Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/WiOALwkP2ZymHTFe2-27kZwWPNU.roa
File:                     WiOALwkP2ZymHTFe2-27kZwWPNU.roa (raw, json)
Hash identifier:          OrvaIpKOqpUYbjzViv0NvX/TvvZ14PFCEzbIHd09KNE=
Subject key identifier:   5A:23:80:2F:09:0F:D9:9C:A6:1D:31:5E:DB:ED:BB:91:9C:16:3C:D5
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       053B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WiOALwkP2ZymHTFe2-27kZwWPNU.roa
Signing time:             Tue 31 Mar 2026 08:19:40 +0000
ROA not before:           Tue 31 Mar 2026 08:19:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        61.44.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1339 (0x53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5A23802F090FD99CA61D315EDBEDBB919C163CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:b0:65:b9:d9:48:fd:b7:2c:8c:51:f9:d8:
                    8b:27:a1:08:52:79:34:65:c0:bd:f4:a0:ac:a7:0c:
                    83:a5:62:78:a7:64:af:29:e9:a2:08:8c:83:0d:f9:
                    a4:c5:83:85:de:0e:7a:c5:63:fc:a9:d9:0a:34:e5:
                    5e:a3:6c:00:a4:c1:30:cd:1c:d1:3a:a2:c6:ea:06:
                    b3:31:0e:bd:fe:0b:d9:81:52:01:78:a0:98:fd:a3:
                    fb:9a:2b:2f:ef:2c:d1:ff:bf:63:e5:c2:bd:63:f5:
                    ab:74:76:ae:3e:19:54:03:a1:b5:b1:2f:1b:fd:b8:
                    72:fb:7e:30:d0:70:2f:c7:5b:0e:1f:56:51:26:9c:
                    89:9e:12:f7:27:97:f0:74:4c:6b:19:72:5d:37:55:
                    ba:ce:7b:a3:53:fc:f4:a6:4b:3f:7e:02:a1:b8:87:
                    34:d5:fd:d7:56:b9:1a:a9:b0:26:35:93:5a:e1:fb:
                    ef:6c:e1:80:b6:fb:5d:1f:99:81:55:da:47:20:03:
                    60:2b:e3:fd:2c:ba:12:7d:47:d2:0f:e2:ac:b5:bb:
                    d4:2d:e2:bf:5b:34:cb:76:cb:1a:57:2a:29:df:5e:
                    cc:0b:3e:71:71:5b:ba:85:59:95:48:1e:33:44:14:
                    4a:6e:2a:45:bd:6a:5c:4d:08:a7:39:fe:1d:61:77:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:23:80:2F:09:0F:D9:9C:A6:1D:31:5E:DB:ED:BB:91:9C:16:3C:D5
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WiOALwkP2ZymHTFe2-27kZwWPNU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:f4:26:b0:b7:c5:f9:96:dc:a1:7e:7e:a5:7c:d6:d7:9a:1d:
         f7:fa:84:ec:17:c0:95:41:67:8a:62:32:81:48:14:7a:d6:bd:
         30:7b:95:fe:41:94:ef:ca:65:70:d0:d6:9f:a4:87:ce:7e:05:
         b5:22:f7:ac:e4:63:32:36:d8:d4:47:cb:f5:57:06:36:ed:dc:
         90:06:fe:79:c9:a9:69:ed:12:4f:18:da:e2:6c:6c:6e:c0:38:
         5b:78:4d:39:99:bd:07:54:d7:a9:4b:36:c8:94:00:e4:79:1a:
         19:e8:6f:cd:ee:c9:62:85:6c:36:29:4b:9b:3b:e2:dc:f8:92:
         98:b2:2c:67:76:2c:4f:d7:3a:c9:43:3a:4e:66:18:db:3e:34:
         ec:ad:9b:d5:17:0b:ff:f0:10:aa:44:3c:10:f7:d7:91:24:f1:
         aa:cc:57:99:a8:1b:1c:b8:c6:41:07:17:21:2b:ab:36:82:4d:
         08:fc:fd:77:ca:88:d2:4b:dc:2d:fc:48:82:ce:b1:60:48:f2:
         c6:c6:f7:05:e9:59:1a:b7:3c:a2:3f:16:00:27:cc:b5:ef:d6:
         c0:00:07:7f:78:61:49:45:a9:73:8e:ec:15:e4:9b:a9:04:3f:
         62:31:b5:e7:45:a9:e7:a8:fe:58:f6:e0:91:27:bc:98:19:fb:
         91:6d:8a:4b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBTswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODE5NDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVBMjM4MDJGMDkwRkQ5
OUNBNjFEMzE1RURCRURCQjkxOUMxNjNDRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaqLBludlI/bcsjFH52IsnoQhSeTRlwL30oKynDIOlYninZK8p
6aIIjIMN+aTFg4XeDnrFY/yp2Qo05V6jbACkwTDNHNE6osbqBrMxDr3+C9mBUgF4
oJj9o/uaKy/vLNH/v2Plwr1j9at0dq4+GVQDobWxLxv9uHL7fjDQcC/HWw4fVlEm
nImeEvcnl/B0TGsZcl03VbrOe6NT/PSmSz9+AqG4hzTV/ddWuRqpsCY1k1rh++9s
4YC2+10fmYFV2kcgA2Ar4/0suhJ9R9IP4qy1u9Qt4r9bNMt2yxpXKinfXswLPnFx
W7qFWZVIHjNEFEpuKkW9alxNCKc5/h1hdxEZAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUWiOALwkP2ZymHTFe2+27kZwWPNUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L1dpT0FMd2tQMlp5bUhURmUyLTI3a1p3V1BOVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9LEIwDQYJKoZIhvcNAQELBQADggEB
AJv0JrC3xfmW3KF+fqV81teaHff6hOwXwJVBZ4piMoFIFHrWvTB7lf5BlO/KZXDQ
1p+kh85+BbUi96zkYzI22NRHy/VXBjbt3JAG/nnJqWntEk8Y2uJsbG7AOFt4TTmZ
vQdU16lLNsiUAOR5Ghnob83uyWKFbDYpS5s74tz4kpiyLGd2LE/XOslDOk5mGNs+
NOytm9UXC//wEKpEPBD315Ek8arMV5moGxy4xkEHFyErqzaCTQj8/XfKiNJL3C38
SILOsWBI8sbG9wXpWRq3PKI/FgAnzLXv1sAAB394YUlFqXOO7BXkm6kEP2IxtedF
qeeo/lj24JEnvJgZ+5Ftiks=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:03 2026 by rpki-client