Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/yhEdbzrL0LIp-Q_nzv7AsFKxLPg.roa
File:                     yhEdbzrL0LIp-Q_nzv7AsFKxLPg.roa (raw, json)
Hash identifier:          YTmoanBj8fEvo9pGJ1lhm7b4ueNOi8Ues7+Bn2KQLIM=
Subject key identifier:   CA:11:1D:6F:3A:CB:D0:B2:29:F9:0F:E7:CE:FE:C0:B0:52:B1:2C:F8
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04D8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yhEdbzrL0LIp-Q_nzv7AsFKxLPg.roa
Signing time:             Tue 31 Mar 2026 08:18:54 +0000
ROA not before:           Tue 31 Mar 2026 08:18:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.132.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:18:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CA111D6F3ACBD0B229F90FE7CEFEC0B052B12CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:02:f9:d1:da:ad:62:9b:3c:47:fb:83:e4:
                    6f:6a:68:7c:55:cd:f1:44:75:9a:b8:8d:b7:d0:7f:
                    0b:dd:e0:85:3a:2f:e3:07:f2:56:1c:66:70:3e:9d:
                    35:ed:5c:80:e4:cd:03:c9:9d:20:0f:1c:3b:81:ea:
                    ea:23:c0:8d:4d:02:f4:8d:1c:20:2c:12:43:36:75:
                    3a:e2:98:21:4f:07:e5:55:46:51:25:8f:ca:83:ca:
                    53:80:67:da:21:be:00:d0:4e:3f:10:99:2b:f0:53:
                    35:54:75:87:c2:5b:1a:72:dc:9f:b0:68:63:c7:b9:
                    9a:45:42:c1:20:50:25:e1:2a:b0:9a:77:f2:8d:36:
                    b1:c2:c0:15:1f:ba:d8:e7:38:4d:5c:37:ab:f0:cc:
                    e2:e9:97:e5:5e:be:f8:f4:e4:d9:f2:1c:07:aa:c4:
                    18:be:5a:dd:3f:69:6f:90:06:f6:65:4a:d9:e8:b7:
                    99:fe:af:8a:d7:f1:34:81:e9:b7:bf:2e:f3:11:77:
                    22:b2:a1:ad:e6:98:6d:89:6e:7f:93:d3:76:47:93:
                    6c:83:5a:2e:1a:ef:cd:bf:67:cf:2d:60:69:bc:3b:
                    87:3e:f1:0c:55:38:e6:87:dc:8e:c0:5b:df:48:61:
                    18:3e:e5:bd:97:48:e9:7e:df:8d:7a:94:66:5b:4e:
                    5c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:11:1D:6F:3A:CB:D0:B2:29:F9:0F:E7:CE:FE:C0:B0:52:B1:2C:F8
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yhEdbzrL0LIp-Q_nzv7AsFKxLPg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:07:3e:91:1f:be:fd:fe:39:e9:a0:67:79:b5:55:19:b6:f8:
         4d:d7:cd:14:c7:33:f8:70:64:23:08:c8:23:e5:e0:d7:9e:25:
         88:2d:ba:9e:e3:0b:75:49:af:69:20:d6:fc:d2:25:2e:7d:32:
         5b:ee:f0:b6:fc:63:da:86:85:5e:39:86:2b:10:4c:9e:fc:6a:
         31:c6:85:ae:9c:85:e2:bf:f0:6c:4b:16:e6:33:d5:b6:ea:cb:
         e4:b5:69:75:ba:db:97:ee:ed:02:e4:f0:08:cf:22:51:6d:95:
         6b:a9:5b:3e:a3:17:3e:a0:be:db:36:c7:81:f3:79:44:14:02:
         41:3d:42:cd:3f:13:db:d7:09:38:1e:a6:3b:63:a3:8a:10:7f:
         9f:1b:f2:c1:fd:52:f4:3c:97:1d:20:ad:f3:76:ba:06:8a:de:
         c0:7e:e1:cb:a6:e7:28:ea:25:b7:c3:ae:48:24:9a:d7:3a:6a:
         7a:b0:be:44:2e:c9:9b:12:5b:4c:d0:93:a0:60:bc:b6:b7:59:
         b2:18:54:7f:a9:6e:3c:eb:0d:a6:ac:8a:5e:7f:b0:cd:d4:85:
         88:58:ed:a5:cd:69:63:d4:ad:aa:32:37:97:02:11:bc:54:d4:
         7f:92:da:f0:98:7e:62:34:b8:9c:5f:29:79:46:0b:8a:85:5a:
         6f:10:76:5f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODE4NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENBMTExRDZGM0FDQkQw
QjIyOUY5MEZFN0NFRkVDMEIwNTJCMTJDRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGRAL50dqtYps8R/uD5G9qaHxVzfFEdZq4jbfQfwvd4IU6L+MH
8lYcZnA+nTXtXIDkzQPJnSAPHDuB6uojwI1NAvSNHCAsEkM2dTrimCFPB+VVRlEl
j8qDylOAZ9ohvgDQTj8QmSvwUzVUdYfCWxpy3J+waGPHuZpFQsEgUCXhKrCad/KN
NrHCwBUfutjnOE1cN6vwzOLpl+Vevvj05NnyHAeqxBi+Wt0/aW+QBvZlStnot5n+
r4rX8TSB6be/LvMRdyKyoa3mmG2Jbn+T03ZHk2yDWi4a782/Z88tYGm8O4c+8QxV
OOaH3I7AW99IYRg+5b2XSOl+3416lGZbTlyZAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUyhEdbzrL0LIp+Q/nzv7AsFKxLPgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L3loRWRienJMMExJcC1RX256djdBc0ZLeExQZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYbhMAwDQYJKoZIhvcNAQELBQADggEB
AJYHPpEfvv3+OemgZ3m1VRm2+E3XzRTHM/hwZCMIyCPl4NeeJYgtup7jC3VJr2kg
1vzSJS59Mlvu8Lb8Y9qGhV45hisQTJ78ajHGha6cheK/8GxLFuYz1bbqy+S1aXW6
25fu7QLk8AjPIlFtlWupWz6jFz6gvts2x4HzeUQUAkE9Qs0/E9vXCTgepjtjo4oQ
f58b8sH9UvQ8lx0grfN2ugaK3sB+4cum5yjqJbfDrkgkmtc6anqwvkQuyZsSW0zQ
k6BgvLa3WbIYVH+pbjzrDaasil5/sM3UhYhY7aXNaWPUraoyN5cCEbxU1H+S2vCY
fmI0uJxfKXlGC4qFWm8Qdl8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:08 2026 by rpki-client