Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/WQp3KdeQf9T4PXnNCdmQQMEsN-w.roa
File:                     WQp3KdeQf9T4PXnNCdmQQMEsN-w.roa (raw, json)
Hash identifier:          KQr2lUVZBiP9RpFx9l6bbnUM7WXaFHSDEx/kDKOiUhc=
Subject key identifier:   59:0A:77:29:D7:90:7F:D4:F8:3D:79:CD:09:D9:90:40:C1:2C:37:EC
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       43
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/WQp3KdeQf9T4PXnNCdmQQMEsN-w.roa
Signing time:             Tue 31 Mar 2026 08:34:36 +0000
ROA not before:           Tue 31 Mar 2026 08:34:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18121
IP address blocks:        202.222.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Mar 31 08:34:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=590A7729D7907FD4F83D79CD09D99040C12C37EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:eb:9a:4c:67:66:57:bb:6c:b4:d4:24:9a:
                    60:0e:97:4b:cb:d2:ec:c3:44:7b:80:48:68:1b:9d:
                    31:62:55:6f:80:51:cc:83:b9:53:09:fb:1f:e5:af:
                    2e:9e:d2:1f:79:3f:35:06:05:fd:de:22:97:8e:ca:
                    47:ee:fa:19:2b:4f:07:26:a8:de:7e:4a:f6:d0:5f:
                    5d:d8:18:b9:43:a0:71:26:f2:04:6a:9d:b1:6a:8d:
                    d0:da:0f:95:4c:9f:33:71:82:0a:b6:03:c2:4b:fb:
                    6d:50:ab:10:b5:b8:bf:2e:c7:12:a6:bf:b1:80:00:
                    25:80:9b:ac:cc:3d:78:a7:ee:8b:c6:d2:4b:ff:f3:
                    6c:9e:6b:52:a2:21:cc:9b:7f:ad:31:5c:41:a4:81:
                    17:a5:c8:e5:17:4c:32:b9:8c:2e:ee:30:74:b9:07:
                    60:94:a7:e1:f8:c6:98:36:4f:23:c3:a4:ec:5b:d5:
                    a1:86:2c:ab:6b:d3:32:62:29:99:06:ec:98:34:a7:
                    6f:96:86:62:63:59:c1:71:c0:78:33:3b:09:dc:2e:
                    8b:a2:88:0c:69:be:c1:b7:aa:74:6a:9f:91:d6:f5:
                    06:24:38:d7:a4:ec:2a:fb:6d:4c:30:51:8c:df:fa:
                    d6:7a:01:4c:2c:ae:46:ff:c3:b9:8f:c6:5d:e4:2f:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0A:77:29:D7:90:7F:D4:F8:3D:79:CD:09:D9:90:40:C1:2C:37:EC
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/WQp3KdeQf9T4PXnNCdmQQMEsN-w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.222.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:ba:a9:1b:06:db:0a:a3:ff:e3:4f:7c:d6:4a:65:92:1e:
         f3:c5:de:fc:da:1d:12:04:24:5d:4b:a4:78:21:73:38:90:72:
         b1:79:26:b6:42:ee:96:3b:80:95:c9:a6:62:7e:80:bc:ce:5a:
         81:be:1a:74:8a:6b:91:8b:75:84:1d:d4:57:cd:c1:1f:53:3f:
         ac:45:bc:bd:81:ba:2d:3d:08:09:f5:eb:81:74:2b:e3:55:f9:
         91:c0:ef:42:8b:61:56:4e:b9:ea:fe:1a:5e:6a:70:43:76:34:
         69:84:30:d6:23:41:36:0b:42:d2:64:db:9f:d9:c1:55:d8:b3:
         c5:fa:36:7b:80:fd:8f:8b:7f:e7:1e:8d:47:d4:8a:ec:48:89:
         2f:af:41:ab:92:a5:73:d9:bc:6b:d9:70:8a:32:42:76:be:cf:
         22:58:c0:bc:17:20:92:52:76:7c:78:c5:a6:8a:74:bc:cc:66:
         06:82:96:58:48:ff:8e:2a:5e:96:18:39:18:69:ed:6e:ae:03:
         0b:5d:d6:85:df:24:a8:f4:d4:fa:53:29:ba:cd:b8:52:f2:81:
         c4:e4:28:b2:34:18:7b:7f:b2:a4:e9:69:30:25:03:36:b0:f7:
         4c:d0:d8:ca:af:83:11:d9:08:5a:91:14:4a:60:58:81:a7:26:
         cb:9c:f4:01
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjI4
OEEyMjg1MDI0RTE0OEEyN0U0NUZFNUFDOTBEMjhCMzAzRDRCMB4XDTI2MDMzMTA4
MzQzNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTkwQTc3MjlENzkwN0ZE
NEY4M0Q3OUNEMDlEOTkwNDBDMTJDMzdFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL4165pMZ2ZXu2y01CSaYA6XS8vS7MNEe4BIaBudMWJVb4BRzIO5
Uwn7H+WvLp7SH3k/NQYF/d4il47KR+76GStPByao3n5K9tBfXdgYuUOgcSbyBGqd
sWqN0NoPlUyfM3GCCrYDwkv7bVCrELW4vy7HEqa/sYAAJYCbrMw9eKfui8bSS//z
bJ5rUqIhzJt/rTFcQaSBF6XI5RdMMrmMLu4wdLkHYJSn4fjGmDZPI8Ok7FvVoYYs
q2vTMmIpmQbsmDSnb5aGYmNZwXHAeDM7Cdwui6KIDGm+wbeqdGqfkdb1BiQ416Ts
KvttTDBRjN/61noBTCyuRv/DuY/GXeQvm+MCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRZCncp15B/1Pg9ec0J2ZBAwSw37DAfBgNVHSMEGDAWgBQfKIoihQJOFIon5F/l
rJDSizA9SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzEzL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9zd1BVcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9z
d1BVcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC83MTMvV1FwM0tkZVFmOVQ0UFhuTkNkbVFRTUVzTi13LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcreIDANBgkqhkiG9w0BAQsFAAOCAQEA
HWW6qRsG2wqj/+NPfNZKZZIe88Xe/NodEgQkXUukeCFzOJBysXkmtkLuljuAlcmm
Yn6AvM5agb4adIprkYt1hB3UV83BH1M/rEW8vYG6LT0ICfXrgXQr41X5kcDvQoth
Vk656v4aXmpwQ3Y0aYQw1iNBNgtC0mTbn9nBVdizxfo2e4D9j4t/5x6NR9SK7EiJ
L69Bq5Klc9m8a9lwijJCdr7PIljAvBcgklJ2fHjFpop0vMxmBoKWWEj/jipelhg5
GGntbq4DC13Whd8kqPTU+lMpus24UvKBxOQosjQYe3+ypOlpMCUDNrD3TNDYyq+D
EdkIWpEUSmBYgacmy5z0AQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:18:14 2026 by rpki-client