Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/y-dp2Vmnijdc-hgdXScbm5LJCYE.roa
File:                     y-dp2Vmnijdc-hgdXScbm5LJCYE.roa (raw, json)
Hash identifier:          ktIeF0aQNwF0entVJ8PcsnqErwVFsu0octuG37c/pm8=
Subject key identifier:   CB:E7:69:D9:59:A7:8A:37:5C:FA:18:1D:5D:27:1B:9B:92:C9:09:81
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       45
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/y-dp2Vmnijdc-hgdXScbm5LJCYE.roa
Signing time:             Tue 31 Mar 2026 08:34:37 +0000
ROA not before:           Tue 31 Mar 2026 08:34:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        219.121.249.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Mar 31 08:34:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CBE769D959A78A375CFA181D5D271B9B92C90981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:7f:bd:a9:9f:0e:9a:39:a6:b1:c3:49:67:
                    7c:d1:6b:40:7b:c6:9c:b7:69:63:6b:6f:94:41:02:
                    71:90:ce:9c:ac:1d:97:91:ab:6a:78:6f:07:f3:99:
                    cd:09:7f:3f:56:8a:28:11:77:25:5e:5b:7e:2b:7e:
                    dd:8f:bd:57:a1:e0:1b:3f:d8:27:f5:7c:4a:43:23:
                    02:60:15:be:24:d0:7a:5f:c6:ed:63:5c:22:a3:f5:
                    8f:71:46:df:62:47:e0:8b:6e:58:cd:18:c7:8b:62:
                    ab:b4:11:40:2b:d8:5c:c0:d7:45:fe:d0:a4:4d:b6:
                    5b:49:78:17:c9:1d:67:59:77:7f:db:4d:2c:7c:be:
                    2c:6a:42:99:c3:79:81:d4:f4:6f:29:b9:b6:72:82:
                    7c:99:69:63:41:ec:e9:fb:6f:12:89:1a:22:5e:36:
                    7c:c9:82:46:46:cf:49:f8:0e:f8:05:c3:dd:53:aa:
                    6f:cf:38:ee:52:13:ce:bb:ed:52:6e:3c:e2:ca:c2:
                    ca:37:c7:77:03:55:6d:86:43:23:62:21:58:b5:16:
                    f5:4b:c9:d6:b8:b5:a0:06:2f:62:0a:e6:57:a9:2f:
                    0b:3a:68:08:51:78:62:d1:03:7c:d1:41:0a:ea:b3:
                    9f:27:f2:53:09:1b:30:f5:cc:2d:6c:e2:51:3f:76:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E7:69:D9:59:A7:8A:37:5C:FA:18:1D:5D:27:1B:9B:92:C9:09:81
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/y-dp2Vmnijdc-hgdXScbm5LJCYE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:a4:f3:51:0e:80:6d:77:87:2c:2d:08:2a:f4:81:9f:a0:18:
         80:e5:55:4a:0f:21:8b:13:74:43:b8:67:3c:74:79:4c:4e:16:
         16:df:46:ea:c4:b5:ea:e6:dc:f6:b6:73:85:d5:89:a2:0a:b1:
         c0:7e:b1:f9:24:45:e3:4c:28:bb:df:29:72:99:9d:42:c1:21:
         b1:87:44:2a:53:27:e3:d2:73:a3:01:23:e6:4c:48:f9:8f:2f:
         f1:f6:13:d5:b0:12:19:bf:7e:ed:e0:e7:67:bb:24:43:2d:d7:
         8a:39:ec:6b:a3:e4:06:c5:02:0e:3b:86:65:1a:40:1a:0c:0f:
         45:87:45:1f:4d:1f:34:3f:27:53:90:c5:32:08:cf:0d:d4:a5:
         83:76:be:bf:fb:f8:cb:41:18:af:cd:ec:15:3c:3c:d2:2b:50:
         5c:4f:89:cc:ff:f6:18:28:b1:3d:8d:4f:e3:77:0b:88:23:c3:
         ab:b8:57:a3:5e:7c:4f:ec:fa:9c:a2:69:90:41:2d:5f:95:ac:
         d1:6b:c8:f6:48:71:4d:c1:df:6d:6f:0f:76:cf:4f:7a:10:8d:
         46:6b:93:13:b4:05:1c:56:35:78:5a:24:00:94:56:b9:fb:ed:
         d5:dc:1b:ad:d0:50:eb:81:a0:d6:d2:85:a7:f0:eb:cc:69:fb:
         0b:05:fd:64
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjI4
OEEyMjg1MDI0RTE0OEEyN0U0NUZFNUFDOTBEMjhCMzAzRDRCMB4XDTI2MDMzMTA4
MzQzN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0JFNzY5RDk1OUE3OEEz
NzVDRkExODFENUQyNzFCOUI5MkM5MDk4MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMQ3f72pnw6aOaaxw0lnfNFrQHvGnLdpY2tvlEECcZDOnKwdl5Gr
anhvB/OZzQl/P1aKKBF3JV5bfit+3Y+9V6HgGz/YJ/V8SkMjAmAVviTQel/G7WNc
IqP1j3FG32JH4ItuWM0Yx4tiq7QRQCvYXMDXRf7QpE22W0l4F8kdZ1l3f9tNLHy+
LGpCmcN5gdT0bym5tnKCfJlpY0Hs6ftvEokaIl42fMmCRkbPSfgO+AXD3VOqb884
7lITzrvtUm484srCyjfHdwNVbYZDI2IhWLUW9UvJ1ri1oAYvYgrmV6kvCzpoCFF4
YtEDfNFBCuqznyfyUwkbMPXMLWziUT92XkcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTL52nZWaeKN1z6GB1dJxubkskJgTAfBgNVHSMEGDAWgBQfKIoihQJOFIon5F/l
rJDSizA9SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzEzL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9zd1BVcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9z
d1BVcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC83MTMveS1kcDJWbW5pamRjLWhnZFhTY2JtNUxKQ1lFLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANt5+TANBgkqhkiG9w0BAQsFAAOCAQEA
qqTzUQ6AbXeHLC0IKvSBn6AYgOVVSg8hixN0Q7hnPHR5TE4WFt9G6sS16ubc9rZz
hdWJogqxwH6x+SRF40wou98pcpmdQsEhsYdEKlMn49JzowEj5kxI+Y8v8fYT1bAS
Gb9+7eDnZ7skQy3Xijnsa6PkBsUCDjuGZRpAGgwPRYdFH00fND8nU5DFMgjPDdSl
g3a+v/v4y0EYr83sFTw80itQXE+JzP/2GCixPY1P43cLiCPDq7hXo158T+z6nKJp
kEEtX5Ws0WvI9khxTcHfbW8Pds9PehCNRmuTE7QFHFY1eFokAJRWufvt1dwbrdBQ
64Gg1tKFp/DrzGn7CwX9ZA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:22 2026 by rpki-client