Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/620/hQxqDHdPhpupbI15xi_9q5b8aRo.roa
File:                     hQxqDHdPhpupbI15xi_9q5b8aRo.roa (raw, json)
Hash identifier:          XEPENZpZFQ+o6nCh3h0c5G/1LRZhC40oAvwFYyV1onc=
Subject key identifier:   85:0C:6A:0C:77:4F:86:9B:A9:6C:8D:79:C6:2F:FD:AB:96:FC:69:1A
Certificate issuer:       /CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
Certificate serial:       0B
Authority key identifier: 7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/hQxqDHdPhpupbI15xi_9q5b8aRo.roa
Signing time:             Fri 18 Sep 2026 06:05:43 +0000
ROA not before:           Fri 18 Sep 2026 06:05:43 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     0
IP address blocks:        203.129.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
        Validity
            Not Before: Sep 18 06:05:43 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=850C6A0C774F869BA96C8D79C62FFDAB96FC691A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:ae:71:bc:84:49:ce:f7:04:66:94:da:ff:
                    13:f4:5b:e0:c6:f8:2e:6f:75:99:50:c5:83:f6:3d:
                    bb:85:91:31:e4:c6:55:9d:65:12:73:9a:6d:bf:f1:
                    96:92:09:c7:c8:ea:a6:4b:76:94:92:61:75:89:1a:
                    cb:f1:1a:79:bf:e4:02:6b:f9:d2:29:8a:0e:36:81:
                    6d:af:e9:c0:e5:78:8c:58:65:65:f4:c6:86:76:50:
                    15:2d:69:64:8c:4c:78:e7:89:32:59:c5:10:6a:40:
                    0c:c3:93:e6:c4:7d:03:e7:ee:b4:80:59:bb:e4:90:
                    5e:23:dc:ec:42:3b:cb:6d:07:f9:c6:4f:3b:1a:a9:
                    18:72:c0:33:b2:64:7c:f3:23:11:9d:c9:19:3d:72:
                    d2:0f:90:96:f3:8d:f0:03:cf:1e:47:23:1c:3f:07:
                    4a:10:43:98:77:84:6e:1b:7d:99:95:61:62:6b:b4:
                    68:c8:07:7a:69:69:ab:43:0f:2c:a7:11:6f:9e:b9:
                    0b:da:33:8d:bd:cf:49:d2:b6:10:fa:b0:9c:26:0c:
                    4b:20:f3:1c:c6:14:e3:ba:bc:f1:a9:e9:e1:30:11:
                    57:be:66:30:0d:d1:32:90:7c:48:5f:98:af:8a:48:
                    53:c2:d9:e0:4a:fa:65:f6:30:32:76:ed:fb:d2:cf:
                    39:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0C:6A:0C:77:4F:86:9B:A9:6C:8D:79:C6:2F:FD:AB:96:FC:69:1A
            X509v3 Authority Key Identifier:
                keyid:7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/hQxqDHdPhpupbI15xi_9q5b8aRo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:b4:bf:13:6c:64:9c:1e:b1:89:46:9a:bd:71:f0:25:f5:01:
         55:c4:30:b0:24:a2:12:ac:a9:5a:b4:af:20:ae:36:d2:41:f6:
         b4:47:ef:a1:56:05:6b:90:72:5e:bb:f1:36:e5:ab:19:19:d7:
         48:fe:7d:af:61:cf:21:d9:32:d3:ee:96:9d:fa:18:78:ae:9d:
         71:c0:19:ae:27:34:6c:2b:19:47:93:ff:10:aa:67:1e:f0:11:
         97:ce:ac:b5:55:f8:de:84:8e:ed:e9:22:4f:8f:ee:33:35:bf:
         b1:73:62:6b:14:d2:4b:f1:a1:57:9b:42:d9:9f:21:ec:12:5c:
         7e:7e:36:17:d8:b7:3a:b7:bd:0c:4c:b9:7a:e8:01:86:23:f9:
         81:60:00:55:07:f7:8e:c5:16:47:c6:b1:fd:52:25:64:75:73:
         32:17:75:e4:87:c0:1f:83:38:7a:0e:c1:28:1f:cd:3d:0a:06:
         c2:73:8d:49:12:40:5e:35:1e:31:9c:e1:a1:78:c7:b4:97:bd:
         ad:ec:7a:e2:bf:48:d1:cc:3b:d7:e0:91:53:6f:82:40:ad:ea:
         a7:bc:2f:6b:64:30:9a:b8:d0:ab:07:b0:d9:35:cc:0f:40:ed:
         31:4c:e1:72:40:8a:4e:43:9b:9a:0b:45:8e:f7:f7:4e:94:71:
         64:d8:34:9c
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QTdC
MTYyQzExRTc0RUJGOEQ2QjQ5MTRENjcxQ0QyOUJBOTlBOUI5MB4XDTI2MDkxODA2
MDU0M1oXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoODUwQzZBMEM3NzRGODY5
QkE5NkM4RDc5QzYyRkZEQUI5NkZDNjkxQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANi3rnG8hEnO9wRmlNr/E/Rb4Mb4Lm91mVDFg/Y9u4WRMeTGVZ1l
EnOabb/xlpIJx8jqpkt2lJJhdYkay/Eaeb/kAmv50imKDjaBba/pwOV4jFhlZfTG
hnZQFS1pZIxMeOeJMlnFEGpADMOT5sR9A+futIBZu+SQXiPc7EI7y20H+cZPOxqp
GHLAM7JkfPMjEZ3JGT1y0g+QlvON8APPHkcjHD8HShBDmHeEbht9mZVhYmu0aMgH
emlpq0MPLKcRb565C9ozjb3PSdK2EPqwnCYMSyDzHMYU47q88anp4TARV75mMA3R
MpB8SF+Yr4pIU8LZ4Er6ZfYwMnbt+9LPOXUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSFDGoMd0+Gm6lsjXnGL/2rlvxpGjAfBgNVHSMEGDAWgBR6exYsEedOv41rSRTW
cc0pupmpuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjIwL2Vuc1dMQkhuVHItTmEwa1UxbkhOS2JxWnFiay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2Vuc1dMQkhuVHItTmEwa1UxbkhOS2Jx
WnFiay5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82MjAvaFF4cURIZFBocHVwYkkxNXhpXzlxNWI4YVJvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcuBoDANBgkqhkiG9w0BAQsFAAOCAQEA
FrS/E2xknB6xiUaavXHwJfUBVcQwsCSiEqypWrSvIK420kH2tEfvoVYFa5ByXrvx
NuWrGRnXSP59r2HPIdky0+6WnfoYeK6dccAZric0bCsZR5P/EKpnHvARl86stVX4
3oSO7ekiT4/uMzW/sXNiaxTSS/GhV5tC2Z8h7BJcfn42F9i3Ore9DEy5eugBhiP5
gWAAVQf3jsUWR8ax/VIlZHVzMhd15IfAH4M4eg7BKB/NPQoGwnONSRJAXjUeMZzh
oXjHtJe9rex64r9I0cw71+CRU2+CQK3qp7wva2QwmrjQqwew2TXMD0DtMUzhckCK
TkObmgtFjvf3TpRxZNg0nA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:19 2026 by rpki-client