Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/L7Ib9BBzNRa0urT-MNxIWMljIgw.roa
File:                     L7Ib9BBzNRa0urT-MNxIWMljIgw.roa (raw, json)
Hash identifier:          UtpuCxPQTuw8R2/nwyw7WFStmOpCFh7l1tS0qDocf+E=
Subject key identifier:   2F:B2:1B:F4:10:73:35:16:B4:BA:B4:FE:30:DC:48:58:C9:63:22:0C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06B8
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/L7Ib9BBzNRa0urT-MNxIWMljIgw.roa
Signing time:             Tue 31 Mar 2026 07:28:28 +0000
ROA not before:           Tue 31 Mar 2026 07:28:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        211.7.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720 (0x6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2FB21BF410733516B4BAB4FE30DC4858C963220C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:f5:f8:92:0b:cf:b0:e9:2c:89:b7:9e:ae:
                    a9:2e:b3:80:4e:67:02:46:67:d4:8b:38:ff:90:24:
                    a5:40:2a:22:97:43:3c:4c:17:bb:42:17:60:06:5c:
                    92:1b:28:53:2f:6a:e0:47:e9:79:f5:71:7b:65:4c:
                    fe:e7:34:58:1d:ce:b9:b4:95:d6:33:cf:7a:ee:47:
                    9d:60:48:bb:e4:3a:49:a5:e9:21:df:c3:5c:15:33:
                    2e:e7:d0:88:e5:6d:82:72:44:ae:a0:4a:04:1c:40:
                    2e:63:4d:3b:66:e3:06:8f:93:40:20:d2:3c:5e:d9:
                    56:8b:96:79:25:2b:65:5a:61:17:55:73:76:f4:14:
                    e1:65:37:9b:94:1b:c6:ff:a8:55:06:1b:7f:92:7e:
                    19:86:f5:9a:10:1c:21:57:29:e6:7c:e5:9c:bc:60:
                    fa:4c:7b:ee:6a:cf:12:30:31:e5:b4:d9:02:2b:4c:
                    ac:7d:44:f4:74:72:1a:0d:87:ca:53:70:29:22:ec:
                    05:f1:fe:3d:70:2b:a7:85:14:2f:5a:83:5d:e2:53:
                    ba:09:af:82:a8:39:dd:c9:0b:81:fa:1f:0f:36:c7:
                    9e:17:c0:02:6f:a3:26:f9:9e:68:b4:53:a4:9c:8f:
                    3a:52:71:a6:27:e9:90:05:a5:83:39:49:00:34:82:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B2:1B:F4:10:73:35:16:B4:BA:B4:FE:30:DC:48:58:C9:63:22:0C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/L7Ib9BBzNRa0urT-MNxIWMljIgw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:66:f4:8c:dd:d2:d5:2f:f5:c7:8d:7e:e4:d3:74:32:4d:5f:
         28:c5:f1:a5:19:61:1f:ec:fe:1d:9a:28:b5:5d:39:2d:a0:96:
         63:af:db:b0:f8:b7:69:5b:55:eb:bb:cd:63:b2:8b:96:70:47:
         e2:76:8e:a4:f9:7d:05:c4:a6:8b:ef:3b:de:0c:0c:93:c2:08:
         7f:10:aa:a3:b8:5d:9f:69:d1:af:7f:b8:dc:6b:c7:da:0c:9f:
         ba:a4:9a:9a:46:8c:8a:33:b0:42:04:ac:b3:c8:63:1f:0d:30:
         f9:73:8b:7f:14:d0:45:73:df:2b:bf:43:f9:22:a8:32:4b:f9:
         75:5d:c8:41:df:ae:c3:36:9e:e9:c9:f0:b1:f4:0f:f9:ea:c8:
         e5:16:18:11:7d:85:6f:15:c4:17:ab:69:57:37:af:3b:bf:8f:
         d8:5a:d2:e9:e7:3a:ba:df:ae:e6:8c:b1:14:02:8e:37:a8:78:
         c0:79:da:c8:e8:a6:84:c9:8c:92:d1:70:39:b1:ee:2c:07:5d:
         7d:03:c4:64:5b:5c:00:25:f6:b1:6e:d4:82:88:9a:88:b1:ed:
         73:ee:66:fb:b2:25:64:35:03:c3:6a:81:be:50:d8:97:99:1a:
         59:e7:39:19:f1:44:a7:58:bd:28:60:a5:55:cc:07:d0:cc:0f:
         4b:a8:8a:dd
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw
NzI4MjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJGQjIxQkY0MTA3MzM1
MTZCNEJBQjRGRTMwREM0ODU4Qzk2MzIyMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkb/X4kgvPsOksibeerqkus4BOZwJGZ9SLOP+QJKVAKiKXQzxM
F7tCF2AGXJIbKFMvauBH6Xn1cXtlTP7nNFgdzrm0ldYzz3ruR51gSLvkOkml6SHf
w1wVMy7n0IjlbYJyRK6gSgQcQC5jTTtm4waPk0Ag0jxe2VaLlnklK2VaYRdVc3b0
FOFlN5uUG8b/qFUGG3+SfhmG9ZoQHCFXKeZ85Zy8YPpMe+5qzxIwMeW02QIrTKx9
RPR0choNh8pTcCki7AXx/j1wK6eFFC9ag13iU7oJr4KoOd3JC4H6Hw82x54XwAJv
oyb5nmi0U6ScjzpScaYn6ZAFpYM5SQA0gmqrAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUL7Ib9BBzNRa0urT+MNxIWMljIgwwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L0w3SWI5QkJ6TlJhMHVyVC1NTnhJV01saklndy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXTB0AwDQYJKoZIhvcNAQELBQADggEB
ACZm9Izd0tUv9ceNfuTTdDJNXyjF8aUZYR/s/h2aKLVdOS2glmOv27D4t2lbVeu7
zWOyi5ZwR+J2jqT5fQXEpovvO94MDJPCCH8QqqO4XZ9p0a9/uNxrx9oMn7qkmppG
jIozsEIErLPIYx8NMPlzi38U0EVz3yu/Q/kiqDJL+XVdyEHfrsM2nunJ8LH0D/nq
yOUWGBF9hW8VxBeraVc3rzu/j9ha0unnOrrfruaMsRQCjjeoeMB52sjopoTJjJLR
cDmx7iwHXX0DxGRbXAAl9rFu1IKImoix7XPuZvuyJWQ1A8Nqgb5Q2JeZGlnnORnx
RKdYvShgpVXMB9DMD0uoit0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:58 2026 by rpki-client