Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/nqVF-Is06obxv18metr5M92h5h4.roa
File:                     nqVF-Is06obxv18metr5M92h5h4.roa (raw, json)
Hash identifier:          2AI11DXpqAZTE2lOR2Ww0OqbD3RiGqd0tjsF3ivhV2g=
Subject key identifier:   9E:A5:45:F8:8B:34:EA:86:F1:BF:5F:26:7A:DA:F9:33:DD:A1:E6:1E
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       BB
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nqVF-Is06obxv18metr5M92h5h4.roa
Signing time:             Tue 31 Mar 2026 07:39:36 +0000
ROA not before:           Tue 31 Mar 2026 07:39:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        131.147.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Mar 31 07:39:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9EA545F88B34EA86F1BF5F267ADAF933DDA1E61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:45:63:98:dd:95:eb:e7:3a:4c:ce:8f:17:
                    10:a0:05:ff:c7:16:9e:a5:86:08:cc:bf:b7:14:ce:
                    9c:93:79:c9:d5:13:3e:c7:b7:5b:e0:99:96:a9:24:
                    b6:83:f9:28:b6:8b:ff:9e:eb:5d:4b:98:4e:da:68:
                    20:5f:04:49:06:0b:ad:f2:c9:13:5d:7d:2a:f7:ad:
                    2d:94:63:7b:75:e2:36:2c:f6:ad:58:53:43:2c:fe:
                    cc:df:80:d5:36:9b:32:cf:69:d8:f7:dd:8e:a4:48:
                    40:93:9a:fa:92:19:1b:16:da:1a:21:fa:3b:2a:e3:
                    74:6f:ef:23:fd:62:1f:5a:2c:9e:b4:c1:29:f2:47:
                    c6:fb:94:df:fb:97:23:f1:bc:cc:c1:41:aa:85:21:
                    75:1f:69:20:67:b6:98:cd:6d:47:06:d5:6e:74:1f:
                    53:a6:92:9e:2e:ab:4b:9e:90:f4:58:44:bf:57:4e:
                    24:cd:b7:89:80:e2:9e:99:9a:c1:bf:31:bd:1c:b6:
                    ff:e3:f3:2c:94:a1:10:8a:64:a3:d6:54:c9:aa:bc:
                    2a:2e:f9:78:f2:9e:11:d4:bf:64:f1:06:01:8d:6d:
                    c0:e8:e8:5c:01:00:9e:ca:36:66:75:be:1b:2b:73:
                    0d:b9:3c:28:ca:9b:1b:9e:6a:00:35:d5:d1:82:3d:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A5:45:F8:8B:34:EA:86:F1:BF:5F:26:7A:DA:F9:33:DD:A1:E6:1E
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nqVF-Is06obxv18metr5M92h5h4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:75:2c:8b:f7:31:f4:af:0d:30:1d:45:26:68:4b:cb:41:76:
         7c:76:ba:fc:5f:3e:c9:6e:4e:62:22:16:bf:7b:40:ae:0c:0d:
         c3:0b:19:f1:6d:89:77:e7:ff:42:60:3e:31:ae:d3:cc:70:5e:
         da:87:60:c9:47:4a:04:99:55:85:78:38:14:32:b6:5c:aa:81:
         ae:0c:7a:02:49:c1:c9:73:1e:be:d6:3b:c1:dd:34:7c:1a:5e:
         0f:24:62:50:b9:84:92:14:c5:61:4c:b7:19:b1:23:c9:ff:6e:
         53:48:23:4d:da:81:4e:b5:17:85:07:d6:0e:44:b0:15:d8:a8:
         ad:5a:2c:f3:74:97:14:a5:39:54:c8:32:0f:57:0a:5f:be:30:
         0a:ed:aa:c1:74:32:9a:cb:92:38:e3:16:3f:a4:fa:4d:79:7a:
         70:f9:aa:ba:8c:5b:d0:f2:b4:33:43:70:cb:7f:79:f8:a7:f5:
         52:8a:4a:d0:78:ec:7d:ba:46:8a:ce:50:70:b6:0f:67:f2:51:
         c3:30:63:17:51:9e:f3:cc:9f:68:74:bc:85:4b:4b:5d:6b:64:
         49:68:67:b5:36:7b:7e:5a:49:aa:1b:e9:73:bf:b4:d2:dd:4e:
         51:69:6f:df:df:5c:64:e4:48:9a:72:9d:5b:c6:f1:e5:e4:85:
         bc:87:2b:7e
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICALswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD
QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNjAzMzEw
NzM5MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlFQTU0NUY4OEIzNEVB
ODZGMUJGNUYyNjdBREFGOTMzRERBMUU2MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzVEVjmN2V6+c6TM6PFxCgBf/HFp6lhgjMv7cUzpyTecnVEz7H
t1vgmZapJLaD+Si2i/+e611LmE7aaCBfBEkGC63yyRNdfSr3rS2UY3t14jYs9q1Y
U0Ms/szfgNU2mzLPadj33Y6kSECTmvqSGRsW2hoh+jsq43Rv7yP9Yh9aLJ60wSny
R8b7lN/7lyPxvMzBQaqFIXUfaSBntpjNbUcG1W50H1Omkp4uq0uekPRYRL9XTiTN
t4mA4p6ZmsG/Mb0ctv/j8yyUoRCKZKPWVMmqvCou+XjynhHUv2TxBgGNbcDo6FwB
AJ7KNmZ1vhsrcw25PCjKmxueagA11dGCPYQ3AgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUnqVF+Is06obxv18metr5M92h5h4wHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v
/yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD
QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9ucVZGLUlzMDZvYnh2MThtZXRyNU05Mmg1aDQucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg5MwDQYJKoZIhvcNAQELBQADggEBAHV1
LIv3MfSvDTAdRSZoS8tBdnx2uvxfPsluTmIiFr97QK4MDcMLGfFtiXfn/0JgPjGu
08xwXtqHYMlHSgSZVYV4OBQytlyqga4MegJJwclzHr7WO8HdNHwaXg8kYlC5hJIU
xWFMtxmxI8n/blNII03agU61F4UH1g5EsBXYqK1aLPN0lxSlOVTIMg9XCl++MArt
qsF0MprLkjjjFj+k+k15enD5qrqMW9DytDNDcMt/efin9VKKStB47H26RorOUHC2
D2fyUcMwYxdRnvPMn2h0vIVLS11rZEloZ7U2e35aSaob6XO/tNLdTlFpb9/fXGTk
SJpynVvG8eXkhbyHK34=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:17 2026 by rpki-client