Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/Tt1DrORVlsKJddk7mQ0tBkq-5EM.roa
File:                     Tt1DrORVlsKJddk7mQ0tBkq-5EM.roa (raw, json)
Hash identifier:          8Bgm7AfgHQhrQeeFmBfi0xw3MWrkfiA9yuik7spBf/U=
Subject key identifier:   4E:DD:43:AC:E4:55:96:C2:89:75:D9:3B:99:0D:2D:06:4A:BE:E4:43
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       5D
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/Tt1DrORVlsKJddk7mQ0tBkq-5EM.roa
Signing time:             Tue 31 Mar 2026 08:35:47 +0000
ROA not before:           Tue 31 Mar 2026 08:35:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23783
IP address blocks:        61.11.160.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Mar 31 08:35:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4EDD43ACE45596C28975D93B990D2D064ABEE443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:91:0d:d4:5c:18:9f:97:08:25:97:ac:94:
                    41:2d:89:9c:1f:5e:36:72:de:01:a2:b6:87:b8:ef:
                    cd:ca:24:fa:8a:a0:c8:ff:d1:db:af:56:02:9f:46:
                    c0:2a:8e:d0:77:80:99:89:6d:66:0f:07:49:25:9a:
                    aa:65:91:78:29:8c:16:62:2f:4f:11:31:07:a3:9d:
                    70:6d:4e:43:bd:11:37:54:8e:aa:21:3e:35:6d:53:
                    bd:2d:e3:92:e3:2a:a4:29:6b:29:5c:b8:ad:a5:39:
                    a2:d1:12:66:0b:f8:67:81:81:91:e4:dc:88:e3:8f:
                    10:5b:82:3e:84:d9:2a:fa:6d:e9:b5:33:28:9a:99:
                    23:36:e4:ab:41:21:fd:b3:ff:9f:68:28:1e:0c:c2:
                    c0:91:9b:0c:1f:59:07:83:e8:fd:62:28:6d:e7:04:
                    b4:4d:d0:0a:b3:a4:de:4b:a2:3f:71:7a:6e:a0:1d:
                    24:c5:3a:a3:2f:8d:74:1b:de:c9:78:55:90:32:ca:
                    cb:2d:42:db:3c:04:ed:0c:90:a8:90:6e:28:ce:ae:
                    4f:07:0b:65:b5:b6:97:65:d0:df:df:e9:a3:69:af:
                    06:57:64:47:bd:33:e0:96:7d:6c:b4:e2:d3:fe:91:
                    cb:4c:76:c2:9e:03:a3:80:72:e7:12:39:b7:f0:a2:
                    41:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DD:43:AC:E4:55:96:C2:89:75:D9:3B:99:0D:2D:06:4A:BE:E4:43
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/Tt1DrORVlsKJddk7mQ0tBkq-5EM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.11.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:33:96:42:bd:dc:e5:cc:1b:c3:6f:e3:01:3c:a9:c3:4c:
         d6:f8:ab:c1:6d:88:0b:66:bb:50:fe:ae:19:b0:d9:04:e0:d1:
         5e:54:c3:d0:eb:5f:9b:47:15:24:11:a0:1a:25:87:3f:a3:bd:
         3f:98:ef:58:35:dc:d3:a9:ed:00:ab:85:46:55:e3:08:0b:80:
         9c:eb:fe:17:8a:64:bd:c0:de:b3:97:af:e6:09:98:d2:c7:d9:
         7a:b8:9c:78:3b:1c:4c:7a:c2:2c:9d:cf:d6:cf:b4:d4:99:20:
         0c:f4:1e:43:d4:f0:a3:70:1c:25:ac:92:4e:ca:f4:d7:33:76:
         f8:74:9d:63:e9:03:21:47:b1:d2:dd:49:76:7d:6b:0e:2f:50:
         43:06:6a:9b:1b:93:3c:a2:fc:0a:1a:15:30:46:f2:04:11:a4:
         a4:6b:97:df:70:fe:86:79:da:44:a2:b8:aa:e0:b6:57:3e:b3:
         00:bf:ff:f1:05:62:ca:e3:a3:56:6b:cb:80:92:68:47:43:d1:
         76:ee:f8:33:49:4d:5e:48:32:c8:35:27:27:70:49:c4:7d:62:
         e9:5d:86:de:ee:a0:68:7f:12:d2:3f:c0:22:d4:6a:09:38:a8:
         a7:8a:fc:c8:24:40:a2:61:6b:37:95:31:6a:ab:fd:1f:83:2c:
         2d:1c:19:4f
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF
RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI2MDMzMTA4
MzU0N1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNEVERDQzQUNFNDU1OTZD
Mjg5NzVEOTNCOTkwRDJEMDY0QUJFRTQ0MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKQ0kQ3UXBiflwgll6yUQS2JnB9eNnLeAaK2h7jvzcok+oqgyP/R
269WAp9GwCqO0HeAmYltZg8HSSWaqmWReCmMFmIvTxExB6OdcG1OQ70RN1SOqiE+
NW1TvS3jkuMqpClrKVy4raU5otESZgv4Z4GBkeTciOOPEFuCPoTZKvpt6bUzKJqZ
Izbkq0Eh/bP/n2goHgzCwJGbDB9ZB4Po/WIobecEtE3QCrOk3kuiP3F6bqAdJMU6
oy+NdBveyXhVkDLKyy1C2zwE7QyQqJBuKM6uTwcLZbW2l2XQ39/po2mvBldkR70z
4JZ9bLTi0/6Ry0x2wp4Do4By5xI5t/CiQUUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRO3UOs5FWWwol12TuZDS0GSr7kQzAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi
llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0
MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zMDcvVHQxRHJPUlZsc0tKZGRrN21RMHRCa3EtNUVNLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD0LoDANBgkqhkiG9w0BAQsFAAOCAQEA
qFgzlkK93OXMG8Nv4wE8qcNM1virwW2IC2a7UP6uGbDZBODRXlTD0Otfm0cVJBGg
GiWHP6O9P5jvWDXc06ntAKuFRlXjCAuAnOv+F4pkvcDes5ev5gmY0sfZericeDsc
THrCLJ3P1s+01JkgDPQeQ9Two3AcJaySTsr01zN2+HSdY+kDIUex0t1Jdn1rDi9Q
QwZqmxuTPKL8ChoVMEbyBBGkpGuX33D+hnnaRKK4quC2Vz6zAL//8QViyuOjVmvL
gJJoR0PRdu74M0lNXkgyyDUnJ3BJxH1i6V2G3u6gaH8S0j/AItRqCTiop4r8yCRA
omFrN5Uxaqv9H4MsLRwZTw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:02 2026 by rpki-client