Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/bBXQwH0riOiFIcZImzsiu_6XWl4.roa
File:                     bBXQwH0riOiFIcZImzsiu_6XWl4.roa (raw, json)
Hash identifier:          w9YrBhSW5RUj8nyQvie2rCPpOQvsHZ3yXaOO6x84/CQ=
Subject key identifier:   6C:15:D0:C0:7D:2B:88:E8:85:21:C6:48:9B:3B:22:BB:FE:97:5A:5E
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       A7
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/bBXQwH0riOiFIcZImzsiu_6XWl4.roa
Signing time:             Tue 31 Mar 2026 07:46:43 +0000
ROA not before:           Tue 31 Mar 2026 07:46:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        202.91.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Mar 31 07:46:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6C15D0C07D2B88E88521C6489B3B22BBFE975A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:79:59:b0:c8:44:63:3a:d8:e9:9a:98:7f:
                    06:3e:76:a3:44:1e:b5:af:16:b8:8a:5a:a6:f4:3a:
                    53:3b:68:14:f1:ef:fe:56:33:6d:21:a9:8b:8f:a1:
                    42:af:2e:05:a7:15:e9:f5:37:69:e6:66:7c:f2:65:
                    14:83:9d:67:d7:6c:90:ea:9d:f0:df:df:8d:f1:d8:
                    f1:dd:b9:98:5a:98:0c:28:39:ef:4c:bc:93:42:49:
                    ac:d8:e5:21:c9:bd:68:20:48:66:37:ad:f2:cd:58:
                    d4:09:b0:b3:ec:a2:c8:ca:a4:ef:a3:66:af:81:49:
                    14:52:0e:7d:2c:b5:2b:3b:9a:89:a2:c2:30:52:ff:
                    f4:8d:99:81:a4:8b:bc:c3:bc:62:ea:4b:5c:eb:4e:
                    2e:75:00:20:2d:c6:e9:1d:8d:8d:26:60:b2:3d:5e:
                    15:d9:a2:ef:a6:1d:f6:bb:89:80:4a:36:8a:f5:52:
                    1c:a6:e3:87:3b:85:7c:f9:99:bf:ee:55:84:da:74:
                    23:4e:ad:27:77:13:4c:ed:0f:38:c3:9a:d4:68:1f:
                    b5:73:28:9d:75:7f:bf:cb:f1:d4:fb:82:4a:70:48:
                    90:ca:af:4c:cd:49:1c:a3:2f:5f:24:cc:b6:be:a8:
                    11:7a:56:cf:b5:ee:e0:45:8c:8b:ac:d3:d2:d1:43:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:15:D0:C0:7D:2B:88:E8:85:21:C6:48:9B:3B:22:BB:FE:97:5A:5E
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/bBXQwH0riOiFIcZImzsiu_6XWl4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:92:76:74:5d:af:f6:49:66:bc:af:8d:a6:41:71:7e:cc:21:
         29:5e:94:00:0b:41:0a:56:e4:42:cf:b2:07:0a:c6:16:60:7c:
         7e:a8:46:73:f7:17:fa:2a:52:22:ed:f2:57:52:35:02:26:a5:
         ca:25:a1:bd:ff:26:50:cc:6e:d4:2e:3b:92:5b:91:39:0f:0a:
         b5:5c:7f:f6:11:8a:f4:d8:5d:a9:3a:9d:d6:7a:71:b8:f2:27:
         84:f2:bc:c1:a2:43:ec:3e:1c:d9:f9:45:bd:4f:37:1b:8c:18:
         e8:cf:99:17:2f:69:bc:7f:8b:8a:b0:1e:98:7b:c9:b9:9a:7b:
         7a:12:0d:af:ed:80:f4:52:4d:15:d6:75:3e:b5:af:96:83:26:
         0a:32:ad:71:cb:b8:38:be:a5:e3:de:f8:ad:2f:95:e8:00:e6:
         d0:99:ac:e0:a9:99:af:f8:ee:25:b8:03:53:49:fa:b3:f3:d9:
         70:1b:05:28:65:12:62:d3:ef:ff:99:37:72:7e:c7:1c:c4:e0:
         4c:3b:1c:83:39:63:cf:67:32:f6:34:7e:b7:65:a0:af:4e:b6:
         b1:f6:bc:7d:7e:78:6b:1d:81:44:a5:5e:cc:9f:3b:2a:df:d6:
         22:71:a5:ac:be:4f:55:ab:29:7b:ab:f5:04:4b:21:1c:1d:2e:
         b6:be:e0:39
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw
NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjAzMzEw
NzQ2NDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZDMTVEMEMwN0QyQjg4
RTg4NTIxQzY0ODlCM0IyMkJCRkU5NzVBNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9z3lZsMhEYzrY6ZqYfwY+dqNEHrWvFriKWqb0OlM7aBTx7/5W
M20hqYuPoUKvLgWnFen1N2nmZnzyZRSDnWfXbJDqnfDf343x2PHduZhamAwoOe9M
vJNCSazY5SHJvWggSGY3rfLNWNQJsLPsosjKpO+jZq+BSRRSDn0stSs7momiwjBS
//SNmYGki7zDvGLqS1zrTi51ACAtxukdjY0mYLI9XhXZou+mHfa7iYBKNor1Uhym
44c7hXz5mb/uVYTadCNOrSd3E0ztDzjDmtRoH7VzKJ11f7/L8dT7gkpwSJDKr0zN
SRyjL18kzLa+qBF6Vs+17uBFjIus09LRQ8hxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUbBXQwH0riOiFIcZImzsiu/6XWl4wHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn
opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt
YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzkzL2JCWFF3SDByaU9pRkljWkltenNpdV82WFdsNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKWzAwDQYJKoZIhvcNAQELBQADggEB
AGaSdnRdr/ZJZryvjaZBcX7MISlelAALQQpW5ELPsgcKxhZgfH6oRnP3F/oqUiLt
8ldSNQImpcolob3/JlDMbtQuO5JbkTkPCrVcf/YRivTYXak6ndZ6cbjyJ4TyvMGi
Q+w+HNn5Rb1PNxuMGOjPmRcvabx/i4qwHph7ybmae3oSDa/tgPRSTRXWdT61r5aD
JgoyrXHLuDi+pePe+K0vlegA5tCZrOCpma/47iW4A1NJ+rPz2XAbBShlEmLT7/+Z
N3J+xxzE4Ew7HIM5Y89nMvY0frdloK9OtrH2vH1+eGsdgUSlXsyfOyrf1iJxpay+
T1WrKXur9QRLIRwdLra+4Dk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:27 2026 by rpki-client