Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/sCQtjKbZQxnVlB-lYOekiFpDGZ8.roa
File:                     sCQtjKbZQxnVlB-lYOekiFpDGZ8.roa (raw, json)
Hash identifier:          NZuCQIr+Kqa+1tdX1fRF4uT3jpkqMMkqPGTUVdITMRE=
Subject key identifier:   B0:24:2D:8C:A6:D9:43:19:D5:94:1F:A5:60:E7:A4:88:5A:43:19:9F
Certificate issuer:       /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial:       2D
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/sCQtjKbZQxnVlB-lYOekiFpDGZ8.roa
Signing time:             Sun 01 Mar 2026 01:36:26 +0000
ROA not before:           Sun 01 Mar 2026 01:36:26 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     131931
IP address blocks:        210.171.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
        Validity
            Not Before: Mar  1 01:36:26 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B0242D8CA6D94319D5941FA560E7A4885A43199F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:b6:fd:67:ef:d6:11:eb:c9:8d:21:23:a6:
                    16:b5:77:dd:00:a8:37:7a:2e:8d:03:74:10:2d:f7:
                    d7:de:dc:ff:0f:03:2b:80:6a:fc:96:b1:a0:c3:7b:
                    cb:99:20:f5:73:77:23:6e:4f:40:9a:6f:48:23:be:
                    b7:50:a9:d6:59:05:c6:3e:24:45:ed:db:69:b9:c7:
                    46:e5:17:25:bc:87:e4:24:d6:7a:16:43:3c:03:b6:
                    e7:c0:1e:7e:a7:bd:20:39:ae:82:ab:e2:80:f9:3a:
                    a4:14:98:2a:51:df:2a:70:d5:b7:4b:00:4a:45:ca:
                    e8:2d:a3:73:52:0e:61:80:d9:99:57:d2:7f:9b:00:
                    99:c3:82:55:ad:99:90:96:65:17:b9:bf:6f:c6:66:
                    91:57:b8:e1:3d:bf:6f:b0:87:3e:f3:44:a2:7f:7b:
                    96:75:12:37:af:3d:d9:52:6d:f8:b3:d4:e8:3a:b5:
                    05:d9:ca:49:87:65:96:6d:5d:b8:c0:fd:75:52:fe:
                    72:18:70:5d:ec:a1:a9:c9:dd:21:86:66:08:59:bf:
                    b9:82:52:2e:f1:8d:f9:c6:f4:36:e9:0d:f4:5f:66:
                    d3:43:4e:ae:29:6d:7b:d1:cd:b8:14:b1:80:67:fc:
                    62:83:e4:1f:72:b5:48:72:ed:a7:20:a0:0a:8d:b4:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:24:2D:8C:A6:D9:43:19:D5:94:1F:A5:60:E7:A4:88:5A:43:19:9F
            X509v3 Authority Key Identifier:
                keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/sCQtjKbZQxnVlB-lYOekiFpDGZ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:b4:c9:ae:75:a7:99:5c:94:95:4a:59:6f:54:0e:4c:82:34:
         dc:e0:89:a1:54:aa:51:ea:d8:bb:67:7a:bc:66:8c:a7:eb:d4:
         f8:4a:a4:25:32:a4:b4:cc:c7:28:ac:f3:c7:38:b9:cd:7b:2d:
         a3:96:0c:31:fb:82:60:87:d1:15:ce:9c:ef:22:20:8e:2b:3f:
         0e:9e:bd:5e:6e:99:f6:23:13:68:09:c8:11:44:12:c2:18:5c:
         8c:0f:96:00:ea:ab:cc:15:52:d0:3b:20:68:d7:6e:56:1d:7a:
         04:d4:66:95:fc:f7:55:a1:70:9d:4a:ea:38:f6:d3:0e:a5:6c:
         80:a4:40:69:d8:9c:a8:5f:5e:e4:9f:bb:58:14:1a:2f:66:7e:
         99:7d:65:b5:6d:c8:6d:cc:03:d3:48:7b:20:70:be:af:c3:e9:
         37:37:01:6a:7b:e6:3c:56:a1:b2:b9:70:ba:94:fe:7d:18:d4:
         24:d6:bf:6c:a1:04:6e:bb:0a:95:64:b2:dd:7e:4c:dd:72:8e:
         ad:67:07:11:6d:70:a8:da:d1:71:e5:47:7c:40:f1:db:b9:f9:
         a5:47:71:4b:1c:ef:08:f3:79:d1:57:c9:84:8f:03:1b:75:c0:
         80:92:b9:1c:cd:a1:74:19:27:01:0e:9d:f6:e7:d7:b2:73:59:
         8f:0f:9c:f3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjJF
N0U2MkRBOEYxMkYzQkIzM0UwQjVFM0NFMDAyRkRBMjhDRjI1MB4XDTI2MDMwMTAx
MzYyNloXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoQjAyNDJEOENBNkQ5NDMx
OUQ1OTQxRkE1NjBFN0E0ODg1QTQzMTk5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALvJtv1n79YR68mNISOmFrV33QCoN3oujQN0EC33197c/w8DK4Bq
/JaxoMN7y5kg9XN3I25PQJpvSCO+t1Cp1lkFxj4kRe3babnHRuUXJbyH5CTWehZD
PAO258Aefqe9IDmugqvigPk6pBSYKlHfKnDVt0sASkXK6C2jc1IOYYDZmVfSf5sA
mcOCVa2ZkJZlF7m/b8ZmkVe44T2/b7CHPvNEon97lnUSN6892VJt+LPU6Dq1BdnK
SYdllm1duMD9dVL+chhwXeyhqcndIYZmCFm/uYJSLvGN+cb0NukN9F9m00NOrilt
e9HNuBSxgGf8YoPkH3K1SHLtpyCgCo20VMcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSwJC2MptlDGdWUH6Vg56SIWkMZnzAfBgNVHSMEGDAWgBQbLn5i2o8S87sz4LXj
zgAv2ijPJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODE4L0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlvb3p5VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlv
b3p5VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MTgvc0NRdGpLYlpReG5WbEItbFlPZWtpRnBER1o4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNKrkDANBgkqhkiG9w0BAQsFAAOCAQEAW7TJrnWnmVyUlUpZb1QOTII03OCJ
oVSqUerYu2d6vGaMp+vU+EqkJTKktMzHKKzzxzi5zXsto5YMMfuCYIfRFc6c7yIg
jis/Dp69Xm6Z9iMTaAnIEUQSwhhcjA+WAOqrzBVS0DsgaNduVh16BNRmlfz3VaFw
nUrqOPbTDqVsgKRAadicqF9e5J+7WBQaL2Z+mX1ltW3IbcwD00h7IHC+r8PpNzcB
anvmPFahsrlwupT+fRjUJNa/bKEEbrsKlWSy3X5M3XKOrWcHEW1wqNrRceVHfEDx
27n5pUdxSxzvCPN50VfJhI8DG3XAgJK5HM2hdBknAQ6d9ufXsnNZjw+c8w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:46:44 2026 by rpki-client