Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51/sGaUwYPWXZUaDR7hcx6bt1T0zCk.roa
File:                     sGaUwYPWXZUaDR7hcx6bt1T0zCk.roa (raw, json)
Hash identifier:          hbbrkVQdXJo0Dr5BKySnfli1xfPZSGO713jxO8ADOkw=
Subject key identifier:   B0:66:94:C1:83:D6:5D:95:1A:0D:1E:E1:73:1E:9B:B7:54:F4:CC:29
Certificate issuer:       /CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
Certificate serial:       66
Authority key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/sGaUwYPWXZUaDR7hcx6bt1T0zCk.roa
Signing time:             Tue 31 Mar 2026 07:37:01 +0000
ROA not before:           Tue 31 Mar 2026 07:37:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4675
IP address blocks:        202.73.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
        Validity
            Not Before: Mar 31 07:37:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B06694C183D65D951A0D1EE1731E9BB754F4CC29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:93:f6:e7:5e:06:68:f9:a2:5a:7c:a7:ff:
                    cc:34:e8:b6:e6:62:e4:e3:ed:e1:bc:88:99:ca:ed:
                    47:b9:1e:e7:df:fc:52:99:4d:c1:1f:7b:20:d4:54:
                    a8:3f:8c:05:f3:b4:12:9f:16:f4:e8:13:42:ff:14:
                    79:d7:5f:c5:c8:c8:2e:50:52:0e:1a:4b:bd:00:fb:
                    92:ea:8e:a4:7d:72:57:d3:2c:86:60:b3:c4:b0:25:
                    62:4e:e4:67:07:48:36:f9:88:ee:65:0e:39:f8:54:
                    de:25:ac:42:dc:ca:4a:12:be:50:64:da:3c:fb:19:
                    8d:69:33:1f:6b:01:1b:a1:0a:2a:4b:cf:d4:19:15:
                    8f:3f:b2:de:a7:9d:01:61:20:b3:85:e7:eb:e1:fb:
                    99:dd:1a:35:fc:88:4b:92:a8:df:f4:07:3b:fa:9c:
                    7e:f8:e0:00:5e:bf:f8:31:4a:44:f5:a5:20:63:ae:
                    35:41:d8:9d:27:67:dd:7b:a4:bc:49:e2:f9:3b:2a:
                    25:3d:2f:6c:38:88:81:da:ef:46:9d:d8:61:4d:5a:
                    3f:6d:89:6f:1f:40:d6:3a:0f:66:db:39:c3:58:a0:
                    92:20:74:3e:34:0e:e4:54:34:7b:01:ff:e6:76:30:
                    b5:28:e1:db:ac:47:31:a0:c8:6f:29:b7:e8:50:d4:
                    7b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:66:94:C1:83:D6:5D:95:1A:0D:1E:E1:73:1E:9B:B7:54:F4:CC:29
            X509v3 Authority Key Identifier:
                keyid:CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/sGaUwYPWXZUaDR7hcx6bt1T0zCk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:38:c6:05:b7:59:65:19:51:b8:60:cd:02:69:c4:ab:35:9e:
         09:ae:7b:d4:c1:9f:0e:42:3c:7d:3d:71:92:33:a4:0e:df:e8:
         a9:de:35:e6:a6:d5:81:ac:c9:15:25:a7:37:80:3e:e7:e1:e8:
         09:87:b5:c6:2d:ce:86:ba:56:b1:36:33:32:f5:b8:49:b9:53:
         f8:eb:a6:84:f8:e1:1b:81:3c:f4:85:22:d4:2c:91:d7:22:27:
         8a:e1:cf:73:0c:dd:2f:08:a9:c5:c1:ba:43:3d:1f:35:7a:81:
         37:2a:15:0e:ec:b7:87:4c:94:ff:07:eb:dd:59:2e:cf:90:b3:
         29:5c:ab:a6:87:09:a3:c4:02:b0:c5:9c:d7:e2:fa:80:98:e6:
         b5:1c:f3:9e:6e:58:c9:ec:e0:fe:40:0e:dc:c1:7b:31:d3:b5:
         ea:40:0c:1d:df:e6:3c:ac:a8:3e:11:28:e9:ca:b4:44:d9:0d:
         55:45:40:4a:2a:54:43:83:da:ed:8b:f0:ac:71:69:72:64:04:
         db:f8:7d:14:89:d8:c4:82:6b:12:27:e7:f9:e7:7b:02:1e:31:
         21:a8:52:c1:4f:18:41:5b:e9:6a:d5:46:01:02:59:a5:db:bc:
         a2:87:dd:08:7e:1c:d4:62:59:ef:60:b3:2e:56:62:65:b7:be:
         e8:27:0e:a8
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRDVF
MjMxRUJGNDRDN0E0MDM5QTJGNzhFODM0QjZDRjNENkFGQTE0MB4XDTI2MDMzMTA3
MzcwMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjA2Njk0QzE4M0Q2NUQ5
NTFBMEQxRUUxNzMxRTlCQjc1NEY0Q0MyOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMxUk/bnXgZo+aJafKf/zDTotuZi5OPt4byImcrtR7ke59/8UplN
wR97INRUqD+MBfO0Ep8W9OgTQv8UeddfxcjILlBSDhpLvQD7kuqOpH1yV9MshmCz
xLAlYk7kZwdINvmI7mUOOfhU3iWsQtzKShK+UGTaPPsZjWkzH2sBG6EKKkvP1BkV
jz+y3qedAWEgs4Xn6+H7md0aNfyIS5Ko3/QHO/qcfvjgAF6/+DFKRPWlIGOuNUHY
nSdn3XukvEni+TsqJT0vbDiIgdrvRp3YYU1aP22Jbx9A1joPZts5w1igkiB0PjQO
5FQ0ewH/5nYwtSjh26xHMaDIbym36FDUe1MCAwEAAaOCAdcwggHTMB0GA1UdDgQW
BBSwZpTBg9ZdlRoNHuFzHpu3VPTMKTAfBgNVHSMEGDAWgBTNXiMev0THpAOaL3jo
NLbPPWr6FDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTEvelY0akhyOUV4NlFEbWk5NDZEUzJ6ejFxLWhRLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvelY0akhyOUV4NlFEbWk5NDZEUzJ6ejFx
LWhRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUxL3NHYVV3WVBXWFpVYURSN2hjeDZidDFUMHpDay5yb2EwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBATKSVAwDQYJKoZIhvcNAQELBQADggEBAH44
xgW3WWUZUbhgzQJpxKs1ngmue9TBnw5CPH09cZIzpA7f6KneNeam1YGsyRUlpzeA
Pufh6AmHtcYtzoa6VrE2MzL1uEm5U/jrpoT44RuBPPSFItQskdciJ4rhz3MM3S8I
qcXBukM9HzV6gTcqFQ7st4dMlP8H691ZLs+Qsylcq6aHCaPEArDFnNfi+oCY5rUc
855uWMns4P5ADtzBezHTtepADB3f5jysqD4RKOnKtETZDVVFQEoqVEOD2u2L8Kxx
aXJkBNv4fRSJ2MSCaxIn5/nnewIeMSGoUsFPGEFb6WrVRgECWaXbvKKH3Qh+HNRi
We9gsy5WYmW3vugnDqg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:09 2026 by rpki-client