Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/05GeyYXXR-CtdDH2w13hK2uNOnk.roa
File:                     05GeyYXXR-CtdDH2w13hK2uNOnk.roa (raw, json)
Hash identifier:          Ga+664SMI6B8kVUwVQVZuyWs+e9PHX7/IGDbj7PkTw0=
Subject key identifier:   D3:91:9E:C9:85:D7:47:E0:AD:74:31:F6:C3:5D:E1:2B:6B:8D:3A:79
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       65
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/05GeyYXXR-CtdDH2w13hK2uNOnk.roa
Signing time:             Tue 31 Mar 2026 08:31:40 +0000
ROA not before:           Tue 31 Mar 2026 08:31:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.72.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Mar 31 08:31:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D3919EC985D747E0AD7431F6C35DE12B6B8D3A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d8:73:6b:c1:53:14:c6:e5:aa:a0:a0:05:d3:
                    02:15:dd:e4:43:53:8d:44:0d:9f:91:29:6e:dd:85:
                    1c:f2:03:3a:ed:70:58:90:ea:33:99:28:57:53:99:
                    d6:c0:b7:56:f2:ca:0f:02:da:5f:79:a5:5a:14:59:
                    4a:3c:40:04:a0:a4:ea:ca:81:4b:c6:f2:67:27:91:
                    aa:e4:4f:97:46:04:d1:6c:48:c7:0d:77:e8:26:6c:
                    6d:ca:a7:d4:be:53:ca:12:62:27:1e:25:21:28:e2:
                    3a:0f:a9:a3:d5:ef:56:26:57:52:e3:af:d1:d9:c3:
                    92:dc:4a:7d:f1:4c:a6:31:5e:4e:2e:9e:38:0a:a1:
                    5c:dd:d2:6a:07:84:1a:fd:7e:19:c9:07:c5:3e:75:
                    70:33:1e:12:27:e4:46:e3:a2:ed:b2:17:82:92:3b:
                    f7:20:5f:0b:76:27:73:92:52:5b:4c:fb:47:17:c8:
                    05:4d:79:f0:87:35:b9:5d:fa:2a:88:d0:26:4b:70:
                    df:21:af:0b:3e:72:9f:c7:10:fb:6c:db:c3:22:dc:
                    ec:39:25:1c:7a:f0:f7:4c:fa:b9:32:a2:24:82:88:
                    69:2a:75:25:65:f9:e0:18:8b:87:a5:db:1a:66:18:
                    76:6f:0a:35:d7:b8:b8:fe:0c:03:95:85:96:f4:fd:
                    83:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:91:9E:C9:85:D7:47:E0:AD:74:31:F6:C3:5D:E1:2B:6B:8D:3A:79
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/05GeyYXXR-CtdDH2w13hK2uNOnk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.72.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         63:87:c0:6c:27:65:69:7d:6b:5d:26:d2:76:7a:a0:ed:74:ff:
         fd:04:a5:4a:98:a4:11:e0:75:a6:80:a1:05:96:38:20:0c:e7:
         d0:f6:e7:7f:43:e6:b0:b7:1c:b8:62:6f:2d:6b:af:bc:7a:0b:
         82:76:d5:b9:1a:bb:e9:cd:d7:d7:54:b2:d5:cc:6b:d0:82:96:
         46:de:ae:65:5d:12:34:a9:fb:d9:f7:0c:fe:b0:e6:18:db:72:
         a6:24:78:6f:f1:19:5c:e4:50:ca:d9:86:ca:29:a5:17:98:58:
         80:c6:ea:db:42:95:a9:1a:44:b8:ea:47:b2:cf:bc:27:99:80:
         3b:04:27:4f:fc:93:81:79:54:79:91:7f:05:f6:fa:fa:24:c0:
         ff:44:8f:8d:dd:a4:b9:9a:47:e1:36:5b:03:60:23:90:e3:70:
         71:59:89:93:58:45:25:be:02:fd:c1:d8:1c:83:a2:c8:6f:06:
         af:ef:26:82:ec:8b:f8:d6:f6:07:47:4a:3b:4b:f9:75:86:02:
         72:7c:2d:02:fa:3e:0b:5c:07:f1:1f:5e:1b:fe:92:16:25:12:
         4b:35:90:3f:3a:97:87:8b:6e:60:46:e5:ac:40:6b:aa:79:a5:
         97:05:f9:ad:bf:a5:95:fc:5f:d6:fe:34:a1:02:3e:dc:40:34:
         b0:39:9a:35
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTEz
QUNDRjdFNzdCMDI5MkFFMTdCMDUzNDAyMTFDOEY5NzE3NjBCMB4XDTI2MDMzMTA4
MzE0MFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDM5MTlFQzk4NUQ3NDdF
MEFENzQzMUY2QzM1REUxMkI2QjhEM0E3OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMjYc2vBUxTG5aqgoAXTAhXd5ENTjUQNn5Epbt2FHPIDOu1wWJDq
M5koV1OZ1sC3VvLKDwLaX3mlWhRZSjxABKCk6sqBS8byZyeRquRPl0YE0WxIxw13
6CZsbcqn1L5TyhJiJx4lISjiOg+po9XvViZXUuOv0dnDktxKffFMpjFeTi6eOAqh
XN3SageEGv1+GckHxT51cDMeEifkRuOi7bIXgpI79yBfC3Ync5JSW0z7RxfIBU15
8Ic1uV36KojQJktw3yGvCz5yn8cQ+2zbwyLc7DklHHrw90z6uTKiJIKIaSp1JWX5
4BiLh6XbGmYYdm8KNde4uP4MA5WFlvT9g0UCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBTTkZ7JhddH4K10MfbDXeEra406eTAfBgNVHSMEGDAWgBTuE6zPfnewKSrhewU0
AhHI+XF2CzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTI0LzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBseGRncy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBs
eGRncy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MjQvMDVHZXlZWFhSLUN0ZERIMncxM2hLMnVOT25rLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAWpIMA0GCSqGSIb3DQEBCwUAA4IBAQBj
h8BsJ2VpfWtdJtJ2eqDtdP/9BKVKmKQR4HWmgKEFljggDOfQ9ud/Q+awtxy4Ym8t
a6+8eguCdtW5GrvpzdfXVLLVzGvQgpZG3q5lXRI0qfvZ9wz+sOYY23KmJHhv8Rlc
5FDK2YbKKaUXmFiAxurbQpWpGkS46keyz7wnmYA7BCdP/JOBeVR5kX8F9vr6JMD/
RI+N3aS5mkfhNlsDYCOQ43BxWYmTWEUlvgL9wdgcg6LIbwav7yaC7Iv41vYHR0o7
S/l1hgJyfC0C+j4LXAfxH14b/pIWJRJLNZA/OpeHi25gRuWsQGuqeaWXBfmtv6WV
/F/W/jShAj7cQDSwOZo1
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:53 2026 by rpki-client