Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/TQtqFqeCS8MRCpSs0VUW3GcIT3c.roa
File:                     TQtqFqeCS8MRCpSs0VUW3GcIT3c.roa (raw, json)
Hash identifier:          LHUKCPP7D8l/aNHtAxDUCR8Y8yE5iehB4YAQ6Pj7LKM=
Subject key identifier:   4D:0B:6A:16:A7:82:4B:C3:11:0A:94:AC:D1:55:16:DC:67:08:4F:77
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06BE
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TQtqFqeCS8MRCpSs0VUW3GcIT3c.roa
Signing time:             Tue 31 Mar 2026 07:28:31 +0000
ROA not before:           Tue 31 Mar 2026 07:28:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1726 (0x6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4D0B6A16A7824BC3110A94ACD15516DC67084F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:36:83:77:9d:c2:41:16:19:53:bd:2b:28:
                    7a:41:95:1c:ce:16:13:91:94:ca:3f:f8:20:c5:ae:
                    00:b5:de:f6:77:25:ff:59:81:49:0a:43:48:34:86:
                    5a:59:ad:31:9a:84:56:2a:23:2f:a7:3d:37:26:45:
                    80:ac:04:8c:33:8c:73:13:18:25:51:08:57:59:a4:
                    76:46:b5:02:cd:bd:c0:8f:cb:d4:0b:13:78:c0:d5:
                    6b:88:21:cd:b5:a7:e7:ec:b3:e1:84:11:1d:8b:41:
                    15:26:f8:17:93:76:bf:09:fc:0e:f9:89:b4:67:e8:
                    03:a3:8a:06:94:49:0b:24:c3:07:57:0c:9e:93:bb:
                    8d:71:43:90:93:87:41:01:8a:d9:db:4d:f5:79:9c:
                    29:05:f1:78:37:e7:34:ad:21:35:4a:8a:06:c8:79:
                    ae:1c:69:a2:03:3b:f8:5e:e6:ad:fa:81:10:30:89:
                    ad:4e:45:2e:ef:e5:01:50:6a:c5:8e:e4:57:bb:5e:
                    d0:40:2d:2b:8f:cd:73:e6:b9:1b:d7:e3:34:3d:1c:
                    4f:43:13:fc:f5:4f:dd:a6:4b:64:af:61:31:42:2a:
                    2b:1c:b4:04:ed:42:d8:91:00:ea:4a:7b:4b:16:3f:
                    32:c2:ba:a8:74:00:6b:1f:e7:80:d0:39:02:0e:36:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0B:6A:16:A7:82:4B:C3:11:0A:94:AC:D1:55:16:DC:67:08:4F:77
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TQtqFqeCS8MRCpSs0VUW3GcIT3c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:27:9e:88:19:0f:f4:1e:6c:ce:31:45:08:e1:49:fe:6d:3d:
         b6:7a:a7:8f:cd:13:42:85:00:08:f6:90:44:c6:ab:b2:6d:32:
         86:8d:fe:65:a4:17:27:eb:a5:8e:8a:60:ac:2e:b2:0c:67:bc:
         6d:25:93:f4:07:16:7e:d7:b9:bb:e1:0d:08:89:27:7b:18:6f:
         82:62:e5:05:71:fb:4d:57:13:59:37:eb:7d:53:9a:8e:f2:3d:
         5d:83:ca:d5:00:b1:dc:7d:43:fa:7b:33:ae:74:e7:6d:75:d4:
         50:fe:24:f9:fb:5d:57:db:48:f7:22:8f:aa:06:27:a3:f8:12:
         74:fd:a0:93:39:6a:44:3e:3a:ac:e9:2d:66:54:57:0e:a2:60:
         45:78:a7:e3:12:6b:5e:83:f2:eb:a1:e3:d1:41:82:ed:8f:3c:
         c1:75:60:cb:91:9d:b5:8c:66:f2:4a:35:0d:81:de:97:1e:4b:
         f1:31:91:13:da:70:a2:3d:2c:e9:1e:90:35:b7:5b:b9:52:a9:
         7a:fb:4e:68:92:0e:a6:fb:6d:51:85:20:b0:80:f8:10:74:10:
         2d:d0:fb:17:44:80:d9:3c:1b:d1:cb:43:38:af:42:75:38:34:
         2c:80:8b:d1:a6:50:a7:96:f9:27:73:e4:bb:8d:21:b4:57:bd:
         df:ed:1b:39
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw
NzI4MzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDREMEI2QTE2QTc4MjRC
QzMxMTBBOTRBQ0QxNTUxNkRDNjcwODRGNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdUDaDd53CQRYZU70rKHpBlRzOFhORlMo/+CDFrgC13vZ3Jf9Z
gUkKQ0g0hlpZrTGahFYqIy+nPTcmRYCsBIwzjHMTGCVRCFdZpHZGtQLNvcCPy9QL
E3jA1WuIIc21p+fss+GEER2LQRUm+BeTdr8J/A75ibRn6AOjigaUSQskwwdXDJ6T
u41xQ5CTh0EBitnbTfV5nCkF8Xg35zStITVKigbIea4caaIDO/he5q36gRAwia1O
RS7v5QFQasWO5Fe7XtBALSuPzXPmuRvX4zQ9HE9DE/z1T92mS2SvYTFCKisctATt
QtiRAOpKe0sWPzLCuqh0AGsf54DQOQIONuPPAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUTQtqFqeCS8MRCpSs0VUW3GcIT3cwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L1RRdHFGcWVDUzhNUkNwU3MwVlVXM0djSVQzYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALclLgwDQYJKoZIhvcNAQELBQADggEB
AGgnnogZD/QebM4xRQjhSf5tPbZ6p4/NE0KFAAj2kETGq7JtMoaN/mWkFyfrpY6K
YKwusgxnvG0lk/QHFn7XubvhDQiJJ3sYb4Ji5QVx+01XE1k3631Tmo7yPV2DytUA
sdx9Q/p7M65052111FD+JPn7XVfbSPcij6oGJ6P4EnT9oJM5akQ+OqzpLWZUVw6i
YEV4p+MSa16D8uuh49FBgu2PPMF1YMuRnbWMZvJKNQ2B3pceS/ExkRPacKI9LOke
kDW3W7lSqXr7TmiSDqb7bVGFILCA+BB0EC3Q+xdEgNk8G9HLQzivQnU4NCyAi9Gm
UKeW+Sdz5LuNIbRXvd/tGzk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:23 2026 by rpki-client