Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/VLIlZfMWsi_NRQq_U1XYS3_yzm0.roa
File:                     VLIlZfMWsi_NRQq_U1XYS3_yzm0.roa (raw, json)
Hash identifier:          +wuq81HaPCf7ktiqNesssLVDU3UmVy5wy8weU5xNvDk=
Subject key identifier:   54:B2:25:65:F3:16:B2:2F:CD:45:0A:BF:53:55:D8:4B:7F:F2:CE:6D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04D0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VLIlZfMWsi_NRQq_U1XYS3_yzm0.roa
Signing time:             Tue 31 Mar 2026 08:18:52 +0000
ROA not before:           Tue 31 Mar 2026 08:18:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.120.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232 (0x4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:18:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=54B22565F316B22FCD450ABF5355D84B7FF2CE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fb:c6:9d:86:44:e3:fc:1b:85:63:7a:64:80:
                    fd:16:7c:53:e3:0b:3c:9a:65:74:b2:70:47:dc:cf:
                    fc:b1:9d:e8:1a:88:89:6f:2e:06:5b:db:6b:32:1c:
                    86:96:4f:c5:df:15:2d:ac:98:64:c3:8c:6d:85:7b:
                    bc:1d:56:b5:8f:a3:ab:d1:97:b2:f8:36:ee:38:30:
                    b9:b5:33:2c:70:d4:e2:07:f6:e9:f0:b9:4c:8f:73:
                    2d:f1:40:d2:35:ef:b3:38:60:b8:f5:30:40:fe:d9:
                    c5:ee:72:bc:8e:e4:92:70:fa:ce:ca:9f:0c:81:fa:
                    9f:3b:0b:c0:b1:49:e4:26:c1:90:f1:94:37:e1:03:
                    91:74:59:44:dd:c0:26:ed:d0:ef:13:0a:78:9c:f6:
                    c6:b6:a4:91:73:79:d7:d6:37:e2:eb:77:22:80:12:
                    ea:a1:a6:47:31:61:0c:84:24:72:f6:b3:c9:f1:a7:
                    44:84:b2:07:6e:c8:07:f3:03:ab:7e:7e:9a:cb:8c:
                    d5:84:24:ce:37:30:62:e8:95:c2:56:c4:c6:23:e5:
                    2f:1b:0e:f5:e3:8f:34:58:94:00:ae:b0:ea:13:b3:
                    b7:8e:e2:ae:99:20:78:3e:69:6b:d4:7b:c2:2b:01:
                    28:50:50:d7:58:62:7f:bd:db:6f:98:6d:b1:31:da:
                    d1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B2:25:65:F3:16:B2:2F:CD:45:0A:BF:53:55:D8:4B:7F:F2:CE:6D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VLIlZfMWsi_NRQq_U1XYS3_yzm0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.120.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:23:31:e8:4d:f9:cf:ec:e8:e4:f9:08:1f:cf:7a:e8:05:88:
         3c:7f:f3:fa:e7:a2:b8:62:1c:25:bf:d8:ee:fd:ae:b8:05:62:
         6d:c0:ef:40:cb:03:32:6e:a3:07:ec:36:52:7b:2d:3c:f7:45:
         fc:56:76:d1:3a:b4:70:2d:56:88:f7:0e:02:ea:66:fe:3b:74:
         fb:17:c1:e4:79:7b:c5:e4:66:c2:e4:91:4c:30:fa:41:df:2c:
         af:a1:3e:2f:53:f5:fe:74:f0:7f:f4:48:22:ec:d0:7c:39:63:
         19:3c:68:e8:73:57:7d:93:84:38:3b:92:c4:69:eb:fa:9a:d2:
         3d:c2:c5:6d:b0:c4:d0:9b:7f:1c:4f:2b:4c:87:23:34:e2:cc:
         dd:17:e3:90:ba:4b:c5:97:64:8f:6f:c3:9e:cd:35:ba:03:ab:
         e4:72:0b:66:b2:12:ea:25:8a:84:53:ec:73:26:a1:33:f4:cd:
         79:90:ec:0b:0d:35:dc:97:0e:af:6e:f3:b0:36:80:b7:88:dc:
         3b:6d:d3:3f:71:3a:8c:65:0d:a7:82:e3:c5:51:fc:72:60:4b:
         d7:5c:78:de:0f:70:ba:c2:dc:c9:6b:69:19:48:a6:01:ab:4d:
         2c:59:af:df:f6:7b:d4:ea:be:d4:62:0f:57:59:48:b6:51:ee:
         e1:63:87:c5
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODE4NTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU0QjIyNTY1RjMxNkIy
MkZDRDQ1MEFCRjUzNTVEODRCN0ZGMkNFNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZ+8adhkTj/BuFY3pkgP0WfFPjCzyaZXSycEfcz/yxnegaiIlv
LgZb22syHIaWT8XfFS2smGTDjG2Fe7wdVrWPo6vRl7L4Nu44MLm1Myxw1OIH9unw
uUyPcy3xQNI177M4YLj1MED+2cXucryO5JJw+s7KnwyB+p87C8CxSeQmwZDxlDfh
A5F0WUTdwCbt0O8TCnic9sa2pJFzedfWN+LrdyKAEuqhpkcxYQyEJHL2s8nxp0SE
sgduyAfzA6t+fprLjNWEJM43MGLolcJWxMYj5S8bDvXjjzRYlACusOoTs7eO4q6Z
IHg+aWvUe8IrAShQUNdYYn+922+YbbEx2tG5AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUVLIlZfMWsi/NRQq/U1XYS3/yzm0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L1ZMSWxaZk1Xc2lfTlJRcV9VMVhZUzNfeXptMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIbeLQwDQYJKoZIhvcNAQELBQADggEB
ACwjMehN+c/s6OT5CB/PeugFiDx/8/rnorhiHCW/2O79rrgFYm3A70DLAzJuowfs
NlJ7LTz3RfxWdtE6tHAtVoj3DgLqZv47dPsXweR5e8XkZsLkkUww+kHfLK+hPi9T
9f508H/0SCLs0Hw5Yxk8aOhzV32ThDg7ksRp6/qa0j3CxW2wxNCbfxxPK0yHIzTi
zN0X45C6S8WXZI9vw57NNboDq+RyC2ayEuolioRT7HMmoTP0zXmQ7AsNNdyXDq9u
87A2gLeI3Dtt0z9xOoxlDaeC48VR/HJgS9dceN4PcLrC3MlraRlIpgGrTSxZr9/2
e9TqvtRiD1dZSLZR7uFjh8U=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:36 2026 by rpki-client