Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/xUXqu2Hic0IpacLHJt1EAV3lsYQ.roa
File:                     xUXqu2Hic0IpacLHJt1EAV3lsYQ.roa (raw, json)
Hash identifier:          bM+Znx+XP1TdaxRN5Sy+dMSdIweo31VXohUsh/dWBb4=
Subject key identifier:   C5:45:EA:BB:61:E2:73:42:29:69:C2:C7:26:DD:44:01:5D:E5:B1:84
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0114
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/xUXqu2Hic0IpacLHJt1EAV3lsYQ.roa
Signing time:             Tue 31 Mar 2026 08:30:17 +0000
ROA not before:           Tue 31 Mar 2026 08:30:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        220.150.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C545EABB61E273422969C2C726DD44015DE5B184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:33:47:39:37:c5:fd:32:b3:3e:b6:e2:80:
                    5c:43:2c:75:ad:05:e6:c9:c5:12:75:f0:08:94:66:
                    8b:66:18:78:56:87:c5:63:96:ec:fa:5b:f0:25:91:
                    d9:da:ab:53:24:de:bc:35:5b:e9:e1:44:86:f2:33:
                    cd:37:7e:78:1b:52:32:70:0a:d9:d5:5f:3f:8f:84:
                    ea:46:10:27:e7:ae:dd:af:af:fe:ec:70:ec:da:b3:
                    40:9d:68:2f:44:c7:cc:e3:29:06:3d:7f:71:7f:62:
                    32:39:7e:49:ec:6a:16:13:a1:30:f4:11:50:89:43:
                    41:d8:b5:c5:00:c4:f1:48:5e:59:a0:69:d5:50:87:
                    9b:eb:4e:3d:32:31:c0:89:8f:0f:cb:a2:8e:bb:a4:
                    36:d0:53:a0:65:64:06:3c:ad:bf:66:04:0d:cd:40:
                    be:58:31:4c:f4:ed:ae:f7:dc:56:59:16:12:48:4f:
                    48:0b:04:a2:66:15:98:dd:24:ac:14:aa:ac:8a:a4:
                    e1:62:82:4d:05:a0:fc:7f:c3:83:b5:03:c8:b8:28:
                    3b:19:05:91:b0:d2:33:98:6f:2c:b2:dd:57:5e:80:
                    b3:29:dc:61:49:a7:6f:f0:a3:02:74:25:19:5f:ee:
                    e3:a7:66:2a:65:3a:9c:53:e6:32:44:43:df:b6:c5:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:45:EA:BB:61:E2:73:42:29:69:C2:C7:26:DD:44:01:5D:E5:B1:84
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/xUXqu2Hic0IpacLHJt1EAV3lsYQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b9:7c:fa:0a:d2:b7:84:7c:f8:52:ee:8c:44:79:84:e6:90:77:
         0c:4e:5d:e2:e1:1d:bb:42:71:16:de:8d:d6:9c:78:60:0a:1b:
         c1:77:02:85:e9:9d:63:5f:1b:d0:22:17:1a:70:dc:ed:44:2a:
         d0:5c:b0:df:36:cf:19:5d:61:a7:76:7e:36:c3:c7:85:b7:80:
         27:d2:1c:10:33:30:71:78:87:40:6d:e5:f8:d0:73:db:98:20:
         7d:b3:f1:5b:e0:68:15:11:dd:21:b8:a0:e0:c7:ee:98:81:f4:
         29:eb:e6:2e:2e:93:2b:d6:79:b4:fa:d7:9a:05:fe:1e:4a:18:
         ea:db:b9:f6:8a:97:8c:f6:17:9d:17:a8:85:03:8b:04:c1:e1:
         65:eb:48:d9:6d:44:57:05:86:ce:4e:c6:a6:45:d9:44:78:9d:
         a0:6c:b4:a3:c0:04:e7:e6:03:bc:06:a3:34:83:d1:2c:c7:a5:
         72:a5:6b:7e:2f:b4:e4:32:c8:55:35:9a:67:bd:17:2e:6b:c1:
         d6:76:4e:71:b6:68:d4:ab:34:91:be:0f:18:96:58:8c:42:7a:
         39:96:d5:a2:87:a0:e7:b3:e9:62:23:4a:56:6c:2f:19:ab:fd:
         39:ea:e5:5c:a2:e2:e5:da:a4:be:d6:34:1e:f9:78:29:59:0b:
         0c:f1:9a:01
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICARQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNjAzMzEw
ODMwMTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM1NDVFQUJCNjFFMjcz
NDIyOTY5QzJDNzI2REQ0NDAxNURFNUIxODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCfjNHOTfF/TKzPrbigFxDLHWtBebJxRJ18AiUZotmGHhWh8Vj
luz6W/Alkdnaq1Mk3rw1W+nhRIbyM803fngbUjJwCtnVXz+PhOpGECfnrt2vr/7s
cOzas0CdaC9Ex8zjKQY9f3F/YjI5fknsahYToTD0EVCJQ0HYtcUAxPFIXlmgadVQ
h5vrTj0yMcCJjw/Loo67pDbQU6BlZAY8rb9mBA3NQL5YMUz07a733FZZFhJIT0gL
BKJmFZjdJKwUqqyKpOFigk0FoPx/w4O1A8i4KDsZBZGw0jOYbyyy3VdegLMp3GFJ
p2/wowJ0JRlf7uOnZiplOpxT5jJEQ9+2xQvVAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUxUXqu2Hic0IpacLHJt1EAV3lsYQwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MC94VVhxdTJIaWMwSXBhY0xISnQxRUFWM2xzWVEucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF3JZgMA0GCSqGSIb3DQEBCwUAA4IBAQC5
fPoK0reEfPhS7oxEeYTmkHcMTl3i4R27QnEW3o3WnHhgChvBdwKF6Z1jXxvQIhca
cNztRCrQXLDfNs8ZXWGndn42w8eFt4An0hwQMzBxeIdAbeX40HPbmCB9s/Fb4GgV
Ed0huKDgx+6YgfQp6+YuLpMr1nm0+teaBf4eShjq27n2ipeM9hedF6iFA4sEweFl
60jZbURXBYbOTsamRdlEeJ2gbLSjwATn5gO8BqM0g9Esx6VypWt+L7TkMshVNZpn
vRcua8HWdk5xtmjUqzSRvg8YlliMQno5ltWih6Dns+liI0pWbC8Zq/056uVcouLl
2qS+1jQe+XgpWQsM8ZoB
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:12 2026 by rpki-client