Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/Kt_fEmibVInUMCIVeewQEFrlHMw.roa
File:                     Kt_fEmibVInUMCIVeewQEFrlHMw.roa (raw, json)
Hash identifier:          qx/MCwnUYGsX2xdBBoA0r7dJCNWK3Vi+VAlDoBWC55o=
Subject key identifier:   2A:DF:DF:12:68:9B:54:89:D4:30:22:15:79:EC:10:10:5A:E5:1C:CC
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       B5
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/Kt_fEmibVInUMCIVeewQEFrlHMw.roa
Signing time:             Tue 31 Mar 2026 07:33:08 +0000
ROA not before:           Tue 31 Mar 2026 07:33:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18260
IP address blocks:        219.109.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Mar 31 07:33:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2ADFDF12689B5489D430221579EC10105AE51CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:32:ca:ec:1f:56:ef:cf:52:0f:99:7b:e5:
                    ea:c3:28:ab:19:c0:ac:8b:d7:42:a9:02:52:e1:86:
                    7d:de:a9:ed:23:4e:89:30:41:80:89:23:93:11:8f:
                    a3:c4:68:af:b1:38:47:d9:b5:67:8d:08:21:9d:94:
                    83:d6:67:d9:9a:40:74:c7:db:e1:25:f0:60:ae:2a:
                    c0:49:86:86:54:33:5e:62:6b:52:61:97:80:0b:e0:
                    35:91:79:01:d0:e8:ce:1f:7e:36:53:34:a9:6a:e8:
                    b4:09:49:0e:99:8f:81:f0:1b:6f:c4:76:c6:92:94:
                    00:f1:a0:ed:86:7b:9b:c3:39:fb:41:a2:a8:77:bd:
                    67:8a:57:91:52:a2:ab:d5:03:06:c7:69:87:97:2a:
                    d8:08:47:e3:47:cd:71:91:cc:3d:f4:c5:d1:d5:99:
                    29:5f:f3:2d:00:fc:20:28:4f:00:eb:55:9e:28:58:
                    2c:95:80:28:38:8f:6b:3c:d9:7f:5f:91:2c:a1:0a:
                    30:14:07:73:c1:65:04:a7:f6:97:ca:91:25:54:35:
                    ea:08:38:84:1a:f3:c2:85:62:38:4f:cc:4f:02:68:
                    79:c8:af:a3:bf:1e:ce:26:d5:ac:e9:43:00:0b:a1:
                    f4:bb:d1:8c:9a:0c:10:c2:17:9c:d2:81:1a:a8:a8:
                    a3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DF:DF:12:68:9B:54:89:D4:30:22:15:79:EC:10:10:5A:E5:1C:CC
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/Kt_fEmibVInUMCIVeewQEFrlHMw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:f9:6d:7b:43:de:18:f9:b5:86:6f:ab:60:24:91:e0:af:74:
         7c:a1:31:8e:31:27:ff:84:9d:10:ef:30:bf:cb:77:d7:26:f9:
         f7:9e:bd:87:83:e1:86:c1:f0:00:ce:c6:4f:9d:ef:15:4a:86:
         f9:b1:71:ec:a7:9c:dc:68:a6:a0:53:cd:4f:68:01:44:b3:45:
         44:0a:b0:50:89:c0:e5:47:b5:95:48:01:35:7f:4f:4b:e5:01:
         ef:24:87:5f:8b:86:2c:a6:6d:5e:94:96:3d:91:8f:8e:a3:f3:
         0e:d8:f5:c1:97:52:5c:87:39:f9:78:fc:45:af:90:3f:25:c9:
         8d:d9:f1:f8:d3:58:df:9a:28:5a:4e:c9:c7:dc:6b:4c:a4:a0:
         f9:4e:f3:4d:2e:6b:4a:77:ab:b2:4e:24:7f:86:50:7f:7f:69:
         f1:6c:82:6d:10:c1:6b:d0:50:4f:aa:d3:97:81:c8:65:9d:bf:
         8f:ef:23:97:8c:dd:71:e8:cf:55:aa:43:7a:c2:fd:41:f5:5a:
         7b:0f:56:8d:11:a3:e1:70:f2:01:a3:fc:dc:e9:41:f7:35:12:
         4b:f8:23:37:32:e9:9f:2c:04:fe:e5:2f:24:ec:5e:3f:7f:2a:
         cb:ab:b8:e1:bf:cb:e7:54:89:4a:cd:e9:64:c8:49:e0:07:77:
         87:4e:c9:0f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTFB
Q0E0NDI3NUVDMDU3MkJDNjkyMTUwMkIyNDFDMTRENDRBOUFBMTAeFw0yNjAzMzEw
NzMzMDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJBREZERjEyNjg5QjU0
ODlENDMwMjIxNTc5RUMxMDEwNUFFNTFDQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1KDLK7B9W789SD5l75erDKKsZwKyL10KpAlLhhn3eqe0jTokw
QYCJI5MRj6PEaK+xOEfZtWeNCCGdlIPWZ9maQHTH2+El8GCuKsBJhoZUM15ia1Jh
l4AL4DWReQHQ6M4ffjZTNKlq6LQJSQ6Zj4HwG2/EdsaSlADxoO2Ge5vDOftBoqh3
vWeKV5FSoqvVAwbHaYeXKtgIR+NHzXGRzD30xdHVmSlf8y0A/CAoTwDrVZ4oWCyV
gCg4j2s82X9fkSyhCjAUB3PBZQSn9pfKkSVUNeoIOIQa88KFYjhPzE8CaHnIr6O/
Hs4m1azpQwALofS70YyaDBDCF5zSgRqoqKPfAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUKt/fEmibVInUMCIVeewQEFrlHMwwHwYDVR0jBBgwFoAUkaykQnXsBXK8aSFQ
KyQcFNRKmqEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzczMS9rYXlrUW5Yc0JYSzhhU0ZRS3lRY0ZOUkttcUUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9rYXlrUW5Yc0JYSzhhU0ZRS3lRY0ZO
UkttcUUuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNzMxL0t0X2ZFbWliVkluVU1DSVZlZXdRRUZybEhNdy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATbbTAwDQYJKoZIhvcNAQELBQADggEB
AHT5bXtD3hj5tYZvq2AkkeCvdHyhMY4xJ/+EnRDvML/Ld9cm+feevYeD4YbB8ADO
xk+d7xVKhvmxceynnNxopqBTzU9oAUSzRUQKsFCJwOVHtZVIATV/T0vlAe8kh1+L
hiymbV6Ulj2Rj46j8w7Y9cGXUlyHOfl4/EWvkD8lyY3Z8fjTWN+aKFpOycfca0yk
oPlO800ua0p3q7JOJH+GUH9/afFsgm0QwWvQUE+q05eByGWdv4/vI5eM3XHoz1Wq
Q3rC/UH1WnsPVo0Ro+Fw8gGj/NzpQfc1Ekv4Izcy6Z8sBP7lLyTsXj9/KsuruOG/
y+dUiUrN6WTISeAHd4dOyQ8=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:40:42 2026 by rpki-client