Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/B14SbsXwYlkrb54zpHNkBn0VeHc.roa
File:                     B14SbsXwYlkrb54zpHNkBn0VeHc.roa (raw, json)
Hash identifier:          Kij+tSEg+ciUGet+tqcJru4RBuhSQlZEsmnnq6lSli4=
Subject key identifier:   07:5E:12:6E:C5:F0:62:59:2B:6F:9E:33:A4:73:64:06:7D:15:78:77
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01EA
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/B14SbsXwYlkrb54zpHNkBn0VeHc.roa
Signing time:             Tue 31 Mar 2026 07:39:56 +0000
ROA not before:           Tue 31 Mar 2026 07:39:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        210.132.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=075E126EC5F062592B6F9E33A47364067D157877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:27:1e:74:f6:44:1c:3f:98:60:5a:e4:2b:
                    f0:0c:2e:01:3b:eb:48:dd:fd:32:97:fd:5d:5c:fe:
                    1f:ba:8d:f3:b4:fd:f9:32:e8:e4:98:2f:ca:54:83:
                    42:d0:fd:ae:0c:39:f5:38:59:4e:6d:49:dc:42:8c:
                    3d:7b:9f:82:17:aa:91:3d:5f:c3:10:f1:ba:12:67:
                    c1:13:3b:de:13:79:75:27:82:7f:d5:9b:fa:f0:b8:
                    cc:9b:68:10:4c:f2:79:45:5a:cf:fe:db:98:af:f4:
                    d7:14:e7:c7:be:50:f0:b0:70:a0:cf:91:6a:05:8a:
                    cb:e7:a1:c4:49:8b:bd:17:4b:49:30:cd:4c:c7:1c:
                    46:ec:c6:f7:8a:7a:f6:ca:7c:b2:28:4e:dd:f3:f6:
                    da:06:ad:73:c0:e6:f0:26:68:e2:44:d6:b1:ec:88:
                    3b:86:e2:ba:25:79:dd:60:5d:05:f0:ed:40:2c:21:
                    1d:cf:28:02:72:d4:08:3f:5e:b5:06:29:4d:6f:b2:
                    0a:f3:80:9f:ff:c9:82:f5:35:6b:a1:2a:31:96:05:
                    b1:dd:a5:85:78:42:77:ec:d1:61:4b:b1:77:fe:64:
                    7c:c4:1e:31:9d:71:ad:1b:2a:8b:96:3e:28:7f:87:
                    eb:d5:60:a5:c8:a6:36:3b:e8:3e:82:d7:f1:b4:15:
                    9d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5E:12:6E:C5:F0:62:59:2B:6F:9E:33:A4:73:64:06:7D:15:78:77
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/B14SbsXwYlkrb54zpHNkBn0VeHc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         76:d9:f1:24:15:4d:3c:56:5c:0e:69:70:ca:cc:18:af:23:c3:
         64:01:f2:f9:46:c4:ca:cc:04:ca:94:da:e3:78:05:dd:6e:b7:
         2b:c6:f0:a9:4f:50:7a:d9:f1:95:f6:96:a3:bf:b0:4a:ed:ea:
         e8:42:5c:2c:33:17:c1:1c:81:b0:e8:98:22:e9:c6:fd:f1:f7:
         a1:bd:c0:ad:67:99:46:92:c8:7f:9f:65:99:06:84:1d:76:e3:
         6b:ec:f1:b8:44:56:eb:c5:ec:be:53:c3:be:42:0c:ac:19:da:
         52:6a:aa:e4:85:fd:e9:25:ee:c5:20:20:6e:50:3b:c2:bf:a9:
         d2:67:5f:66:8e:44:27:cc:90:cf:67:24:b9:72:c5:ea:e5:3c:
         11:ea:d2:8e:70:30:4e:05:ca:27:19:67:6f:b3:b0:16:f4:67:
         4a:93:da:d3:02:1a:d0:ea:79:50:71:17:eb:8c:fd:1e:72:1b:
         0e:db:18:03:80:0d:91:02:db:34:10:44:3a:75:a1:d5:99:51:
         4d:1a:af:39:e1:f4:4a:11:eb:fd:5b:56:f4:6b:dd:cb:e4:ca:
         a4:51:20:f0:08:4e:3d:b8:07:b3:a7:c9:be:9b:94:13:f5:8d:
         29:e2:f6:49:e4:cf:01:0e:ba:4a:0c:ea:d5:76:0b:60:a9:a3:
         ba:fd:98:f8
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAeowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw
NzM5NTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA3NUUxMjZFQzVGMDYy
NTkyQjZGOUUzM0E0NzM2NDA2N0QxNTc4NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyMCcedPZEHD+YYFrkK/AMLgE760jd/TKX/V1c/h+6jfO0/fky
6OSYL8pUg0LQ/a4MOfU4WU5tSdxCjD17n4IXqpE9X8MQ8boSZ8ETO94TeXUngn/V
m/rwuMybaBBM8nlFWs/+25iv9NcU58e+UPCwcKDPkWoFisvnocRJi70XS0kwzUzH
HEbsxveKevbKfLIoTt3z9toGrXPA5vAmaOJE1rHsiDuG4roled1gXQXw7UAsIR3P
KAJy1Ag/XrUGKU1vsgrzgJ//yYL1NWuhKjGWBbHdpYV4Qnfs0WFLsXf+ZHzEHjGd
ca0bKouWPih/h+vVYKXIpjY76D6C1/G0FZ1JAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUB14SbsXwYlkrb54zpHNkBn0VeHcwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9CMTRTYnNYd1lsa3JiNTR6cEhOa0JuMFZlSGMucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0oSAMA0GCSqGSIb3DQEBCwUAA4IBAQB2
2fEkFU08VlwOaXDKzBivI8NkAfL5RsTKzATKlNrjeAXdbrcrxvCpT1B62fGV9paj
v7BK7eroQlwsMxfBHIGw6Jgi6cb98fehvcCtZ5lGksh/n2WZBoQdduNr7PG4RFbr
xey+U8O+QgysGdpSaqrkhf3pJe7FICBuUDvCv6nSZ19mjkQnzJDPZyS5csXq5TwR
6tKOcDBOBconGWdvs7AW9GdKk9rTAhrQ6nlQcRfrjP0echsO2xgDgA2RAts0EEQ6
daHVmVFNGq854fRKEev9W1b0a93L5MqkUSDwCE49uAezp8m+m5QT9Y0p4vZJ5M8B
DrpKDOrVdgtgqaO6/Zj4
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:32 2026 by rpki-client