Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/267B0jt7TH3Izh6Qg4QfrU_vZG0.roa
File:                     267B0jt7TH3Izh6Qg4QfrU_vZG0.roa (raw, json)
Hash identifier:          vr/P9ZIH3mATlYZYrLEJWizNo3wtxQNI4XXeIdVCEx8=
Subject key identifier:   DB:AE:C1:D2:3B:7B:4C:7D:C8:CE:1E:90:83:84:1F:AD:4F:EF:64:6D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0620
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/267B0jt7TH3Izh6Qg4QfrU_vZG0.roa
Signing time:             Tue 31 Mar 2026 08:21:32 +0000
ROA not before:           Tue 31 Mar 2026 08:21:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        210.229.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1568 (0x620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DBAEC1D23B7B4C7DC8CE1E9083841FAD4FEF646D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:d0:ce:65:d7:c6:76:48:c9:3c:2d:79:56:
                    fa:16:33:23:8e:8a:7b:c8:a5:41:41:b0:73:e7:9e:
                    0d:49:ab:7f:d3:19:23:00:a6:5e:3b:37:8b:cf:aa:
                    cb:5d:c0:6b:d0:b0:36:e3:cc:9d:4c:40:3e:85:f9:
                    55:34:6a:42:f7:1a:9b:cb:33:ad:5a:61:12:dc:ca:
                    17:83:9e:f1:4d:60:a0:29:3d:15:1b:6f:e2:11:ef:
                    f3:52:c8:2b:e0:b9:fe:4d:4d:6a:42:2d:90:5b:b1:
                    38:aa:e2:a3:b8:b1:c1:05:12:83:68:81:c3:8e:70:
                    94:fd:0c:37:e9:21:cb:ce:3b:7c:52:d9:d2:fe:b7:
                    da:b3:3d:f2:f9:e3:b6:19:a5:42:a1:71:30:8e:9f:
                    88:ca:ff:9e:3e:7b:62:96:dd:cf:0a:27:74:d9:2d:
                    2e:47:0e:0a:a6:88:a2:45:e9:2e:43:12:c1:e2:b7:
                    3b:73:de:73:c5:37:d9:05:16:b3:c6:ad:81:0f:96:
                    35:78:35:7c:da:e9:e2:92:3f:c1:c3:b2:84:d9:6e:
                    8a:a2:b9:8d:6b:ef:b3:1d:b1:a9:1e:a8:32:c2:94:
                    2d:18:1d:fb:1b:3f:9f:f0:06:1a:c5:6f:cc:4e:6d:
                    47:7c:49:1f:ae:56:3b:5d:c7:e2:87:65:07:0c:5e:
                    cb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AE:C1:D2:3B:7B:4C:7D:C8:CE:1E:90:83:84:1F:AD:4F:EF:64:6D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/267B0jt7TH3Izh6Qg4QfrU_vZG0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:91:2f:c8:3e:7e:ef:9a:3f:cb:f6:fe:6c:06:33:ff:7a:d4:
         b0:95:82:a0:66:79:08:5f:06:d5:07:71:9c:86:8f:8f:5d:6f:
         0f:f8:1e:6f:70:db:9b:ce:68:b3:7b:29:81:fd:f1:fe:86:1c:
         0b:43:52:21:ed:00:10:2d:2f:eb:43:b5:d6:6f:8b:8e:60:40:
         fb:21:6c:c7:41:2a:9c:20:5f:06:08:d0:9f:b8:0c:aa:32:79:
         40:4a:60:db:0e:bd:d6:f1:2f:1e:23:64:a1:d3:de:dd:ae:56:
         5c:5d:70:11:8f:f1:9f:51:83:a2:e7:16:b5:33:49:42:2c:45:
         fc:25:97:dc:74:78:ca:0b:62:d2:c5:57:c4:47:73:f7:c1:f0:
         e4:e7:cf:c8:a5:94:6e:30:0f:11:bb:46:81:93:cb:03:1e:7a:
         ce:13:f1:25:a5:08:f2:03:77:78:5a:13:fe:83:41:20:70:8a:
         25:99:8c:63:5b:14:4b:f4:f3:97:87:7f:15:7a:5f:99:02:c8:
         e8:f3:1f:4e:16:33:10:e2:8a:23:30:b5:7b:79:36:aa:c1:7d:
         03:38:8d:23:bd:57:dc:9f:0f:32:ba:19:ef:56:07:02:86:4c:
         15:a5:ae:b7:d8:d0:85:eb:6f:ea:8e:aa:01:02:40:8a:da:ee:
         f4:62:0e:08
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIxMzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERCQUVDMUQyM0I3QjRD
N0RDOENFMUU5MDgzODQxRkFENEZFRjY0NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9QtDOZdfGdkjJPC15VvoWMyOOinvIpUFBsHPnng1Jq3/TGSMA
pl47N4vPqstdwGvQsDbjzJ1MQD6F+VU0akL3GpvLM61aYRLcyheDnvFNYKApPRUb
b+IR7/NSyCvguf5NTWpCLZBbsTiq4qO4scEFEoNogcOOcJT9DDfpIcvOO3xS2dL+
t9qzPfL547YZpUKhcTCOn4jK/54+e2KW3c8KJ3TZLS5HDgqmiKJF6S5DEsHitztz
3nPFN9kFFrPGrYEPljV4NXza6eKSP8HDsoTZboqiuY1r77MdsakeqDLClC0YHfsb
P5/wBhrFb8xObUd8SR+uVjtdx+KHZQcMXssvAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU267B0jt7TH3Izh6Qg4QfrU/vZG0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0LzI2N0IwanQ3VEgzSXpoNlFnNFFmclVfdlpHMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS5VgwDQYJKoZIhvcNAQELBQADggEB
AEyRL8g+fu+aP8v2/mwGM/961LCVgqBmeQhfBtUHcZyGj49dbw/4Hm9w25vOaLN7
KYH98f6GHAtDUiHtABAtL+tDtdZvi45gQPshbMdBKpwgXwYI0J+4DKoyeUBKYNsO
vdbxLx4jZKHT3t2uVlxdcBGP8Z9Rg6LnFrUzSUIsRfwll9x0eMoLYtLFV8RHc/fB
8OTnz8illG4wDxG7RoGTywMees4T8SWlCPIDd3haE/6DQSBwiiWZjGNbFEv085eH
fxV6X5kCyOjzH04WMxDiiiMwtXt5NqrBfQM4jSO9V9yfDzK6Ge9WBwKGTBWlrrfY
0IXrb+qOqgECQIra7vRiDgg=
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:04:16 2026 by rpki-client