Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Xrj4TbsVrmGUiqRHOSedzLgaxAk.roa
File:                     Xrj4TbsVrmGUiqRHOSedzLgaxAk.roa (raw, json)
Hash identifier:          yD4q1Jyu7bQzWCpctBPLrQCE06wNYoBCRJ6zwm2oX/Y=
Subject key identifier:   5E:B8:F8:4D:BB:15:AE:61:94:8A:A4:47:39:27:9D:CC:B8:1A:C4:09
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01DC
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Xrj4TbsVrmGUiqRHOSedzLgaxAk.roa
Signing time:             Tue 31 Mar 2026 07:39:50 +0000
ROA not before:           Tue 31 Mar 2026 07:39:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        218.221.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5EB8F84DBB15AE61948AA44739279DCCB81AC409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e1:8e:c3:0a:91:64:67:76:bf:82:bc:8f:87:
                    18:e9:28:2e:20:ff:64:86:cc:ed:11:6e:f5:89:fd:
                    61:04:90:c6:63:10:aa:c7:33:7b:e1:3e:cf:54:80:
                    d5:ba:c0:d2:83:80:20:65:7e:6c:06:bd:10:9b:ef:
                    bb:05:29:10:bd:7b:f2:5d:84:b3:ea:78:fb:01:e6:
                    1e:40:39:39:99:11:36:01:53:eb:9b:f1:04:21:7a:
                    5d:1c:a4:94:01:d6:af:db:19:3f:70:0a:7f:d9:67:
                    81:3c:7f:72:24:9a:bb:8a:9e:8a:82:c8:ce:22:0e:
                    6f:1d:31:5b:53:e6:ce:85:b4:90:56:2a:fe:ab:29:
                    cb:e5:7f:f3:c1:96:1d:b7:00:46:33:7e:04:45:4e:
                    28:1a:f1:f0:3f:ab:37:c9:4e:32:0d:07:c3:e1:3e:
                    b6:b3:48:c2:af:e9:79:fc:a8:a6:d7:5a:82:fb:24:
                    93:37:05:2a:b9:a3:88:9c:a6:85:4a:8a:b6:43:5a:
                    81:ad:dc:58:ff:db:08:a3:ff:43:28:8e:f8:7f:8f:
                    d3:6b:08:93:aa:d2:56:f9:59:a8:d7:ac:2c:eb:93:
                    f5:c8:89:28:a9:42:74:86:2c:3c:51:e3:ca:fe:d9:
                    dc:1a:f7:e2:e0:93:37:41:99:5b:e9:be:68:5a:ee:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B8:F8:4D:BB:15:AE:61:94:8A:A4:47:39:27:9D:CC:B8:1A:C4:09
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Xrj4TbsVrmGUiqRHOSedzLgaxAk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:73:95:60:a7:d2:d6:4b:20:b9:c3:cf:7d:43:d2:2d:96:06:
         59:15:9d:c4:e8:ba:0d:89:e2:2c:7b:0e:0b:67:0c:68:81:64:
         23:14:e2:16:19:26:1e:b5:43:71:dd:3b:4f:55:2d:f6:e4:47:
         47:84:bf:fc:6d:b5:8b:a2:aa:1b:09:6d:8d:2c:44:5f:43:af:
         64:ff:50:a5:c9:70:e1:5e:72:94:e3:56:70:b1:36:72:c7:c1:
         dc:2d:d3:63:d6:dc:c3:48:b9:df:4a:07:da:e6:f2:96:54:5b:
         84:5d:1f:dd:54:aa:75:d9:3a:7d:ce:ca:16:1e:81:16:8f:88:
         fa:64:2c:96:c1:c0:7a:a8:3f:a4:b7:a9:d1:21:c7:6f:e3:d0:
         a4:60:80:98:b3:8c:7e:34:2c:58:3e:af:ee:ee:05:ac:ba:d6:
         68:48:66:34:b1:7d:5e:21:4c:ef:e0:8b:a5:4f:df:60:03:81:
         be:80:a3:bc:c0:5a:75:0b:8b:13:86:2a:a2:a8:37:00:9e:d4:
         c0:30:4e:b9:13:71:91:9b:ad:07:fd:bd:a0:04:c7:a0:2e:80:
         26:52:b2:73:cf:3a:60:54:ef:89:8b:bc:09:b4:7c:7e:d2:cc:
         a8:01:7f:c0:a0:2d:42:4b:b1:d5:19:04:96:9d:78:61:6e:01:
         9f:32:fd:f2
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw
NzM5NTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFQjhGODREQkIxNUFF
NjE5NDhBQTQ0NzM5Mjc5RENDQjgxQUM0MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCh4Y7DCpFkZ3a/gryPhxjpKC4g/2SGzO0RbvWJ/WEEkMZjEKrH
M3vhPs9UgNW6wNKDgCBlfmwGvRCb77sFKRC9e/JdhLPqePsB5h5AOTmZETYBU+ub
8QQhel0cpJQB1q/bGT9wCn/ZZ4E8f3IkmruKnoqCyM4iDm8dMVtT5s6FtJBWKv6r
Kcvlf/PBlh23AEYzfgRFTiga8fA/qzfJTjINB8PhPrazSMKv6Xn8qKbXWoL7JJM3
BSq5o4icpoVKirZDWoGt3Fj/2wij/0Mojvh/j9NrCJOq0lb5WajXrCzrk/XIiSip
QnSGLDxR48r+2dwa9+LgkzdBmVvpvmha7vLdAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUXrj4TbsVrmGUiqRHOSedzLgaxAkwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9Ycmo0VGJzVnJtR1VpcVJIT1NlZHpMZ2F4QWsucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2t0wDQYJKoZIhvcNAQELBQADggEBACBz
lWCn0tZLILnDz31D0i2WBlkVncToug2J4ix7DgtnDGiBZCMU4hYZJh61Q3HdO09V
LfbkR0eEv/xttYuiqhsJbY0sRF9Dr2T/UKXJcOFecpTjVnCxNnLHwdwt02PW3MNI
ud9KB9rm8pZUW4RdH91UqnXZOn3OyhYegRaPiPpkLJbBwHqoP6S3qdEhx2/j0KRg
gJizjH40LFg+r+7uBay61mhIZjSxfV4hTO/gi6VP32ADgb6Ao7zAWnULixOGKqKo
NwCe1MAwTrkTcZGbrQf9vaAEx6AugCZSsnPPOmBU74mLvAm0fH7SzKgBf8CgLUJL
sdUZBJadeGFuAZ8y/fI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:39 2026 by rpki-client