Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/sOSvCl-AYgkYydPJdINGLSAUAeI.roa
File:                     sOSvCl-AYgkYydPJdINGLSAUAeI.roa (raw, json)
Hash identifier:          0Nm+SGAuSh2s734XE8vjM2NDxxCzAA75xEDITj9GrxE=
Subject key identifier:   B0:E4:AF:0A:5F:80:62:09:18:C9:D3:C9:74:83:46:2D:20:14:01:E2
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       89
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/sOSvCl-AYgkYydPJdINGLSAUAeI.roa
Signing time:             Sun 01 Feb 2026 01:29:20 +0000
ROA not before:           Sun 01 Feb 2026 01:29:20 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     10019
IP address blocks:        202.91.144.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Feb  1 01:29:20 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=B0E4AF0A5F80620918C9D3C97483462D201401E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:da:51:5e:4f:ff:52:e7:b2:3f:94:82:e0:
                    b8:99:44:7d:51:4b:69:8f:80:80:3f:78:81:5d:26:
                    69:74:17:0e:cf:83:ee:56:26:5e:c2:49:10:75:e8:
                    9d:09:8a:7e:69:4c:22:0b:5d:f1:86:88:00:07:a0:
                    58:33:4f:89:6b:2e:ad:99:c3:cc:37:7f:d2:17:81:
                    eb:11:25:bf:ef:05:ec:c5:94:22:28:8f:4e:e8:77:
                    83:97:19:68:29:be:10:42:f3:ec:12:a4:26:85:c2:
                    18:ca:7b:e3:1c:d0:84:b4:cc:c3:0d:87:68:06:70:
                    99:0d:a7:77:58:04:f1:5c:1a:9e:f9:29:da:e8:ff:
                    e2:6f:19:d8:e3:85:bc:a9:2e:8c:cb:de:db:3c:07:
                    a2:64:fe:37:3f:0d:88:fc:33:1e:e8:85:50:85:86:
                    d4:e2:c3:85:f1:51:8f:6b:8f:83:41:55:5a:a6:78:
                    b3:4f:e5:e7:fe:5d:9c:9f:8c:b8:3c:2e:09:0f:4f:
                    1d:14:12:ec:41:93:d3:f9:39:50:a9:9e:2c:23:ae:
                    8a:02:e0:38:3c:67:43:43:e7:76:6e:a4:fb:d2:b2:
                    5c:2c:90:79:f8:d1:8d:74:d8:bb:ec:1a:5a:74:b2:
                    40:3f:21:13:f4:f8:c5:ef:e5:2e:4f:60:bd:e5:10:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E4:AF:0A:5F:80:62:09:18:C9:D3:C9:74:83:46:2D:20:14:01:E2
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/sOSvCl-AYgkYydPJdINGLSAUAeI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:6a:12:50:fe:54:ff:ba:40:e7:e2:51:dd:56:25:a4:18:d9:
         88:83:e4:3f:73:e8:3a:1f:65:64:06:59:a9:ea:71:3a:4e:d2:
         e9:c8:53:74:9a:5c:c6:c3:66:55:4c:c0:b3:08:5a:ed:e1:36:
         1a:85:30:64:bc:f3:54:a1:a6:2d:ab:fd:0f:d5:c2:82:17:80:
         e1:ac:2b:27:aa:60:32:c1:76:41:fa:e3:40:c3:c6:ec:f0:23:
         30:3f:97:8c:b0:99:1d:0f:ef:b4:45:ca:ee:49:e4:bf:fd:55:
         7d:ae:44:f5:0d:1b:9b:75:47:f9:25:b9:b7:d5:64:47:d9:18:
         18:b2:18:41:b8:c1:ef:99:78:bd:8d:81:17:9a:cb:7d:1a:b4:
         68:b6:d0:4a:93:a1:47:44:86:1b:5f:f4:e2:a5:b9:66:45:25:
         9e:e3:be:ce:3a:96:06:5b:cd:a3:de:bd:9c:84:29:85:c8:b1:
         91:7d:4d:b4:61:7e:2f:39:b9:65:3a:4a:8a:2a:33:a6:c6:44:
         1c:5b:55:bb:fd:f0:30:97:88:3a:3d:0c:02:df:e1:f5:33:03:
         a2:3e:83:69:8d:6e:97:2d:cf:3b:7c:32:cf:5f:77:a4:a0:f2:
         c8:68:92:0b:26:c6:4c:48:2e:e9:78:ff:5e:b4:1b:13:dc:7f:
         08:94:3c:74
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDM5
MTdCMjMwNzQ1MjRFOUU2RUE4RTQwRkE0QTA2NzJDOTYyMDMxODAeFw0yNjAyMDEw
MTI5MjBaFw0yNzAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIwRTRBRjBBNUY4MDYy
MDkxOEM5RDNDOTc0ODM0NjJEMjAxNDAxRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmo9pRXk//UueyP5SC4LiZRH1RS2mPgIA/eIFdJml0Fw7Pg+5W
Jl7CSRB16J0Jin5pTCILXfGGiAAHoFgzT4lrLq2Zw8w3f9IXgesRJb/vBezFlCIo
j07od4OXGWgpvhBC8+wSpCaFwhjKe+Mc0IS0zMMNh2gGcJkNp3dYBPFcGp75Kdro
/+JvGdjjhbypLozL3ts8B6Jk/jc/DYj8Mx7ohVCFhtTiw4XxUY9rj4NBVVqmeLNP
5ef+XZyfjLg8LgkPTx0UEuxBk9P5OVCpniwjrooC4Dg8Z0ND53ZupPvSslwskHn4
0Y102LvsGlp0skA/IRP0+MXv5S5PYL3lEHs1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUsOSvCl+AYgkYydPJdINGLSAUAeIwHwYDVR0jBBgwFoAUQ5F7IwdFJOnm6o5A
+koGcsliAxgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2Mi9RNUY3SXdkRkpPbm02bzVBLWtvR2NzbGlBeGcuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RNUY3SXdkRkpPbm02bzVBLWtvR2Nz
bGlBeGcuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDYyL3NPU3ZDbC1BWWdrWXlkUEpkSU5HTFNBVUFlSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKW5AwDQYJKoZIhvcNAQELBQADggEBAChqElD+VP+6QOfiUd1WJaQY2YiD
5D9z6DofZWQGWanqcTpO0unIU3SaXMbDZlVMwLMIWu3hNhqFMGS881Shpi2r/Q/V
woIXgOGsKyeqYDLBdkH640DDxuzwIzA/l4ywmR0P77RFyu5J5L/9VX2uRPUNG5t1
R/klubfVZEfZGBiyGEG4we+ZeL2NgReay30atGi20EqToUdEhhtf9OKluWZFJZ7j
vs46lgZbzaPevZyEKYXIsZF9TbRhfi85uWU6SooqM6bGRBxbVbv98DCXiDo9DALf
4fUzA6I+g2mNbpctzzt8Ms9fd6Sg8shokgsmxkxILul4/160GxPcfwiUPHQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:51 2026 by rpki-client