Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/jNnUAZnnZ0Fmy2NAPztrZUqm8Pk.roa
File:                     jNnUAZnnZ0Fmy2NAPztrZUqm8Pk.roa (raw, json)
Hash identifier:          mT6131EHR5NJ8z1F8ZeXZkuZrnHDBR3SB4jeZ3zAaQc=
Subject key identifier:   8C:D9:D4:01:99:E7:67:41:66:CB:63:40:3F:3B:6B:65:4A:A6:F0:F9
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01F4
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jNnUAZnnZ0Fmy2NAPztrZUqm8Pk.roa
Signing time:             Tue 31 Mar 2026 07:40:00 +0000
ROA not before:           Tue 31 Mar 2026 07:40:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        118.240.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:40:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8CD9D40199E7674166CB63403F3B6B654AA6F0F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:de:74:e8:51:03:d1:d1:45:d7:24:8a:7d:
                    8f:ec:05:38:87:73:86:c9:d7:dc:e6:b7:88:36:5c:
                    30:be:71:93:6f:67:ba:71:6c:bc:e3:9f:e7:7f:fe:
                    72:84:9b:4f:a9:56:9f:48:08:e2:79:24:e9:71:77:
                    d8:32:f2:d1:32:9f:1e:8f:71:66:77:cb:85:88:cf:
                    db:a3:9e:0d:8d:36:55:50:a3:9e:db:62:da:2d:ae:
                    24:f5:93:47:5d:a0:ce:b9:8c:62:ea:55:1b:65:52:
                    1b:c9:4b:44:95:c8:a1:7d:ac:ac:7f:22:68:58:75:
                    0b:47:c5:88:76:ca:c8:5f:51:29:ca:41:ab:e0:06:
                    c4:b3:5a:fc:49:f0:19:27:a0:46:c4:0b:76:6d:fc:
                    fc:1e:76:de:0c:17:1d:aa:56:b0:46:cc:df:19:77:
                    10:4b:48:74:64:aa:15:26:62:fa:7b:1a:96:57:91:
                    0d:fe:7f:9e:44:a2:d2:3d:11:45:32:f9:92:ce:ea:
                    f6:6b:f1:1c:22:14:5b:9c:ea:d2:eb:64:e3:db:ee:
                    de:b3:c7:a8:f0:49:d6:50:9c:a5:0d:92:cc:24:73:
                    aa:b4:7c:8e:a1:68:fc:7f:7e:4c:75:50:b4:af:06:
                    6b:0d:f3:40:d6:ab:78:d7:28:5f:0b:68:3c:84:3c:
                    17:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D9:D4:01:99:E7:67:41:66:CB:63:40:3F:3B:6B:65:4A:A6:F0:F9
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jNnUAZnnZ0Fmy2NAPztrZUqm8Pk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.240.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6f:4b:4d:fb:95:d8:76:91:34:6e:9f:79:83:cc:83:6a:ae:31:
         aa:6f:f0:90:d8:43:f2:8c:fa:1e:26:05:55:08:14:5e:45:fe:
         d5:46:1e:b6:92:f3:7f:e7:f8:f8:6d:75:1b:d1:11:ba:89:54:
         99:fa:94:21:7c:38:15:f5:92:20:c1:53:5f:bf:65:20:fc:6c:
         3f:6c:a3:4e:55:1a:e9:8e:96:23:68:b5:37:fe:07:61:ac:ba:
         d2:69:94:00:99:cb:36:c0:73:0f:e7:5d:e5:d2:79:0d:d7:58:
         f3:63:f4:ef:fc:21:35:c6:e3:b1:e9:34:5b:f6:d6:6b:20:f5:
         8f:11:b8:54:fc:1b:15:b8:a9:1b:b6:d2:c8:54:42:43:64:26:
         3a:7f:31:f4:6a:af:6f:9d:3b:80:ae:6a:14:13:85:7e:f8:1d:
         18:7c:f8:d8:81:1f:d7:0f:10:5d:c9:de:51:58:d6:f1:37:93:
         bf:59:d5:04:35:da:bb:b5:72:96:e2:10:ee:af:a9:e0:4d:82:
         10:aa:03:30:e6:24:28:e5:15:03:f0:7a:97:1e:2c:81:49:89:
         46:4e:69:97:cc:b5:d1:93:6f:a6:7a:c3:58:3c:4c:26:aa:ac:
         2a:d1:ea:15:2d:f2:b1:49:f1:60:5f:43:dd:1b:41:11:53:78:
         f1:d9:a8:b5
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw
NzQwMDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhDRDlENDAxOTlFNzY3
NDE2NkNCNjM0MDNGM0I2QjY1NEFBNkYwRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIYN506FED0dFF1ySKfY/sBTiHc4bJ19zmt4g2XDC+cZNvZ7px
bLzjn+d//nKEm0+pVp9ICOJ5JOlxd9gy8tEynx6PcWZ3y4WIz9ujng2NNlVQo57b
YtotriT1k0ddoM65jGLqVRtlUhvJS0SVyKF9rKx/ImhYdQtHxYh2yshfUSnKQavg
BsSzWvxJ8BknoEbEC3Zt/Pwedt4MFx2qVrBGzN8ZdxBLSHRkqhUmYvp7GpZXkQ3+
f55EotI9EUUy+ZLO6vZr8RwiFFuc6tLrZOPb7t6zx6jwSdZQnKUNkswkc6q0fI6h
aPx/fkx1ULSvBmsN80DWq3jXKF8LaDyEPBelAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUjNnUAZnnZ0Fmy2NAPztrZUqm8PkwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9qTm5VQVpublowRm15Mk5BUHp0clpVcW04UGsucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMBdvAwDQYJKoZIhvcNAQELBQADggEBAG9L
TfuV2HaRNG6feYPMg2quMapv8JDYQ/KM+h4mBVUIFF5F/tVGHraS83/n+PhtdRvR
EbqJVJn6lCF8OBX1kiDBU1+/ZSD8bD9so05VGumOliNotTf+B2GsutJplACZyzbA
cw/nXeXSeQ3XWPNj9O/8ITXG47HpNFv21msg9Y8RuFT8GxW4qRu20shUQkNkJjp/
MfRqr2+dO4CuahQThX74HRh8+NiBH9cPEF3J3lFY1vE3k79Z1QQ12ru1cpbiEO6v
qeBNghCqAzDmJCjlFQPwepceLIFJiUZOaZfMtdGTb6Z6w1g8TCaqrCrR6hUt8rFJ
8WBfQ90bQRFTePHZqLU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:11 2026 by rpki-client