Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/qVeeFk6zzv-l3-zYiM30p5wo89E.roa
File:                     qVeeFk6zzv-l3-zYiM30p5wo89E.roa (raw, json)
Hash identifier:          n2eijH+R53gDRqgC61q4L+6cJwGwXy3K7wne/8h9Hgs=
Subject key identifier:   A9:57:9E:16:4E:B3:CE:FF:A5:DF:EC:D8:88:CD:F4:A7:9C:28:F3:D1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05A8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qVeeFk6zzv-l3-zYiM30p5wo89E.roa
Signing time:             Tue 31 Mar 2026 08:20:35 +0000
ROA not before:           Tue 31 Mar 2026 08:20:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        124.255.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A9579E164EB3CEFFA5DFECD888CDF4A79C28F3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:50:c3:44:9a:0f:de:54:0d:77:fa:53:dc:
                    5e:21:f3:13:39:7b:1c:25:ad:68:d7:ea:fc:31:43:
                    f2:ee:56:3b:6c:03:9b:ba:aa:52:15:9f:b1:00:d5:
                    35:de:d5:76:a2:59:01:d6:e8:68:da:91:61:85:f6:
                    90:d3:df:50:db:e4:71:c8:87:7c:c5:98:23:d5:96:
                    99:16:4a:23:80:45:80:71:e2:ca:68:70:23:a4:a1:
                    cf:fd:2b:9c:96:49:ad:25:82:1a:a3:8b:52:a9:02:
                    30:32:c3:6c:a3:d5:e0:5b:55:ba:d5:5a:95:e7:bd:
                    ad:a7:50:be:69:48:4b:7f:0b:7d:8a:9b:44:b5:4c:
                    cb:2f:fd:13:c4:08:5b:9e:f2:c4:cb:34:1f:c6:45:
                    e0:f9:a4:24:b4:2a:c1:0d:dd:b7:d2:66:24:11:9f:
                    17:a2:1c:c7:3f:63:da:f2:45:41:ad:ef:48:c0:a4:
                    3a:d8:d2:94:d5:e1:db:a8:b4:9a:61:f6:d9:ec:eb:
                    83:d3:b4:d5:db:5a:d7:45:fc:88:9d:a0:f8:78:e4:
                    01:0d:cf:31:2a:6c:e3:8c:1e:aa:a1:5b:92:57:6b:
                    89:16:5b:f0:7f:d4:f0:29:e7:7b:f9:e7:13:7e:87:
                    36:f1:67:8a:b4:eb:85:a0:4a:0a:85:cd:c0:43:9a:
                    87:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:57:9E:16:4E:B3:CE:FF:A5:DF:EC:D8:88:CD:F4:A7:9C:28:F3:D1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qVeeFk6zzv-l3-zYiM30p5wo89E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:6d:d4:34:3b:ca:7e:b9:09:00:6f:dc:51:4a:39:e3:f0:f1:
         28:23:8b:6c:c1:08:cb:df:0c:47:62:98:44:e1:27:2c:00:48:
         8e:ef:3b:2b:04:9d:32:05:15:ff:63:da:f9:d1:4b:5b:7f:2f:
         3d:68:85:3d:90:b4:0c:cf:95:97:45:86:c8:04:6f:6f:49:9d:
         0d:96:2c:bb:38:e7:01:b7:50:74:bb:ba:69:17:90:8a:2a:ce:
         ce:e5:61:78:5a:88:41:28:c6:9b:49:a6:61:09:40:97:6a:fc:
         ea:7a:34:a4:c5:37:be:10:1f:15:5e:6d:13:8a:34:72:31:0f:
         d3:ea:bd:40:4c:02:62:e5:8b:9b:55:1c:df:2c:79:1b:4a:bc:
         05:80:72:18:33:b0:bd:2c:17:a7:f0:27:be:2f:c8:22:fa:84:
         8a:4e:0b:76:e2:8f:02:08:e7:1e:2c:8a:3c:ee:86:55:b6:62:
         05:d3:c1:56:96:f2:a5:11:fe:43:6a:c8:86:f8:23:ef:1c:87:
         46:45:75:77:74:c4:30:26:ba:10:f2:4e:b7:cd:01:8d:dd:3f:
         ed:87:ad:57:24:27:04:e3:e9:9b:2d:1e:94:e9:bc:02:e6:20:
         4b:9c:8a:7d:41:9d:17:ad:41:6c:cb:6d:e2:ea:dd:1a:96:47:
         19:f2:34:4e
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIwMzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE5NTc5RTE2NEVCM0NF
RkZBNURGRUNEODg4Q0RGNEE3OUMyOEYzRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAYFDDRJoP3lQNd/pT3F4h8xM5exwlrWjX6vwxQ/LuVjtsA5u6
qlIVn7EA1TXe1XaiWQHW6GjakWGF9pDT31Db5HHIh3zFmCPVlpkWSiOARYBx4spo
cCOkoc/9K5yWSa0lghqji1KpAjAyw2yj1eBbVbrVWpXnva2nUL5pSEt/C32Km0S1
TMsv/RPECFue8sTLNB/GReD5pCS0KsEN3bfSZiQRnxeiHMc/Y9ryRUGt70jApDrY
0pTV4duotJph9tns64PTtNXbWtdF/IidoPh45AENzzEqbOOMHqqhW5JXa4kWW/B/
1PAp53v55xN+hzbxZ4q064WgSgqFzcBDmocBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUqVeeFk6zzv+l3+zYiM30p5wo89EwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L3FWZWVGazZ6enYtbDMtellpTTMwcDV3bzg5RS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR8/zAwDQYJKoZIhvcNAQELBQADggEB
ABVt1DQ7yn65CQBv3FFKOePw8Sgji2zBCMvfDEdimEThJywASI7vOysEnTIFFf9j
2vnRS1t/Lz1ohT2QtAzPlZdFhsgEb29JnQ2WLLs45wG3UHS7umkXkIoqzs7lYXha
iEEoxptJpmEJQJdq/Op6NKTFN74QHxVebROKNHIxD9PqvUBMAmLli5tVHN8seRtK
vAWAchgzsL0sF6fwJ74vyCL6hIpOC3bijwII5x4sijzuhlW2YgXTwVaW8qUR/kNq
yIb4I+8ch0ZFdXd0xDAmuhDyTrfNAY3dP+2HrVckJwTj6ZstHpTpvALmIEucin1B
nRetQWzLbeLq3RqWRxnyNE4=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:17:22 2026 by rpki-client