Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/qEw-t3uNFYV-QsQ4FKWIetu6Amc.roa
File:                     qEw-t3uNFYV-QsQ4FKWIetu6Amc.roa (raw, json)
Hash identifier:          +IDJYJMIX+lPDsOaQObf/IgSUED34GgtmUGEoNvZqUU=
Subject key identifier:   A8:4C:3E:B7:7B:8D:15:85:7E:42:C4:38:14:A5:88:7A:DB:BA:02:67
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0659
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/qEw-t3uNFYV-QsQ4FKWIetu6Amc.roa
Signing time:             Tue 31 Mar 2026 07:27:39 +0000
ROA not before:           Tue 31 Mar 2026 07:27:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        27.98.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A84C3EB77B8D15857E42C43814A5887ADBBA0267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:f2:74:16:de:16:9f:f3:bb:32:51:25:da:
                    cd:ad:a5:f6:48:b9:0d:aa:c1:f1:f6:db:be:44:ce:
                    48:c5:19:e7:90:98:82:d2:7d:2b:08:55:c7:95:f8:
                    ab:61:43:66:80:24:c6:36:13:f4:5d:9e:d5:46:7b:
                    b5:a1:ec:c7:b6:ef:41:0d:fd:a9:06:50:70:2e:40:
                    4f:c0:4d:d8:f4:d3:44:3c:45:ab:cd:2f:f3:6a:82:
                    c4:b2:43:2e:87:fc:01:48:73:e9:24:1f:6a:01:9d:
                    54:0c:c2:4e:a0:a8:c9:19:d7:a8:21:f8:dc:c0:44:
                    ab:6e:bf:01:d0:b4:83:4d:34:6b:63:08:62:df:59:
                    d7:e8:13:13:d8:5e:dd:2e:1d:7d:4d:f0:e5:6b:a8:
                    90:6e:05:98:68:8e:72:9d:05:db:44:33:a1:cc:f3:
                    4b:6b:0f:e4:6d:db:00:21:74:09:1c:cf:79:d3:be:
                    b1:bf:c5:5b:9e:ce:a5:8c:8e:9f:27:67:2b:06:fd:
                    0f:f6:31:06:eb:84:de:ac:d3:68:b5:5d:94:3f:14:
                    15:e8:15:76:ea:16:db:53:a3:a9:cb:af:4c:f3:2a:
                    73:04:05:56:3f:1f:8c:2b:fc:b2:12:6c:87:7a:20:
                    de:ff:be:6f:2a:1e:c5:96:34:2d:65:42:2e:6c:e8:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4C:3E:B7:7B:8D:15:85:7E:42:C4:38:14:A5:88:7A:DB:BA:02:67
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/qEw-t3uNFYV-QsQ4FKWIetu6Amc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.98.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0e:bd:5b:3a:38:14:37:c6:40:72:8d:c4:37:74:e6:72:08:e5:
         90:ec:ac:3e:c7:eb:3a:d3:b9:31:9c:ce:0a:b7:44:aa:a9:30:
         64:ce:45:83:a1:37:53:53:93:59:3f:1d:27:ab:a5:ad:04:82:
         24:6f:d0:44:36:d3:f6:d8:62:f4:7e:aa:f4:40:83:51:f6:4e:
         5e:c2:c0:9a:15:99:ff:25:da:fc:d5:56:5f:33:d4:24:11:ed:
         cc:08:17:f3:52:b9:47:18:fd:ec:2a:e0:1a:12:d4:17:7c:73:
         22:db:5c:a8:e1:7b:5f:10:e6:1a:d4:c4:2e:bd:f9:04:e5:34:
         3f:80:59:07:ca:f8:8c:5b:e4:99:05:72:29:d8:aa:04:88:98:
         9e:51:9a:d8:ca:ca:b9:9a:68:26:50:b4:a6:48:c7:8e:7c:63:
         bd:7d:9b:32:f6:91:d3:fb:4e:53:7d:93:0d:2e:76:6b:57:d2:
         31:21:39:30:f9:34:e5:f9:c0:da:d6:b4:9d:44:91:06:5e:04:
         f6:fd:2c:f5:ca:46:2d:2f:76:9f:46:a1:c4:a0:89:f4:16:3b:
         b8:fd:2f:34:19:f8:40:d2:04:69:e1:21:0e:da:98:43:84:b3:
         5b:c0:3b:d3:74:e2:4f:5d:37:47:49:e6:ef:e6:cc:3b:d8:0a:
         24:06:0a:76
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw
NzI3MzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE4NEMzRUI3N0I4RDE1
ODU3RTQyQzQzODE0QTU4ODdBREJCQTAyNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwyfJ0Ft4Wn/O7MlEl2s2tpfZIuQ2qwfH2275EzkjFGeeQmILS
fSsIVceV+KthQ2aAJMY2E/RdntVGe7Wh7Me270EN/akGUHAuQE/ATdj000Q8RavN
L/NqgsSyQy6H/AFIc+kkH2oBnVQMwk6gqMkZ16gh+NzARKtuvwHQtINNNGtjCGLf
WdfoExPYXt0uHX1N8OVrqJBuBZhojnKdBdtEM6HM80trD+Rt2wAhdAkcz3nTvrG/
xVuezqWMjp8nZysG/Q/2MQbrhN6s02i1XZQ/FBXoFXbqFttTo6nLr0zzKnMEBVY/
H4wr/LISbId6IN7/vm8qHsWWNC1lQi5s6PglAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUqEw+t3uNFYV+QsQ4FKWIetu6AmcwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L3FFdy10M3VORllWLVFzUTRGS1dJZXR1NkFtYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAcbYgAwDQYJKoZIhvcNAQELBQADggEB
AA69Wzo4FDfGQHKNxDd05nII5ZDsrD7H6zrTuTGczgq3RKqpMGTORYOhN1NTk1k/
HSerpa0EgiRv0EQ20/bYYvR+qvRAg1H2Tl7CwJoVmf8l2vzVVl8z1CQR7cwIF/NS
uUcY/ewq4BoS1Bd8cyLbXKjhe18Q5hrUxC69+QTlND+AWQfK+Ixb5JkFcinYqgSI
mJ5RmtjKyrmaaCZQtKZIx458Y719mzL2kdP7TlN9kw0udmtX0jEhOTD5NOX5wNrW
tJ1EkQZeBPb9LPXKRi0vdp9GocSgifQWO7j9LzQZ+EDSBGnhIQ7amEOEs1vAO9N0
4k9dN0dJ5u/mzDvYCiQGCnY=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:37 2026 by rpki-client