Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/PYHQqXEPUgbU1yzPth4svmv4qRU.roa
File:                     PYHQqXEPUgbU1yzPth4svmv4qRU.roa (raw, json)
Hash identifier:          01hAtBxYJSyFIwmkc8brwApiiWMpWL79ra64DMKKO2g=
Subject key identifier:   3D:81:D0:A9:71:0F:52:06:D4:D7:2C:CF:B6:1E:2C:BE:6B:F8:A9:15
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       42
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/PYHQqXEPUgbU1yzPth4svmv4qRU.roa
Signing time:             Tue 31 Mar 2026 08:34:36 +0000
ROA not before:           Tue 31 Mar 2026 08:34:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18121
IP address blocks:        180.94.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Mar 31 08:34:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3D81D0A9710F5206D4D72CCFB61E2CBE6BF8A915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:c3:90:0b:d8:2a:44:bc:74:8a:a6:77:07:
                    86:4f:cf:44:cb:b8:81:7d:43:7b:6f:fb:34:1c:85:
                    6b:2c:19:55:64:c2:ad:c1:9a:bf:4f:c0:cb:89:8f:
                    7f:3a:35:59:e8:7f:bc:fc:2e:13:bd:de:be:02:32:
                    6e:77:6f:24:8e:05:02:eb:65:60:19:55:07:f8:1a:
                    c0:05:21:ad:65:a4:bd:e4:8e:94:96:d4:3a:63:ae:
                    ad:90:b9:67:78:a7:66:4c:39:10:5d:dd:3e:73:2b:
                    08:56:e0:60:3c:b7:09:35:ee:10:31:ed:03:c2:c1:
                    d9:05:75:ee:32:15:45:53:a5:d8:92:e4:1f:f0:15:
                    84:2b:37:bf:07:4e:d3:93:75:27:34:31:77:4a:3e:
                    0b:29:67:57:16:77:ba:6b:00:03:63:43:9e:f5:d9:
                    13:53:a9:f3:10:6f:c8:a2:81:5e:00:96:86:11:ff:
                    67:a6:a2:00:db:62:d4:36:61:9d:e3:68:d5:ee:14:
                    6c:6c:50:f2:e9:d3:ca:55:cd:e9:36:98:27:9b:2e:
                    3f:68:3d:d0:c0:bb:d8:fb:bd:26:50:e7:bd:0d:2d:
                    d3:24:90:49:38:d7:2a:31:78:37:52:8b:6f:46:ac:
                    86:98:f9:7a:f0:ff:1a:a2:aa:60:cb:81:74:1e:e7:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:81:D0:A9:71:0F:52:06:D4:D7:2C:CF:B6:1E:2C:BE:6B:F8:A9:15
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/PYHQqXEPUgbU1yzPth4svmv4qRU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:b0:dd:55:85:cc:5f:c5:a9:26:37:f6:9d:61:f6:9a:8d:fd:
         71:e8:24:3f:69:89:96:92:69:3c:45:67:0c:08:40:1b:45:bd:
         5a:ac:3b:14:70:cc:bb:74:94:31:25:99:d3:ec:23:6f:54:65:
         ef:f8:36:bc:2a:a4:99:60:d3:51:29:80:c6:84:6e:e9:b8:27:
         93:7a:da:7c:e1:c8:f7:f1:19:2f:f3:81:f2:88:b1:02:11:e0:
         7c:e4:60:8e:7c:3d:78:3d:73:45:bd:fe:99:e3:81:bb:51:65:
         e6:92:46:0a:bf:f2:53:15:01:b9:1b:3b:c7:60:44:46:53:ca:
         d6:6b:35:80:7b:35:d1:80:cd:2d:91:ff:5f:97:35:bc:38:7b:
         9d:40:04:75:a0:88:63:3f:b2:46:fc:8e:de:ed:ae:88:59:a9:
         ec:5b:c4:00:09:90:45:3e:eb:f5:76:80:5b:b8:67:b6:b9:6f:
         ba:3f:53:0d:56:4a:fc:b0:f7:79:b3:df:4d:42:27:e6:9f:fb:
         5e:e5:c6:38:41:b6:76:5c:93:5d:89:cb:09:17:e0:d7:db:b0:
         ae:ae:ba:3f:b0:db:ae:be:34:c8:92:34:c1:06:07:6b:a6:26:
         2e:2b:ea:ee:8d:d2:c5:86:e9:ea:75:64:02:93:70:e9:8b:fb:
         db:bf:62:cc
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjI4
OEEyMjg1MDI0RTE0OEEyN0U0NUZFNUFDOTBEMjhCMzAzRDRCMB4XDTI2MDMzMTA4
MzQzNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoM0Q4MUQwQTk3MTBGNTIw
NkQ0RDcyQ0NGQjYxRTJDQkU2QkY4QTkxNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALSyw5AL2CpEvHSKpncHhk/PRMu4gX1De2/7NByFaywZVWTCrcGa
v0/Ay4mPfzo1Weh/vPwuE73evgIybndvJI4FAutlYBlVB/gawAUhrWWkveSOlJbU
OmOurZC5Z3inZkw5EF3dPnMrCFbgYDy3CTXuEDHtA8LB2QV17jIVRVOl2JLkH/AV
hCs3vwdO05N1JzQxd0o+CylnVxZ3umsAA2NDnvXZE1Op8xBvyKKBXgCWhhH/Z6ai
ANti1DZhneNo1e4UbGxQ8unTylXN6TaYJ5suP2g90MC72Pu9JlDnvQ0t0ySQSTjX
KjF4N1KLb0ashpj5evD/GqKqYMuBdB7n+pkCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQ9gdCpcQ9SBtTXLM+2Hiy+a/ipFTAfBgNVHSMEGDAWgBQfKIoihQJOFIon5F/l
rJDSizA9SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzEzL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9zd1BVcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9z
d1BVcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC83MTMvUFlIUXFYRVBVZ2JVMXl6UHRoNHN2bXY0cVJVLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLRewDANBgkqhkiG9w0BAQsFAAOCAQEA
mLDdVYXMX8WpJjf2nWH2mo39cegkP2mJlpJpPEVnDAhAG0W9Wqw7FHDMu3SUMSWZ
0+wjb1Rl7/g2vCqkmWDTUSmAxoRu6bgnk3rafOHI9/EZL/OB8oixAhHgfORgjnw9
eD1zRb3+meOBu1Fl5pJGCr/yUxUBuRs7x2BERlPK1ms1gHs10YDNLZH/X5c1vDh7
nUAEdaCIYz+yRvyO3u2uiFmp7FvEAAmQRT7r9XaAW7hntrlvuj9TDVZK/LD3ebPf
TUIn5p/7XuXGOEG2dlyTXYnLCRfg19uwrq66P7Dbrr40yJI0wQYHa6YmLivq7o3S
xYbp6nVkApNw6Yv7279izA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:27 2026 by rpki-client