Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/utnwPMyZumJSx86QMLfs18pqhG8.roa
File:                     utnwPMyZumJSx86QMLfs18pqhG8.roa (raw, json)
Hash identifier:          eHtvvYGTSI6fxCpkzmckIahvrwBVXo7oncqjSmKOCX0=
Subject key identifier:   BA:D9:F0:3C:CC:99:BA:62:52:C7:CE:90:30:B7:EC:D7:CA:6A:84:6F
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0670
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/utnwPMyZumJSx86QMLfs18pqhG8.roa
Signing time:             Tue 31 Mar 2026 07:27:51 +0000
ROA not before:           Tue 31 Mar 2026 07:27:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648 (0x670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BAD9F03CCC99BA6252C7CE9030B7ECD7CA6A846F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:99:cd:ef:52:64:c0:89:da:20:29:70:86:
                    6f:99:b3:c1:4d:94:c8:01:5a:1b:9e:0a:41:fd:0a:
                    39:34:50:44:20:3b:f8:a1:8c:48:1f:c8:b8:11:f3:
                    80:aa:40:a8:22:7d:45:f2:4f:da:4b:52:e1:10:e8:
                    44:f4:27:77:92:09:75:c1:49:cd:e4:ea:af:19:0f:
                    47:6e:f5:ef:8e:47:c3:34:9b:ea:fe:88:27:b5:45:
                    61:e6:ea:da:13:ca:bc:4a:5a:a5:eb:ba:52:03:84:
                    d1:00:e2:77:af:cf:7f:0f:6e:1d:22:1a:7e:4f:18:
                    2d:e0:d7:be:d4:98:2c:a7:fb:e9:59:91:6f:7f:27:
                    f4:30:6c:0b:e9:1f:55:70:6a:bf:0c:fc:c7:f4:9e:
                    53:c9:74:63:f6:1a:86:e1:91:60:52:e2:5b:4b:aa:
                    ea:0d:ca:b3:07:b8:85:1f:c1:9e:d9:fa:8d:3a:7a:
                    33:a2:cd:43:64:1d:c9:0e:52:58:a2:a4:ec:2a:12:
                    5f:ed:da:9f:75:32:de:47:ea:60:a3:d6:2f:18:de:
                    00:5c:01:5c:53:f2:a2:d7:e3:24:37:6e:2e:8b:fa:
                    aa:fa:11:4a:c7:81:7e:c7:cf:52:f7:29:d0:a6:1a:
                    64:15:a5:7a:67:06:09:65:6d:ed:e5:4a:0c:be:69:
                    b0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D9:F0:3C:CC:99:BA:62:52:C7:CE:90:30:B7:EC:D7:CA:6A:84:6F
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/utnwPMyZumJSx86QMLfs18pqhG8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:81:ee:a7:20:f4:39:d2:29:4b:28:14:1a:29:0d:4c:4a:2d:
         0b:27:83:cc:48:62:d3:0d:60:fb:7a:6d:10:c3:06:4e:b6:be:
         d5:22:1c:fd:c8:a9:56:a7:d9:09:e2:0c:f7:72:c8:e0:59:0a:
         9c:92:60:36:8e:92:76:a0:69:73:a3:34:a1:1d:4e:b4:98:b1:
         2e:5e:4b:10:dc:c0:27:84:ae:ad:4c:03:73:6c:44:e4:c5:c9:
         c3:df:af:73:4d:e6:88:c3:4e:ac:e7:60:58:48:ed:04:94:c3:
         5a:bf:9e:13:a8:34:37:89:f6:57:19:6b:59:4a:a4:77:89:09:
         7f:cc:14:95:94:90:d1:c7:5e:d4:85:db:6d:8a:df:fd:2b:05:
         b3:dc:df:76:f7:5f:f6:b0:b1:95:f9:ef:fd:4b:1d:cf:0c:12:
         92:f7:5e:5c:e7:b6:81:e5:06:10:9f:fa:ae:2c:3d:53:58:0b:
         85:58:6c:a9:6a:9e:a8:91:ae:0e:a9:29:6c:80:0d:55:db:34:
         27:2a:4b:1b:95:14:e3:37:c7:77:ca:b7:9e:3f:ce:1d:94:d1:
         0c:dd:9a:74:70:7b:a7:d2:46:00:53:21:65:0d:db:d9:8f:24:
         48:37:45:c5:11:ea:e0:9b:33:3f:cd:1c:20:2b:64:79:a5:a0:
         f6:b9:43:5f
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw
NzI3NTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJBRDlGMDNDQ0M5OUJB
NjI1MkM3Q0U5MDMwQjdFQ0Q3Q0E2QTg0NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4hZnN71JkwInaIClwhm+Zs8FNlMgBWhueCkH9Cjk0UEQgO/ih
jEgfyLgR84CqQKgifUXyT9pLUuEQ6ET0J3eSCXXBSc3k6q8ZD0du9e+OR8M0m+r+
iCe1RWHm6toTyrxKWqXrulIDhNEA4nevz38Pbh0iGn5PGC3g177UmCyn++lZkW9/
J/QwbAvpH1Vwar8M/Mf0nlPJdGP2GobhkWBS4ltLquoNyrMHuIUfwZ7Z+o06ejOi
zUNkHckOUliipOwqEl/t2p91Mt5H6mCj1i8Y3gBcAVxT8qLX4yQ3bi6L+qr6EUrH
gX7Hz1L3KdCmGmQVpXpnBgllbe3lSgy+abC/AgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUutnwPMyZumJSx86QMLfs18pqhG8wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L3V0bndQTXladW1KU3g4NlFNTGZzMThwcWhHOC5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDclDANBgkqhkiG9w0BAQsFAAOCAQEA
moHupyD0OdIpSygUGikNTEotCyeDzEhi0w1g+3ptEMMGTra+1SIc/cipVqfZCeIM
93LI4FkKnJJgNo6SdqBpc6M0oR1OtJixLl5LENzAJ4SurUwDc2xE5MXJw9+vc03m
iMNOrOdgWEjtBJTDWr+eE6g0N4n2VxlrWUqkd4kJf8wUlZSQ0cde1IXbbYrf/SsF
s9zfdvdf9rCxlfnv/UsdzwwSkvdeXOe2geUGEJ/6riw9U1gLhVhsqWqeqJGuDqkp
bIANVds0JypLG5UU4zfHd8q3nj/OHZTRDN2adHB7p9JGAFMhZQ3b2Y8kSDdFxRHq
4JszP80cICtkeaWg9rlDXw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:32:53 2026 by rpki-client