Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3860/odeO_DW2q75EsA3TkSV9LumlmMs.roa
File:                     odeO_DW2q75EsA3TkSV9LumlmMs.roa (raw, json)
Hash identifier:          LmLUJg7QV0gysOWXmmJ5n6u+eu1rQKE6NZXBc7celVE=
Subject key identifier:   A1:D7:8E:FC:35:B6:AB:BE:44:B0:0D:D3:91:25:7D:2E:E9:A5:98:CB
Certificate issuer:       /CN=E4B8CA152BCBC12C0B0972BD56AC45B07D6E6C1B
Certificate serial:       27
Authority key identifier: E4:B8:CA:15:2B:CB:C1:2C:0B:09:72:BD:56:AC:45:B0:7D:6E:6C:1B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5LjKFSvLwSwLCXK9VqxFsH1ubBs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3860/odeO_DW2q75EsA3TkSV9LumlmMs.roa
Signing time:             Tue 31 Mar 2026 08:36:27 +0000
ROA not before:           Tue 31 Mar 2026 08:36:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        202.237.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3860/5LjKFSvLwSwLCXK9VqxFsH1ubBs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3860/5LjKFSvLwSwLCXK9VqxFsH1ubBs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5LjKFSvLwSwLCXK9VqxFsH1ubBs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B8CA152BCBC12C0B0972BD56AC45B07D6E6C1B
        Validity
            Not Before: Mar 31 08:36:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A1D78EFC35B6ABBE44B00DD391257D2EE9A598CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:41:c7:3b:5b:50:1c:1c:97:f3:b9:76:77:
                    52:49:52:dc:fb:c9:b4:c4:c6:98:ef:73:9c:8f:ff:
                    3a:62:cc:61:03:6f:44:0d:28:c9:7d:a6:dd:75:2b:
                    57:16:89:72:2e:52:2e:dd:7c:95:da:f3:6b:45:47:
                    30:bb:cc:be:29:97:47:e3:4d:e9:99:4a:2f:07:b9:
                    a5:37:77:dd:f4:71:54:e1:ca:77:03:31:e6:92:06:
                    3f:c7:a4:73:fd:1f:8a:dd:a7:82:fc:18:30:37:38:
                    18:c9:e1:78:1d:52:2b:31:be:62:ad:8c:1b:a3:ac:
                    7b:bd:fe:07:7e:fd:7b:60:e9:87:10:91:94:65:1e:
                    76:e7:f5:73:e5:83:33:81:18:89:8b:58:57:f1:ed:
                    ab:53:a4:64:29:f1:ce:47:d9:2f:56:3d:f0:93:f2:
                    3c:5a:5c:58:d7:05:16:79:f5:bc:26:8e:a1:48:56:
                    5a:2c:71:bd:b0:b4:03:75:7b:d0:c5:e8:61:e0:ed:
                    d1:89:40:31:8c:8d:8b:95:49:4a:b2:e9:25:ed:58:
                    11:c0:bf:6a:05:56:a5:bb:e6:66:cd:e0:9a:09:c9:
                    84:32:72:e1:32:a7:5a:b3:aa:9d:75:77:17:82:d4:
                    70:6b:d6:78:65:53:21:c7:a3:3f:02:d7:2b:8c:2a:
                    2e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D7:8E:FC:35:B6:AB:BE:44:B0:0D:D3:91:25:7D:2E:E9:A5:98:CB
            X509v3 Authority Key Identifier:
