Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/KgIRAl9r0FJtMelEP8VLNFIW9RY.roa
File:                     KgIRAl9r0FJtMelEP8VLNFIW9RY.roa (raw, json)
Hash identifier:          +iS+G+kMwl56VOOIATit8NVGmZVdikSMMDL8Fjdg0Zw=
Subject key identifier:   2A:02:11:02:5F:6B:D0:52:6D:31:E9:44:3F:C5:4B:34:52:16:F5:16
Certificate issuer:       /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial:       30
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/KgIRAl9r0FJtMelEP8VLNFIW9RY.roa
Signing time:             Tue 31 Mar 2026 08:40:03 +0000
ROA not before:           Tue 31 Mar 2026 08:40:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131931
IP address blocks:        110.4.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
        Validity
            Not Before: Mar 31 08:40:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2A0211025F6BD0526D31E9443FC54B345216F516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:07:a9:b1:01:92:57:b4:d6:20:99:4b:18:
                    bf:af:4f:0b:69:71:0f:d5:69:b0:72:de:46:c2:c7:
                    ec:f1:c8:b7:23:a5:b9:0e:ba:9e:d4:8f:1a:2b:7b:
                    27:24:7c:74:f7:7f:11:11:66:08:df:3d:fc:9c:3c:
                    a3:b9:d7:7a:4c:3f:5c:fd:8b:2d:74:a9:1f:55:de:
                    1a:0a:19:bc:b2:04:51:4f:3b:6a:4f:0f:68:76:d7:
                    51:b2:18:b0:bf:30:bb:7f:fe:25:ff:a6:bc:a2:35:
                    44:50:f9:77:a0:21:18:16:76:39:6a:e4:40:ba:5b:
                    bf:03:bc:de:5b:66:75:53:d0:cc:aa:53:c3:f3:75:
                    f0:01:65:1d:8d:ed:3f:52:cb:e0:ca:41:73:4f:e2:
                    ce:b5:5a:0c:9e:00:90:69:fa:4e:3e:98:25:df:41:
                    17:68:99:50:1d:86:8c:e8:56:62:ad:e1:d1:47:28:
                    c0:f4:4e:74:f2:9e:b2:b1:41:23:5e:03:62:e9:c5:
                    e9:c2:3a:d3:b5:66:36:da:32:79:1d:85:1f:30:a9:
                    cd:04:48:d9:f6:da:ff:67:1e:81:f4:e6:87:1b:78:
                    8f:f7:bc:c8:66:e0:c7:89:e9:14:23:72:a0:3c:6b:
                    e0:95:64:ee:06:04:61:9a:35:f6:9c:9e:fc:bb:72:
                    84:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:02:11:02:5F:6B:D0:52:6D:31:E9:44:3F:C5:4B:34:52:16:F5:16
            X509v3 Authority Key Identifier:
                keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/KgIRAl9r0FJtMelEP8VLNFIW9RY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.4.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cd:e2:32:84:e3:29:83:b3:45:da:63:6f:95:9b:67:1c:48:cf:
         29:27:43:90:9e:e1:77:55:77:58:09:78:02:d6:83:ce:7c:e0:
         3b:3c:66:33:da:16:07:62:65:aa:4b:80:67:06:f9:aa:fe:5c:
         2d:55:e6:5f:b4:0b:a9:1c:ce:b6:35:68:ef:18:30:b7:8e:32:
         e8:44:ac:24:4b:c5:44:2c:68:57:dd:3e:2b:a9:8c:f1:90:c2:
         ac:bc:8b:62:10:a7:ec:fe:42:61:75:1a:44:3e:fe:05:4b:1c:
         db:f5:05:3d:ad:d1:fb:ed:f8:b6:11:43:46:1f:64:4f:5b:83:
         e3:bf:86:d4:24:79:32:98:b0:01:f7:f0:7e:a8:22:bf:60:d1:
         00:3f:8c:90:b1:56:9f:10:5c:95:48:3d:55:3c:1c:c4:78:49:
         e0:89:b9:e2:24:58:38:d7:23:64:1b:13:02:06:84:1b:3c:1c:
         03:f2:2b:ee:2c:7b:57:bc:76:eb:50:71:71:2a:db:1f:4b:d4:
         09:c2:18:2d:82:36:98:0c:ce:cb:6c:fb:89:9a:88:1c:61:79:
         12:b5:fb:57:76:0e:f7:4f:f5:38:8b:81:b0:74:11:76:5b:ad:
         64:16:a4:87:e9:37:42:a8:89:dd:70:cf:5f:08:f2:a1:51:89:
         7b:a5:c4:22
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjJF
N0U2MkRBOEYxMkYzQkIzM0UwQjVFM0NFMDAyRkRBMjhDRjI1MB4XDTI2MDMzMTA4
NDAwM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMkEwMjExMDI1RjZCRDA1
MjZEMzFFOTQ0M0ZDNTRCMzQ1MjE2RjUxNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALxmB6mxAZJXtNYgmUsYv69PC2lxD9VpsHLeRsLH7PHItyOluQ66
ntSPGit7JyR8dPd/ERFmCN89/Jw8o7nXekw/XP2LLXSpH1XeGgoZvLIEUU87ak8P
aHbXUbIYsL8wu3/+Jf+mvKI1RFD5d6AhGBZ2OWrkQLpbvwO83ltmdVPQzKpTw/N1
8AFlHY3tP1LL4MpBc0/izrVaDJ4AkGn6Tj6YJd9BF2iZUB2GjOhWYq3h0UcowPRO
dPKesrFBI14DYunF6cI607VmNtoyeR2FHzCpzQRI2fba/2cegfTmhxt4j/e8yGbg
x4npFCNyoDxr4JVk7gYEYZo19pye/LtyhDMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQqAhECX2vQUm0x6UQ/xUs0Uhb1FjAfBgNVHSMEGDAWgBQbLn5i2o8S87sz4LXj
zgAv2ijPJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODE4L0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlvb3p5VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlv
b3p5VS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84MTgvS2dJUkFsOXIwRkp0TWVsRVA4VkxORklXOVJZLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA24EIDANBgkqhkiG9w0BAQsFAAOCAQEA
zeIyhOMpg7NF2mNvlZtnHEjPKSdDkJ7hd1V3WAl4AtaDznzgOzxmM9oWB2JlqkuA
Zwb5qv5cLVXmX7QLqRzOtjVo7xgwt44y6ESsJEvFRCxoV90+K6mM8ZDCrLyLYhCn
7P5CYXUaRD7+BUsc2/UFPa3R++34thFDRh9kT1uD47+G1CR5MpiwAffwfqgiv2DR
AD+MkLFWnxBclUg9VTwcxHhJ4Im54iRYONcjZBsTAgaEGzwcA/Ir7ix7V7x261Bx
cSrbH0vUCcIYLYI2mAzOy2z7iZqIHGF5ErX7V3YO90/1OIuBsHQRdlutZBakh+k3
QqiJ3XDPXwjyoVGJe6XEIg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:31 2026 by rpki-client