Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/XoudkGeuBKBSHFpVFze6JS7wN5o.roa
File:                     XoudkGeuBKBSHFpVFze6JS7wN5o.roa (raw, json)
Hash identifier:          HP2CtU5Jtxog+xyb5oONJ1VWtVTgDgnlCeQgOFTZCmk=
Subject key identifier:   5E:8B:9D:90:67:AE:04:A0:52:1C:5A:55:17:37:BA:25:2E:F0:37:9A
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       67
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/XoudkGeuBKBSHFpVFze6JS7wN5o.roa
Signing time:             Tue 31 Mar 2026 08:31:41 +0000
ROA not before:           Tue 31 Mar 2026 08:31:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24257
IP address blocks:        202.90.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Mar 31 08:31:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5E8B9D9067AE04A0521C5A551737BA252EF0379A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:06:5f:23:62:f2:b8:7e:34:0b:13:35:8b:
                    5b:47:63:12:c4:8c:67:b5:ac:d3:0d:56:5e:f6:a4:
                    72:c3:c3:73:10:8a:8b:1e:10:c9:ac:ac:95:93:60:
                    c7:7f:2e:c5:52:24:6f:04:96:50:c6:f3:94:fb:08:
                    b8:79:42:84:8a:92:f8:67:dc:b5:90:5a:4d:bb:14:
                    f5:b2:a2:fa:72:d9:dd:9c:ba:d6:85:fc:1b:9a:e4:
                    46:12:7b:c3:20:b1:99:53:61:56:56:40:08:2d:82:
                    a3:3e:bb:0f:e8:42:6c:8a:3c:31:72:0b:9c:a1:6b:
                    6c:9d:01:50:62:c0:c7:0c:4f:43:d4:57:cf:b8:cd:
                    6b:6e:6c:c0:5f:80:42:bf:ab:42:a8:c5:f3:b4:cf:
                    aa:69:0e:e5:24:22:e0:27:9b:cc:9e:6a:22:00:e9:
                    a7:d3:b0:ed:c1:e1:32:88:bf:2f:bb:e0:3f:5a:b3:
                    15:51:1e:5a:6f:60:8a:8c:50:50:21:2c:a3:72:c9:
                    f4:b0:c3:42:ec:e6:40:60:7f:e9:f8:06:20:67:22:
                    5c:78:5e:73:f4:3e:11:64:c0:f4:e7:48:d6:0b:f2:
                    e9:fe:8f:dc:64:b1:a9:ca:8f:a9:cb:7a:12:2d:82:
                    3d:fd:90:46:c1:46:c3:46:21:a2:f9:4f:25:6f:3b:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:9D:90:67:AE:04:A0:52:1C:5A:55:17:37:BA:25:2E:F0:37:9A
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/XoudkGeuBKBSHFpVFze6JS7wN5o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.90.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:47:2e:9e:a9:d7:26:cc:2c:6a:a2:19:81:2a:77:c8:ba:3d:
         af:6b:65:42:5e:ee:95:07:16:79:fc:f2:33:7c:cb:e2:aa:98:
         9d:75:c5:9e:99:39:2a:95:91:ee:8f:ca:a2:e5:ad:04:22:94:
         b1:b5:49:d3:0e:df:32:88:47:73:3d:ad:58:7f:34:63:b5:97:
         31:df:45:6a:d8:ea:90:36:e1:01:ec:0a:29:04:e2:89:d7:68:
         da:17:0e:79:70:e7:68:58:d0:78:c6:4d:ff:7b:21:3f:38:91:
         6d:e0:c3:d7:71:96:6b:76:d7:ce:f0:38:5c:a4:18:56:07:f5:
         ce:8a:fe:87:9e:6a:f7:02:75:2d:f1:c4:07:a7:18:5c:21:e7:
         54:3b:45:73:26:0a:02:f4:71:b7:c0:76:a3:c5:11:c3:9a:a2:
         3d:c6:e7:f4:4e:55:f9:5d:d0:21:ce:b3:45:d9:2c:ae:c6:d2:
         83:13:89:3d:26:e5:19:43:20:9f:0d:21:87:82:a2:fa:43:c2:
         cb:3f:92:7b:1f:57:8b:3d:2d:dc:a8:9d:cb:b0:8e:7a:87:eb:
         94:ae:93:2d:78:12:d6:f6:39:e6:3f:0a:be:71:5a:98:37:7e:
         30:e9:a1:29:bc:48:83:02:e9:6f:d8:a9:17:03:2f:aa:6a:9b:
         2a:82:8c:10
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTEz
QUNDRjdFNzdCMDI5MkFFMTdCMDUzNDAyMTFDOEY5NzE3NjBCMB4XDTI2MDMzMTA4
MzE0MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNUU4QjlEOTA2N0FFMDRB
MDUyMUM1QTU1MTczN0JBMjUyRUYwMzc5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMNvBl8jYvK4fjQLEzWLW0djEsSMZ7Ws0w1WXvakcsPDcxCKix4Q
yayslZNgx38uxVIkbwSWUMbzlPsIuHlChIqS+GfctZBaTbsU9bKi+nLZ3Zy61oX8
G5rkRhJ7wyCxmVNhVlZACC2Coz67D+hCbIo8MXILnKFrbJ0BUGLAxwxPQ9RXz7jN
a25swF+AQr+rQqjF87TPqmkO5SQi4CebzJ5qIgDpp9Ow7cHhMoi/L7vgP1qzFVEe
Wm9gioxQUCEso3LJ9LDDQuzmQGB/6fgGIGciXHhec/Q+EWTA9OdI1gvy6f6P3GSx
qcqPqct6Ei2CPf2QRsFGw0YhovlPJW87vGMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRei52QZ64EoFIcWlUXN7olLvA3mjAfBgNVHSMEGDAWgBTuE6zPfnewKSrhewU0
AhHI+XF2CzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTI0LzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBseGRncy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBs
eGRncy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MjQvWG91ZGtHZXVCS0JTSEZwVkZ6ZTZKUzd3TjVvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpaDDANBgkqhkiG9w0BAQsFAAOCAQEA
Q0cunqnXJswsaqIZgSp3yLo9r2tlQl7ulQcWefzyM3zL4qqYnXXFnpk5KpWR7o/K
ouWtBCKUsbVJ0w7fMohHcz2tWH80Y7WXMd9FatjqkDbhAewKKQTiiddo2hcOeXDn
aFjQeMZN/3shPziRbeDD13GWa3bXzvA4XKQYVgf1zor+h55q9wJ1LfHEB6cYXCHn
VDtFcyYKAvRxt8B2o8URw5qiPcbn9E5V+V3QIc6zRdksrsbSgxOJPSblGUMgnw0h
h4Ki+kPCyz+Sex9Xiz0t3Kidy7COeofrlK6TLXgS1vY55j8KvnFamDd+MOmhKbxI
gwLpb9ipFwMvqmqbKoKMEA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:49 2026 by rpki-client