                keyid:E4:B8:CA:15:2B:CB:C1:2C:0B:09:72:BD:56:AC:45:B0:7D:6E:6C:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3860/5LjKFSvLwSwLCXK9VqxFsH1ubBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5LjKFSvLwSwLCXK9VqxFsH1ubBs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3860/odeO_DW2q75EsA3TkSV9LumlmMs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.237.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:9f:00:39:62:c5:fa:3a:81:e0:08:22:8e:ed:df:8f:95:b4:
         5d:ed:4c:15:42:43:73:6e:31:9b:00:03:b4:1d:cd:ba:bc:60:
         f3:91:b0:08:6a:2f:0d:d4:a9:a4:a3:19:d3:14:82:6b:de:50:
         44:b5:fe:cc:dc:6c:a9:76:21:80:07:f5:fd:9d:78:9f:2c:d9:
         25:fe:e0:35:e0:c8:9a:66:61:b9:27:45:af:ec:22:b4:45:87:
         e4:6f:7b:2b:35:24:53:1e:b0:6d:bd:78:4b:62:84:ae:d0:e7:
         ac:d7:8d:16:62:e2:b8:d9:ee:e1:61:00:5a:4a:88:f5:33:ac:
         cb:a2:78:cb:9c:9b:98:09:de:5a:b0:82:a8:d8:2f:38:20:31:
         0d:da:5a:68:7a:ea:05:d8:ff:8a:58:c9:68:fc:24:c7:80:ab:
         ae:7e:d5:35:ff:93:71:d6:e4:b6:66:02:59:c7:d5:9b:d5:c7:
         6c:a7:bb:56:e9:3e:52:b6:c4:61:90:27:01:ac:9a:cb:ee:21:
         46:79:0f:cf:f4:19:90:16:3c:94:14:7f:d2:8a:9e:74:4d:79:
         60:80:7d:54:67:a6:9a:39:b9:bf:76:2d:6e:4a:24:e1:77:95:
         3f:0f:16:98:34:bc:74:e5:8c:44:a3:7a:63:d7:9f:20:42:07:
         a3:4f:68:2f
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNEI4
Q0ExNTJCQ0JDMTJDMEIwOTcyQkQ1NkFDNDVCMDdENkU2QzFCMB4XDTI2MDMzMTA4
MzYyN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQTFENzhFRkMzNUI2QUJC
RTQ0QjAwREQzOTEyNTdEMkVFOUE1OThDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALcAQcc7W1AcHJfzuXZ3UklS3PvJtMTGmO9znI//OmLMYQNvRA0o
yX2m3XUrVxaJci5SLt18ldrza0VHMLvMvimXR+NN6ZlKLwe5pTd33fRxVOHKdwMx
5pIGP8ekc/0fit2ngvwYMDc4GMnheB1SKzG+Yq2MG6Ose73+B379e2DphxCRlGUe
duf1c+WDM4EYiYtYV/Htq1OkZCnxzkfZL1Y98JPyPFpcWNcFFnn1vCaOoUhWWixx
vbC0A3V70MXoYeDt0YlAMYyNi5VJSrLpJe1YEcC/agVWpbvmZs3gmgnJhDJy4TKn
WrOqnXV3F4LUcGvWeGVTIcejPwLXK4wqLlMCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBSh1478NbarvkSwDdORJX0u6aWYyzAfBgNVHSMEGDAWgBTkuMoVK8vBLAsJcr1W
rEWwfW5sGzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzg2MC81TGpLRlN2THdTd0xDWEs5VnF4RnNIMXViQnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC81TGpLRlN2THdTd0xDWEs5VnF4RnNI
MXViQnMuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzg2MC9vZGVPX0RXMnE3NUVzQTNUa1NWOUx1bWxtTXMucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByu2UMA0GCSqGSIb3DQEBCwUAA4IB
AQCKnwA5YsX6OoHgCCKO7d+PlbRd7UwVQkNzbjGbAAO0Hc26vGDzkbAIai8N1Kmk
oxnTFIJr3lBEtf7M3GypdiGAB/X9nXifLNkl/uA14MiaZmG5J0Wv7CK0RYfkb3sr
NSRTHrBtvXhLYoSu0Oes140WYuK42e7hYQBaSoj1M6zLonjLnJuYCd5asIKo2C84
IDEN2lpoeuoF2P+KWMlo/CTHgKuuftU1/5Nx1uS2ZgJZx9Wb1cdsp7tW6T5StsRh
kCcBrJrL7iFGeQ/P9BmQFjyUFH/Sip50TXlggH1UZ6aaObm/di1uSiThd5U/DxaY
NLx05YxEo3pj158gQgejT2gv
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:22 2026 by rpki-client