1:45:b3:92:5e:8b:09:4e:a5:c5:b1:
                    d0:79:d1:37:c6:f9:b4:da:fb:13:45:f3:de:e8:1d:
                    c4:45:7f:12:66:5a:11:11:a8:b9:c4:40:66:5c:33:
                    a0:c6:7a:82:ad:59:31:55:8b:65:8f:e1:0a:53:ce:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5D:0C:9F:3E:6C:88:5E:A2:5D:D3:3B:70:CA:21:39:59:1B:D4:31
            X509v3 Authority Key Identifier:
                keyid:1D:B8:7B:4C:0E:E5:1E:66:44:65:46:8D:B7:C2:60:33:FB:44:A0:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30453/Hbh7TA7lHmZEZUaNt8JgM_tEoKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Hbh7TA7lHmZEZUaNt8JgM_tEoKI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30453/xV0Mnz5siF6iXdM7cMohOVkb1DE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:d7:5b:05:ce:51:45:53:11:bd:c3:7e:b0:07:35:fd:a5:3a:
         e5:db:3c:15:2e:07:22:86:4d:8e:0e:ac:55:62:43:ba:c5:3b:
         6a:61:8d:83:b6:57:a5:12:bf:00:b5:63:db:55:cd:47:33:30:
         a7:a1:29:cb:7b:43:cb:17:f6:33:06:11:35:86:19:40:d7:16:
         22:bd:49:44:d9:92:c7:c9:39:b6:a4:89:7a:1e:2b:b9:21:f1:
         b1:de:aa:1d:a9:dd:ba:43:2f:d8:d9:f5:a8:19:dd:6a:47:11:
         02:1c:98:2a:ac:3d:9d:1a:7d:e1:bd:69:a0:f0:64:86:62:6f:
         2b:38:6f:1b:8a:dc:c6:2f:f6:ce:50:d8:1f:ab:9f:38:d4:f5:
         af:aa:a8:ec:b8:1a:c9:50:10:0e:24:07:af:4c:8e:e0:97:a3:
         9e:d4:68:9c:05:1e:8c:ff:73:26:9e:17:3e:0d:6b:74:65:a6:
         92:9b:a8:6b:71:4c:cd:72:d6:0b:cc:e9:54:7f:ab:ea:0e:94:
         5f:06:06:95:35:c5:6c:d1:17:3a:de:dd:77:9a:c3:17:fd:6e:
         13:99:d2:41:cc:a3:03:2f:a1:2f:8d:15:ea:ab:80:83:b0:21:
         1a:62:66:d6:48:80:8d:2a:f9:e3:fb:3f:9d:79:63:d4:71:9e:
         02:9d:09:00
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxREI4
N0I0QzBFRTUxRTY2NDQ2NTQ2OERCN0MyNjAzM0ZCNDRBMEEyMB4XDTI2MDQwODIz
NTI1MVoXDTI3MDQwODIzMzk1NVowMzExMC8GA1UEAxMoQzU1RDBDOUYzRTZDODg1
RUEyNUREMzNCNzBDQTIxMzk1OTFCRDQzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK1ThqBfE6yQBK+2COcrOe8LdIX6aXKv3bMKmcwcZ+dw2Dklzli/
0MvkWolFFmS6Pkd4rLkrfVCRfXYynJKJeEAur8zYFRZ0TWN5tuS0AAO70HxfAHYc
o5NaMGQclo4BEfW4w7nv3cQMEOmLb7wrKmlWCsSzu3ESVqvSmn1EI2L4FOcHSpsx
/GK3v3CpkVSf80BrYEy1pypO6jbcs9OWQ1e2UCW+cf7CKEqyEqn2bT5KSgSFN6OP
hO6R++IuPPXFv15rTr3rPPFFs5JeiwlOpcWx0HnRN8b5tNr7E0Xz3ugdxEV/EmZa
ERGoucRAZlwzoMZ6gq1ZMVWLZY/hClPOAqECAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBTFXQyfPmyIXqJd0ztwyiE5WRvUMTAfBgNVHSMEGDAWgBQduHtMDuUeZkRlRo23
wmAz+0SgojAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0NTMvSGJoN1RBN2xIbVpFWlVhTnQ4SmdNX3RFb0tJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSGJoN1RBN2xIbVpFWlVhTnQ4SmdN
X3RFb0tJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwNDUzL3hWME1uejVzaUY2aVhkTTdjTW9oT1ZrYjFERS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAj7gMA0GCSqGSIb3DQEBCwUA
A4IBAQCe11sFzlFFUxG9w36wBzX9pTrl2zwVLgcihk2ODqxVYkO6xTtqYY2Dtlel
Er8AtWPbVc1HMzCnoSnLe0PLF/YzBhE1hhlA1xYivUlE2ZLHyTm2pIl6Hiu5IfGx
3qodqd26Qy/Y2fWoGd1qRxECHJgqrD2dGn3hvWmg8GSGYm8rOG8bitzGL/bOUNgf
q5841PWvqqjsuBrJUBAOJAevTI7gl6Oe1GicBR6M/3Mmnhc+DWt0ZaaSm6hrcUzN
ctYLzOlUf6vqDpRfBgaVNcVs0Rc63t13msMX/W4TmdJBzKMDL6EvjRXqq4CDsCEa
YmbWSICNKvnj+z+deWPUcZ4CnQkA
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:12 2026 by rpki-client