Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/803/X5PFia4SntOqb1_O5hMs7iM7elE.roa
File:                     X5PFia4SntOqb1_O5hMs7iM7elE.roa (raw, json)
Hash identifier:          Mn3Jg9abvQChX/Vk7UJj1sZJmbzBqVPnbc8WYQbTFlI=
Subject key identifier:   5F:93:C5:89:AE:12:9E:D3:AA:6F:5F:CE:E6:13:2C:EE:23:3B:7A:51
Certificate issuer:       /CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
Certificate serial:       24
Authority key identifier: 6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/X5PFia4SntOqb1_O5hMs7iM7elE.roa
Signing time:             Tue 31 Mar 2026 08:43:47 +0000
ROA not before:           Tue 31 Mar 2026 08:43:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18281
IP address blocks:        202.224.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
        Validity
            Not Before: Mar 31 08:43:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5F93C589AE129ED3AA6F5FCEE6132CEE233B7A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:29:46:57:ad:9d:8a:d6:55:f1:74:54:e9:
                    bc:2d:bb:50:ad:ba:14:a9:15:7f:1f:2b:91:05:18:
                    5b:19:29:a6:9f:11:ae:03:df:78:bf:29:1e:13:5e:
                    c0:81:41:fd:61:9e:e4:7d:5c:9c:7f:64:58:8e:17:
                    97:0a:b0:7f:63:ce:0d:a7:7b:67:6b:32:ce:a2:50:
                    d3:7d:1d:d0:7c:84:0f:02:54:10:41:be:b9:4e:24:
                    b4:ed:d9:1b:bd:e8:ff:17:81:af:f8:36:d8:de:b8:
                    b3:1a:ba:1e:0c:0c:25:e1:aa:d2:16:ff:b6:34:c6:
                    39:77:5d:6c:26:34:58:77:7b:b4:77:cf:89:93:59:
                    96:e2:dc:6c:a7:d6:49:5a:b4:76:b0:7c:b8:db:17:
                    67:5f:2e:18:ab:8c:83:ea:e8:4b:ce:a3:1f:23:1d:
                    8e:8f:62:61:b5:33:9d:c8:97:30:8a:f3:20:72:79:
                    f3:93:d6:34:33:d5:d5:be:27:ae:eb:c1:c6:05:11:
                    d8:d3:b5:81:b1:01:01:0b:ba:88:e1:4d:6d:5f:ef:
                    43:0b:4f:c2:56:13:5f:39:16:71:05:7a:a6:f4:18:
                    c1:52:8b:1e:65:5b:67:07:3b:5e:be:45:6a:3f:de:
                    9b:54:43:4b:e6:be:80:e0:31:f4:cc:77:c1:23:27:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:93:C5:89:AE:12:9E:D3:AA:6F:5F:CE:E6:13:2C:EE:23:3B:7A:51
            X509v3 Authority Key Identifier:
                keyid:6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/X5PFia4SntOqb1_O5hMs7iM7elE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.224.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:83:26:c1:7b:6c:e1:6d:22:93:b3:2a:af:2f:ba:3c:97:
         31:1c:e0:cf:84:1a:fd:22:6f:3c:25:10:1a:2f:71:9a:ca:bb:
         32:46:f7:13:c9:42:2c:f8:b3:54:8d:e6:ee:50:36:1a:06:6a:
         c8:f5:25:9d:4c:95:fb:dd:ed:62:34:4f:f1:67:bc:f0:6e:70:
         5c:15:42:0a:23:ad:9f:4e:87:eb:6d:bc:e7:b1:c2:1c:0c:2d:
         5a:92:e8:ad:a5:f9:6a:64:c1:0b:11:9a:49:e5:6f:d5:bd:1d:
         02:b1:01:d8:17:8f:51:d2:f6:6d:26:b4:f2:b6:f0:02:70:65:
         19:17:b7:1d:69:7c:68:c0:a5:21:f1:35:77:b4:e1:11:13:d1:
         3a:d1:50:49:ce:59:6a:2c:be:c8:45:a3:4c:67:6b:d4:15:f9:
         1c:4c:da:a4:9b:e0:c6:65:29:db:03:36:73:f1:56:45:a5:14:
         59:0b:0f:36:4f:1e:99:a5:24:6c:90:26:59:34:cb:3a:ba:da:
         77:39:ce:ea:3e:cd:b8:11:7d:6f:cf:87:ec:f0:15:26:f6:3c:
         b0:87:1e:8e:a2:be:ca:87:a8:46:76:5d:e2:75:ab:ff:72:e2:
         b1:ba:13:46:11:be:91:d9:78:ba:e6:e4:f1:ac:af:30:64:2b:
         7a:63:7b:cc
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2REE2
M0EyQ0JBREM5MkRGREUwQTc0NEVEODBFOUQ1Nzc3MkUyNDY3MB4XDTI2MDMzMTA4
NDM0N1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNUY5M0M1ODlBRTEyOUVE
M0FBNkY1RkNFRTYxMzJDRUUyMzNCN0E1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANm9KUZXrZ2K1lXxdFTpvC27UK26FKkVfx8rkQUYWxkppp8RrgPf
eL8pHhNewIFB/WGe5H1cnH9kWI4Xlwqwf2PODad7Z2syzqJQ030d0HyEDwJUEEG+
uU4ktO3ZG73o/xeBr/g22N64sxq6HgwMJeGq0hb/tjTGOXddbCY0WHd7tHfPiZNZ
luLcbKfWSVq0drB8uNsXZ18uGKuMg+roS86jHyMdjo9iYbUznciXMIrzIHJ585PW
NDPV1b4nruvBxgUR2NO1gbEBAQu6iOFNbV/vQwtPwlYTXzkWcQV6pvQYwVKLHmVb
Zwc7Xr5Faj/em1RDS+a+gOAx9Mx3wSMn6WECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRfk8WJrhKe06pvX87mEyzuIzt6UTAfBgNVHSMEGDAWgBRtpjosutyS394KdE7Y
Dp1Xdy4kZzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODAzL2JhWTZMTHJja3RfZUNuUk8yQTZkVjNjdUpHYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JhWTZMTHJja3RfZUNuUk8yQTZkVjNj
dUpHYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84MDMvWDVQRmlhNFNudE9xYjFfTzVoTXM3aU03ZWxFLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMrgEDANBgkqhkiG9w0BAQsFAAOCAQEA
lZuDJsF7bOFtIpOzKq8vujyXMRzgz4Qa/SJvPCUQGi9xmsq7Mkb3E8lCLPizVI3m
7lA2GgZqyPUlnUyV+93tYjRP8We88G5wXBVCCiOtn06H622857HCHAwtWpLoraX5
amTBCxGaSeVv1b0dArEB2BePUdL2bSa08rbwAnBlGRe3HWl8aMClIfE1d7ThERPR
OtFQSc5Zaiy+yEWjTGdr1BX5HEzapJvgxmUp2wM2c/FWRaUUWQsPNk8emaUkbJAm
WTTLOrradznO6j7NuBF9b8+H7PAVJvY8sIcejqK+yoeoRnZd4nWr/3LisboTRhG+
kdl4uubk8ayvMGQremN7zA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:27 2026 by rpki-client