Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/62XkW8eBJjeOipAR3irxhtIGa0E.roa
File:                     62XkW8eBJjeOipAR3irxhtIGa0E.roa (raw, json)
Hash identifier:          hPjEBXDeWIZUteE6TQbTzczx/o/3TnUvClmVvyFyMhs=
Subject key identifier:   EB:65:E4:5B:C7:81:26:37:8E:8A:90:11:DE:2A:F1:86:D2:06:6B:41
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       C5
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/62XkW8eBJjeOipAR3irxhtIGa0E.roa
Signing time:             Tue 31 Mar 2026 07:39:41 +0000
ROA not before:           Tue 31 Mar 2026 07:39:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        159.28.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Mar 31 07:39:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EB65E45BC78126378E8A9011DE2AF186D2066B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:80:32:0b:a7:9b:b2:db:b2:a5:5d:8a:88:
                    7e:54:9f:1d:42:ae:c3:bc:50:ba:dc:d7:b7:d5:4a:
                    4d:a7:69:83:f4:43:4c:9a:98:da:56:24:19:b2:f3:
                    bf:f2:8e:e6:ac:62:30:2f:99:1f:6f:12:64:45:5b:
                    c4:22:e8:65:c9:d9:ab:59:54:ef:80:44:4b:54:8c:
                    6f:cd:18:83:3f:74:f5:f5:07:ad:44:2a:a2:be:e6:
                    e2:27:05:93:38:14:a5:d8:ed:d9:6a:4c:c0:ac:24:
                    cc:63:9f:7c:73:af:ed:9d:85:e6:da:bb:e8:e6:5f:
                    a0:b2:9d:5c:09:92:ee:98:ee:34:18:17:b0:4c:60:
                    2e:91:40:da:87:7f:95:4b:85:ec:d2:d7:20:0e:44:
                    90:8f:90:b4:3f:ac:22:be:da:3f:3a:b3:24:e3:d3:
                    80:86:b0:dd:6a:4d:a3:09:cc:ce:b4:a8:9f:6e:fe:
                    33:57:0b:1a:46:dc:ea:00:90:cd:45:30:5f:75:e4:
                    4e:df:86:88:84:bc:12:d4:0f:1f:31:69:c9:f7:32:
                    f2:fc:88:1d:2b:03:af:95:3c:17:07:d5:d4:75:32:
                    e5:51:3e:61:32:c5:4a:bd:f8:20:65:d9:e6:2b:e1:
                    4f:4b:92:14:d9:56:c4:8f:ab:c3:e1:86:0c:2c:f2:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:65:E4:5B:C7:81:26:37:8E:8A:90:11:DE:2A:F1:86:D2:06:6B:41
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/62XkW8eBJjeOipAR3irxhtIGa0E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.28.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0c:b7:9b:b8:31:2b:b5:cc:f3:02:80:ed:ce:f0:c1:bd:26:8e:
         c1:3f:cd:2c:67:a9:6d:2b:ae:59:81:1c:35:f0:cf:2a:f5:a0:
         0c:e7:31:f6:89:20:5e:c2:48:79:77:03:16:c6:48:7a:4e:d1:
         6c:81:3d:c5:1a:6d:a3:72:2d:1f:3d:58:03:1b:62:1f:40:3c:
         a9:44:33:7e:59:14:18:7c:de:f3:43:c5:31:70:1f:e6:52:c7:
         e1:de:74:17:ce:72:a3:18:80:1a:20:76:87:0b:b7:f4:cc:5b:
         ff:05:34:7d:62:9f:3c:e5:42:e8:11:49:8e:9f:a5:ce:21:91:
         6e:0e:cb:a3:2b:be:b2:5f:25:1d:ba:98:32:c0:b8:b3:90:57:
         01:44:ec:22:be:d2:90:41:81:d2:da:12:e3:d3:c9:f3:c3:00:
         06:b8:1b:b5:df:18:04:10:e6:4d:13:0b:39:65:44:b3:11:91:
         35:8e:a2:6f:f8:30:aa:8a:4c:1a:8a:c0:d5:dc:79:86:7f:29:
         32:5e:1b:4e:e9:cb:81:f0:a6:47:c4:13:73:c4:d8:0f:02:47:
         e1:c1:56:7e:18:0f:d7:77:c5:74:72:23:25:4d:fb:6b:f0:bb:
         13:5f:e3:b3:75:be:5b:9b:ec:7a:ef:f8:29:94:ff:ce:9f:6d:
         5e:89:5b:9b
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD
QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNjAzMzEw
NzM5NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVCNjVFNDVCQzc4MTI2
Mzc4RThBOTAxMURFMkFGMTg2RDIwNjZCNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFOoAyC6ebstuypV2KiH5Unx1CrsO8ULrc17fVSk2naYP0Q0ya
mNpWJBmy87/yjuasYjAvmR9vEmRFW8Qi6GXJ2atZVO+AREtUjG/NGIM/dPX1B61E
KqK+5uInBZM4FKXY7dlqTMCsJMxjn3xzr+2dhebau+jmX6CynVwJku6Y7jQYF7BM
YC6RQNqHf5VLhezS1yAORJCPkLQ/rCK+2j86syTj04CGsN1qTaMJzM60qJ9u/jNX
CxpG3OoAkM1FMF915E7fhoiEvBLUDx8xacn3MvL8iB0rA6+VPBcH1dR1MuVRPmEy
xUq9+CBl2eYr4U9LkhTZVsSPq8Phhgws8gw3AgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQU62XkW8eBJjeOipAR3irxhtIGa0EwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v
/yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD
QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My82MlhrVzhlQkpqZU9pcEFSM2lyeGh0SUdhMEUucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHnxyAMA0GCSqGSIb3DQEBCwUAA4IBAQAM
t5u4MSu1zPMCgO3O8MG9Jo7BP80sZ6ltK65ZgRw18M8q9aAM5zH2iSBewkh5dwMW
xkh6TtFsgT3FGm2jci0fPVgDG2IfQDypRDN+WRQYfN7zQ8UxcB/mUsfh3nQXznKj
GIAaIHaHC7f0zFv/BTR9Yp885ULoEUmOn6XOIZFuDsujK76yXyUdupgywLizkFcB
ROwivtKQQYHS2hLj08nzwwAGuBu13xgEEOZNEws5ZUSzEZE1jqJv+DCqikwaisDV
3HmGfykyXhtO6cuB8KZHxBNzxNgPAkfhwVZ+GA/Xd8V0ciMlTftr8LsTX+Ozdb5b
m+x67/gplP/On21eiVub
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:29:45 2026 by rpki-client