Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/06WqWqKBGXO9IZ3DawA6LB9x2Ko.roa
File:                     06WqWqKBGXO9IZ3DawA6LB9x2Ko.roa (raw, json)
Hash identifier:          SDreBXL80f6vYSHLy19XyWFAnVhRsss5FX87ApFOjNE=
Subject key identifier:   D3:A5:AA:5A:A2:81:19:73:BD:21:9D:C3:6B:00:3A:2C:1F:71:D8:AA
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01E6
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/06WqWqKBGXO9IZ3DawA6LB9x2Ko.roa
Signing time:             Tue 31 Mar 2026 07:39:54 +0000
ROA not before:           Tue 31 Mar 2026 07:39:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        202.238.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D3A5AA5AA2811973BD219DC36B003A2C1F71D8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cf:1c:87:57:d9:08:f5:5b:e7:ec:5b:c2:a7:
                    22:a5:8e:81:32:62:d8:df:a9:55:5f:4b:42:de:84:
                    31:97:90:ab:e7:44:f4:da:fa:57:8f:d1:7f:9e:d3:
                    96:4d:74:4f:75:2e:49:7e:28:e0:eb:32:be:99:97:
                    72:39:cd:7e:9e:2f:3f:42:1d:26:ae:b9:f1:20:6d:
                    53:9c:93:78:c0:12:06:91:86:4a:7a:ad:51:1b:8c:
                    ff:b6:ce:09:9d:47:f0:da:7a:da:4a:e5:86:b3:4b:
                    d1:19:00:ec:cc:38:e9:c9:26:aa:31:d9:db:50:bf:
                    14:f1:76:20:b6:5a:5c:0a:71:62:65:8d:dd:84:b7:
                    29:38:c3:9f:8d:f2:35:d0:17:10:94:52:ea:25:52:
                    8d:aa:8c:40:ef:04:58:d5:5d:bc:a7:9e:fb:9e:76:
                    22:06:d4:d8:37:87:b7:63:2b:39:56:e8:60:93:34:
                    d3:a9:7a:fb:5d:3d:c6:3c:6b:9a:ed:28:80:7b:ea:
                    cf:89:17:be:5a:ab:de:53:b5:f8:88:ae:76:e2:02:
                    ba:d7:b4:31:71:e2:c2:32:c9:6a:84:14:19:2e:8d:
                    f3:50:c0:10:17:dc:e5:b2:93:11:ca:3f:bc:8f:66:
                    d6:e7:a9:41:95:94:30:77:69:0b:96:08:cd:b6:44:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A5:AA:5A:A2:81:19:73:BD:21:9D:C3:6B:00:3A:2C:1F:71:D8:AA
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/06WqWqKBGXO9IZ3DawA6LB9x2Ko.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.238.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:53:f7:49:7e:b7:05:03:b0:c1:2b:07:b1:7f:ea:3e:41:74:
         13:57:7b:27:36:84:22:af:f7:43:f3:c8:d6:b0:79:5e:3d:ea:
         df:89:9f:7b:5a:3f:1c:d7:64:17:f3:9c:87:43:a7:56:c0:bd:
         e4:f9:d5:a6:91:7f:4e:de:bb:33:a0:c7:16:f7:19:61:c5:b2:
         d0:88:f8:7e:89:4e:68:af:fd:9d:c9:bb:8e:55:d3:ac:4e:f6:
         b9:c0:20:c0:a7:7b:9f:8c:d2:ef:6b:8f:c9:f1:93:90:ae:0a:
         c4:5b:5c:e3:f1:63:81:04:3c:da:ba:9d:9c:c1:be:de:1a:cf:
         40:8a:c4:dc:01:0f:90:54:06:54:10:6a:18:ac:d2:6a:44:23:
         89:c8:ca:e6:37:16:0a:58:90:bb:53:7e:21:de:c0:fc:3d:f6:
         12:c8:bf:21:8c:65:93:e5:81:fa:30:53:18:f5:01:c3:b7:05:
         73:5d:55:c5:89:d8:e3:64:40:32:04:a9:7e:65:5a:96:79:a5:
         26:ad:fe:d4:30:13:c8:05:d5:1f:45:6c:06:a4:90:16:41:c6:
         b1:c8:ed:4c:74:59:19:a1:c9:25:59:0c:69:06:bc:9d:a5:cf:
         62:7a:85:8a:53:71:88:79:e6:13:b4:ac:d4:58:19:02:f0:90:
         d3:67:42:19
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw
NzM5NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQzQTVBQTVBQTI4MTE5
NzNCRDIxOURDMzZCMDAzQTJDMUY3MUQ4QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCXzxyHV9kI9Vvn7FvCpyKljoEyYtjfqVVfS0LehDGXkKvnRPTa
+leP0X+e05ZNdE91Lkl+KODrMr6Zl3I5zX6eLz9CHSauufEgbVOck3jAEgaRhkp6
rVEbjP+2zgmdR/DaetpK5YazS9EZAOzMOOnJJqox2dtQvxTxdiC2WlwKcWJljd2E
tyk4w5+N8jXQFxCUUuolUo2qjEDvBFjVXbynnvuediIG1Ng3h7djKzlW6GCTNNOp
evtdPcY8a5rtKIB76s+JF75aq95TtfiIrnbiArrXtDFx4sIyyWqEFBkujfNQwBAX
3OWykxHKP7yPZtbnqUGVlDB3aQuWCM22RIVRAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQU06WqWqKBGXO9IZ3DawA6LB9x2KowHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My8wNldxV3FLQkdYTzlJWjNEYXdBNkxCOXgyS28ucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGyu5AMA0GCSqGSIb3DQEBCwUAA4IBAQCf
U/dJfrcFA7DBKwexf+o+QXQTV3snNoQir/dD88jWsHlePerfiZ97Wj8c12QX85yH
Q6dWwL3k+dWmkX9O3rszoMcW9xlhxbLQiPh+iU5or/2dybuOVdOsTva5wCDAp3uf
jNLva4/J8ZOQrgrEW1zj8WOBBDzaup2cwb7eGs9AisTcAQ+QVAZUEGoYrNJqRCOJ
yMrmNxYKWJC7U34h3sD8PfYSyL8hjGWT5YH6MFMY9QHDtwVzXVXFidjjZEAyBKl+
ZVqWeaUmrf7UMBPIBdUfRWwGpJAWQcaxyO1MdFkZocklWQxpBrydpc9ieoWKU3GI
eeYTtKzUWBkC8JDTZ0IZ
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:49:57 2026 by rpki-client