Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/ivVBba2tQhOIytOVnMUmxLnNvTY.roa
File:                     ivVBba2tQhOIytOVnMUmxLnNvTY.roa (raw, json)
Hash identifier:          oc5dLwtmGIpH2V7MP8Y8aBdt3LWfTfbKFeXijJ9ZGjI=
Subject key identifier:   8A:F5:41:6D:AD:AD:42:13:88:CA:D3:95:9C:C5:26:C4:B9:CD:BD:36
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       C1
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/ivVBba2tQhOIytOVnMUmxLnNvTY.roa
Signing time:             Fri 17 Apr 2026 02:24:48 +0000
ROA not before:           Fri 17 Apr 2026 02:24:48 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        202.91.56.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr 17 02:24:48 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=8AF5416DADAD421388CAD3959CC526C4B9CDBD36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:7e:4a:97:17:6c:7b:42:de:f2:bd:81:65:
                    b0:82:d1:da:2b:fb:fb:d7:e3:7a:a9:cd:72:6e:13:
                    9b:cd:8a:5b:ca:96:2f:b2:3d:fd:a3:54:a7:50:eb:
                    bb:d9:43:d7:7e:d3:f2:6c:95:6b:ff:43:0a:1a:0d:
                    4c:25:93:72:ef:67:99:7a:6c:3c:a7:28:06:76:bc:
                    e1:7d:d8:b6:81:d4:88:bc:8f:3c:2f:20:4d:33:3b:
                    7e:4f:00:ce:2e:50:91:d6:ce:84:af:bc:b1:c8:dc:
                    d5:17:01:6e:f9:08:a0:2e:e0:4d:96:ff:8e:cf:34:
                    92:18:6c:8b:33:f3:5a:e3:e6:33:a2:ab:c0:ca:fe:
                    1e:1a:da:67:03:03:9d:ca:f4:20:32:06:60:e2:ce:
                    64:46:0a:c9:ce:8b:56:ad:ad:cd:2d:8b:c9:f2:b1:
                    98:99:4f:68:19:44:a1:2d:ea:9e:af:a1:38:9e:e2:
                    8b:7b:21:42:ce:c3:f2:07:c9:09:25:bc:73:08:29:
                    79:53:9a:d3:88:d7:b9:33:35:5c:8c:62:38:6a:62:
                    ac:05:47:b7:6c:fa:20:5c:2d:e1:fd:74:eb:49:5c:
                    9d:52:a4:6b:76:c1:5b:3c:08:c5:b3:57:13:a3:b9:
                    34:45:70:d5:1b:d7:4b:82:57:fe:44:f3:1f:b6:9b:
                    55:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F5:41:6D:AD:AD:42:13:88:CA:D3:95:9C:C5:26:C4:B9:CD:BD:36
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/ivVBba2tQhOIytOVnMUmxLnNvTY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:68:ac:4f:aa:2d:3e:61:fc:98:83:11:5c:05:2b:95:ec:db:
         a2:1e:83:70:36:e5:1e:07:6d:8c:f5:30:7c:bf:94:b8:b0:c8:
         40:6c:93:2e:fd:f2:b6:6d:13:af:ee:ea:98:a1:ec:6c:58:be:
         0f:8d:0c:d4:7d:b6:3f:b6:0a:6e:66:18:94:d6:aa:d4:02:cf:
         b5:b7:09:e2:70:83:8a:c0:89:bf:49:f9:11:fe:81:1b:0c:9e:
         cb:99:65:07:dc:4f:74:d6:0b:89:8f:e6:9c:7b:23:b9:ff:06:
         6d:ef:03:7e:b1:df:69:40:ba:73:37:77:de:2c:b7:b2:1d:45:
         c3:b9:9f:fd:43:f1:62:05:15:53:d9:07:0a:2c:81:5e:06:e1:
         76:b0:73:8d:9f:27:f4:d3:3a:c2:77:23:26:a2:26:cf:a7:f3:
         61:91:7f:74:57:13:0b:c9:47:0f:e0:14:3b:a6:90:4f:4d:7a:
         f0:c2:47:5a:b1:01:2a:89:d3:b3:8b:76:e6:c5:ca:2c:f5:e1:
         9d:1e:45:a0:b8:b9:27:b9:24:23:27:02:83:86:5e:4b:e7:1a:
         56:d2:4a:e8:29:b4:b0:6b:c8:d2:73:4a:d8:8a:ba:b2:4a:15:
         38:f5:ad:26:93:18:e5:37:97:57:f1:d5:db:26:87:7a:e0:75:
         70:26:b6:2c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw
NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjA0MTcw
MjI0NDhaFw0yNzA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhBRjU0MTZEQURBRDQy
MTM4OENBRDM5NTlDQzUyNkM0QjlDREJEMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYVX5Klxdse0Le8r2BZbCC0dor+/vX43qpzXJuE5vNilvKli+y
Pf2jVKdQ67vZQ9d+0/JslWv/QwoaDUwlk3LvZ5l6bDynKAZ2vOF92LaB1Ii8jzwv
IE0zO35PAM4uUJHWzoSvvLHI3NUXAW75CKAu4E2W/47PNJIYbIsz81rj5jOiq8DK
/h4a2mcDA53K9CAyBmDizmRGCsnOi1atrc0ti8nysZiZT2gZRKEt6p6voTie4ot7
IULOw/IHyQklvHMIKXlTmtOI17kzNVyMYjhqYqwFR7ds+iBcLeH9dOtJXJ1SpGt2
wVs8CMWzVxOjuTRFcNUb10uCV/5E8x+2m1VHAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUivVBba2tQhOIytOVnMUmxLnNvTYwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn
opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt
YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzkzL2l2VkJiYTJ0UWhPSXl0T1ZuTVVteExuTnZUWS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPKWzgwDQYJKoZIhvcNAQELBQADggEB
AGBorE+qLT5h/JiDEVwFK5Xs26Ieg3A25R4HbYz1MHy/lLiwyEBsky798rZtE6/u
6pih7GxYvg+NDNR9tj+2Cm5mGJTWqtQCz7W3CeJwg4rAib9J+RH+gRsMnsuZZQfc
T3TWC4mP5px7I7n/Bm3vA36x32lAunM3d94st7IdRcO5n/1D8WIFFVPZBwosgV4G
4Xawc42fJ/TTOsJ3IyaiJs+n82GRf3RXEwvJRw/gFDumkE9NevDCR1qxASqJ07OL
dubFyiz14Z0eRaC4uSe5JCMnAoOGXkvnGlbSSugptLBryNJzStiKurJKFTj1rSaT
GOU3l1fx1dsmh3rgdXAmtiw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:30 2026 by rpki-client