Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/UBjbXWcKkE9zCka-v6vBuniuH2k.roa
File:                     UBjbXWcKkE9zCka-v6vBuniuH2k.roa (raw, json)
Hash identifier:          8ifMrJyebAlGviEpBLGFnPydeShYZZVAfgCGAAZCH1w=
Subject key identifier:   50:18:DB:5D:67:0A:90:4F:73:0A:46:BE:BF:AB:C1:BA:78:AE:1F:69
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       63
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/UBjbXWcKkE9zCka-v6vBuniuH2k.roa
Signing time:             Tue 31 Mar 2026 08:35:49 +0000
ROA not before:           Tue 31 Mar 2026 08:35:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23783
IP address blocks:        203.179.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Mar 31 08:35:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5018DB5D670A904F730A46BEBFABC1BA78AE1F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:7e:c3:06:80:82:8d:dc:76:86:af:4c:f4:
                    c3:15:43:d7:68:2f:e5:f0:f2:23:bf:dc:0c:03:a1:
                    7c:f5:cc:c3:4a:4f:d4:f5:ec:a3:57:34:0b:5c:00:
                    2b:75:68:f8:26:7b:ea:3e:f2:72:03:c1:15:a2:b5:
                    4a:d6:4f:86:be:65:3f:32:69:d5:75:7a:28:20:64:
                    2a:4e:52:0e:f1:46:8f:e6:c2:3c:92:e1:c3:81:63:
                    7a:eb:a8:65:16:f8:5d:f3:a1:f4:f4:8d:3c:ab:78:
                    08:7f:e5:34:a4:95:98:b1:47:09:89:6d:be:e5:fe:
                    9b:43:50:95:cc:bd:fc:d9:70:15:f1:57:04:43:e9:
                    d5:92:f7:0b:80:57:92:58:a3:fc:48:db:4b:ce:04:
                    01:d2:84:fa:11:6f:48:2c:f9:2f:50:e7:3d:3d:86:
                    ce:90:40:83:82:9d:43:04:47:1b:e5:36:16:15:b0:
                    91:24:63:93:12:96:66:66:a0:5c:00:21:82:84:a8:
                    a5:0e:c0:8f:00:81:18:89:b3:4d:37:af:69:1d:fe:
                    d3:9e:61:89:f3:25:14:72:82:28:46:ac:82:8b:8b:
                    f9:8f:9c:0c:63:bd:3e:a1:e2:fa:9b:96:31:a9:1f:
                    2b:21:e1:49:5a:6e:2b:05:c8:7b:1a:7a:8c:96:03:
                    33:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:18:DB:5D:67:0A:90:4F:73:0A:46:BE:BF:AB:C1:BA:78:AE:1F:69
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/UBjbXWcKkE9zCka-v6vBuniuH2k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.179.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:91:e1:61:b6:30:01:2e:e4:5f:49:50:e1:59:52:72:13:42:
         60:89:ec:c4:5f:53:07:26:65:e8:b7:d3:5e:6d:03:32:f2:fe:
         cb:3d:12:bc:08:18:2c:4a:67:84:df:ed:d7:a6:3b:58:d6:9f:
         ae:d9:44:cc:e9:da:57:a8:13:c5:84:4d:2a:09:24:7a:ec:0e:
         c5:57:c7:11:7c:89:79:a1:40:57:c9:19:33:62:61:67:77:61:
         06:a7:74:be:e4:1b:54:37:d7:9b:53:06:ab:28:5e:30:9f:56:
         16:dd:e2:ed:d3:23:60:4c:19:63:a3:0a:01:67:03:bc:f2:61:
         a3:f0:96:b0:ac:d5:4e:14:18:5a:f3:41:56:52:6b:39:10:c5:
         f7:7b:a9:fa:6f:9f:fb:c5:42:05:b0:26:0f:11:4c:1a:70:60:
         72:2a:bb:e8:52:a1:36:60:d4:39:44:6f:bd:5d:c0:77:ae:c8:
         75:ea:b0:f2:b8:25:05:27:48:e3:73:d2:07:6f:de:da:95:1c:
         fb:ab:76:d7:66:61:e1:c0:dd:75:4b:c9:ac:c3:ce:08:98:f0:
         4a:5c:8c:14:49:c9:d8:35:6d:af:41:1d:ae:11:3f:b3:35:45:
         77:d6:f3:02:d7:5d:8f:f1:eb:24:df:1d:d8:96:40:03:17:7b:
         04:57:b7:05
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF
RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI2MDMzMTA4
MzU0OVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTAxOERCNUQ2NzBBOTA0
RjczMEE0NkJFQkZBQkMxQkE3OEFFMUY2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMNJfsMGgIKN3HaGr0z0wxVD12gv5fDyI7/cDAOhfPXMw0pP1PXs
o1c0C1wAK3Vo+CZ76j7ycgPBFaK1StZPhr5lPzJp1XV6KCBkKk5SDvFGj+bCPJLh
w4FjeuuoZRb4XfOh9PSNPKt4CH/lNKSVmLFHCYltvuX+m0NQlcy9/NlwFfFXBEPp
1ZL3C4BXklij/EjbS84EAdKE+hFvSCz5L1DnPT2GzpBAg4KdQwRHG+U2FhWwkSRj
kxKWZmagXAAhgoSopQ7AjwCBGImzTTevaR3+055hifMlFHKCKEasgouL+Y+cDGO9
PqHi+puWMakfKyHhSVpuKwXIexp6jJYDM8cCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRQGNtdZwqQT3MKRr6/q8G6eK4faTAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi
llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0
MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zMDcvVUJqYlhXY0trRTl6Q2thLXY2dkJ1bml1SDJrLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsuz/DANBgkqhkiG9w0BAQsFAAOCAQEA
dZHhYbYwAS7kX0lQ4VlSchNCYInsxF9TByZl6LfTXm0DMvL+yz0SvAgYLEpnhN/t
16Y7WNafrtlEzOnaV6gTxYRNKgkkeuwOxVfHEXyJeaFAV8kZM2JhZ3dhBqd0vuQb
VDfXm1MGqyheMJ9WFt3i7dMjYEwZY6MKAWcDvPJho/CWsKzVThQYWvNBVlJrORDF
93up+m+f+8VCBbAmDxFMGnBgciq76FKhNmDUOURvvV3Ad67Ideqw8rglBSdI43PS
B2/e2pUc+6t212Zh4cDddUvJrMPOCJjwSlyMFEnJ2DVtr0EdrhE/szVFd9bzAtdd
j/HrJN8d2JZAAxd7BFe3BQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:31 2026 by rpki-client