Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/zwYEyPcQOWGGZj9Y-JDBvQ3UaJI.roa
File:                     zwYEyPcQOWGGZj9Y-JDBvQ3UaJI.roa (raw, json)
Hash identifier:          6qIENLEW73aEcvvI2+RM0agYyYIyYB+80/XeWl5p7EU=
Subject key identifier:   CF:06:04:C8:F7:10:39:61:86:66:3F:58:F8:90:C1:BD:0D:D4:68:92
Certificate issuer:       /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial:       33
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/zwYEyPcQOWGGZj9Y-JDBvQ3UaJI.roa
Signing time:             Tue 31 Mar 2026 08:40:07 +0000
ROA not before:           Tue 31 Mar 2026 08:40:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131931
IP address blocks:        133.117.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
        Validity
            Not Before: Mar 31 08:40:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CF0604C8F710396186663F58F890C1BD0DD46892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:93:66:6f:62:8b:70:3c:2d:12:4c:42:d7:
                    d7:e5:b6:33:b8:90:f8:e4:ca:e8:85:71:2f:46:57:
                    82:4f:c8:b4:a5:cb:bc:7f:bb:84:d5:08:0b:3f:20:
                    7e:a7:51:0f:e7:47:cc:36:89:b5:c5:f9:df:99:c3:
                    37:81:8b:3a:fa:d8:ed:f8:ab:b9:eb:0b:38:e6:68:
                    c5:fe:13:7f:e9:b9:9d:4f:0f:6d:36:b3:0a:a5:4c:
                    0a:05:ee:1d:33:de:d3:ef:81:3f:8a:2c:53:53:da:
                    a5:b5:b6:39:d6:db:b1:24:3e:2c:69:15:db:75:a3:
                    40:53:ad:fa:43:dd:05:6a:30:ad:05:9e:75:e4:80:
                    21:39:1d:3c:e5:f9:2d:fa:70:cf:0d:a4:fe:c4:0b:
                    89:fc:7f:77:ca:b3:2e:7c:ab:e1:8b:31:38:4a:8b:
                    47:35:54:53:d6:7c:67:a2:25:a4:6e:62:72:83:e7:
                    8d:ee:c1:db:2a:06:0f:f9:6c:ba:78:7f:4a:c8:6e:
                    6f:13:a2:79:c5:cb:c5:f4:a4:81:04:63:2b:43:c8:
                    61:f2:ee:91:b0:42:4d:d8:dd:87:0d:5b:55:3c:9e:
                    79:1d:5f:ae:86:7e:0f:b7:41:02:22:d5:a5:bf:7d:
                    bd:7a:47:a6:73:a6:3e:23:1f:68:0d:5c:a5:7e:9a:
                    34:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:06:04:C8:F7:10:39:61:86:66:3F:58:F8:90:C1:BD:0D:D4:68:92
            X509v3 Authority Key Identifier:
                keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/zwYEyPcQOWGGZj9Y-JDBvQ3UaJI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.117.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:80:c0:b5:52:48:de:0b:59:05:53:79:d5:92:25:a3:25:ab:
         8b:40:8b:30:32:a0:2a:1e:40:de:64:e6:a0:ec:bf:2a:ee:f4:
         42:27:41:86:00:5f:49:28:05:0f:1c:32:9e:20:aa:77:1e:1b:
         cc:1e:de:e3:44:14:2d:1d:6d:19:c5:73:f7:5e:b6:c5:9e:87:
         78:19:c1:54:84:89:ac:1d:3c:23:22:0c:8b:aa:9e:85:3f:4e:
         2a:03:eb:e6:a5:e8:89:38:b3:21:07:42:d9:d2:0f:63:36:ce:
         ec:40:f2:66:2a:23:f7:f2:1f:a8:7a:75:c6:44:67:df:fb:41:
         32:67:15:eb:b1:74:99:8d:c4:f3:11:a9:d6:2a:6d:6c:ff:31:
         76:e1:e9:28:f1:88:69:10:a8:3d:a8:90:d6:f4:7f:e0:3c:4b:
         29:d9:71:47:c9:4c:81:95:23:84:99:0f:c0:65:b3:42:e8:cf:
         6c:1c:4e:de:51:5f:36:9b:f1:27:79:07:f8:6d:74:71:9f:64:
         6f:20:90:27:7c:23:b6:c6:d2:c8:a2:a0:59:2c:f0:99:ef:d5:
         c0:c0:6d:69:7b:39:1d:be:6b:84:3c:68:15:59:9f:f6:4d:f6:
         46:0d:0f:e8:94:7b:b7:16:61:ce:47:43:ae:e4:60:1d:24:93:
         f1:6e:e0:be
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjJF
N0U2MkRBOEYxMkYzQkIzM0UwQjVFM0NFMDAyRkRBMjhDRjI1MB4XDTI2MDMzMTA4
NDAwN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0YwNjA0QzhGNzEwMzk2
MTg2NjYzRjU4Rjg5MEMxQkQwREQ0Njg5MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMU2k2ZvYotwPC0STELX1+W2M7iQ+OTK6IVxL0ZXgk/ItKXLvH+7
hNUICz8gfqdRD+dHzDaJtcX535nDN4GLOvrY7firuesLOOZoxf4Tf+m5nU8PbTaz
CqVMCgXuHTPe0++BP4osU1PapbW2OdbbsSQ+LGkV23WjQFOt+kPdBWowrQWedeSA
ITkdPOX5Lfpwzw2k/sQLifx/d8qzLnyr4YsxOEqLRzVUU9Z8Z6IlpG5icoPnje7B
2yoGD/lsunh/SshubxOiecXLxfSkgQRjK0PIYfLukbBCTdjdhw1bVTyeeR1froZ+
D7dBAiLVpb99vXpHpnOmPiMfaA1cpX6aNA0CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTPBgTI9xA5YYZmP1j4kMG9DdRokjAfBgNVHSMEGDAWgBQbLn5i2o8S87sz4LXj
zgAv2ijPJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODE4L0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlvb3p5VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlv
b3p5VS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84MTgvendZRXlQY1FPV0dHWmo5WS1KREJ2UTNVYUpJLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoV1kDANBgkqhkiG9w0BAQsFAAOCAQEA
RIDAtVJI3gtZBVN51ZIloyWri0CLMDKgKh5A3mTmoOy/Ku70QidBhgBfSSgFDxwy
niCqdx4bzB7e40QULR1tGcVz9162xZ6HeBnBVISJrB08IyIMi6qehT9OKgPr5qXo
iTizIQdC2dIPYzbO7EDyZioj9/IfqHp1xkRn3/tBMmcV67F0mY3E8xGp1iptbP8x
duHpKPGIaRCoPaiQ1vR/4DxLKdlxR8lMgZUjhJkPwGWzQujPbBxO3lFfNpvxJ3kH
+G10cZ9kbyCQJ3wjtsbSyKKgWSzwme/VwMBtaXs5Hb5rhDxoFVmf9k32Rg0P6JR7
txZhzkdDruRgHSST8W7gvg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:11 2026 by rpki-client