Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/qQEhYSYFLtDNhsy1fDyD56itYxg.roa
File:                     qQEhYSYFLtDNhsy1fDyD56itYxg.roa (raw, json)
Hash identifier:          OXZP01WIe8ncjbk0i78ZH0awUiOfTyqEemrZdEUJZGc=
Subject key identifier:   A9:01:21:61:26:05:2E:D0:CD:86:CC:B5:7C:3C:83:E7:A8:AD:63:18
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       82
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/qQEhYSYFLtDNhsy1fDyD56itYxg.roa
Signing time:             Tue 31 Mar 2026 07:32:52 +0000
ROA not before:           Tue 31 Mar 2026 07:32:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23818
IP address blocks:        203.79.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar 31 07:32:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A901216126052ED0CD86CCB57C3C83E7A8AD6318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:09:ce:aa:71:3c:11:f2:66:9f:30:dd:d3:91:
                    cf:0a:40:4a:fd:1a:ac:c5:e1:14:00:d1:2a:c8:8a:
                    79:19:70:ca:ce:fc:94:ec:de:27:03:db:1b:6a:63:
                    03:14:54:13:22:4b:4b:a3:6a:2a:26:3e:d9:20:28:
                    52:c9:49:13:a8:e1:82:90:17:c2:7a:7d:c3:c0:be:
                    02:27:3e:f1:68:eb:c6:0b:08:21:b5:c0:06:b9:c3:
                    13:42:e4:3f:7f:3f:ab:b8:87:b0:74:51:8e:20:77:
                    47:e2:c7:81:a3:70:e9:a6:f4:ad:76:ac:b7:f7:c6:
                    16:1f:0a:cf:3e:55:45:14:a4:a3:73:fb:b3:be:15:
                    75:fe:50:95:e7:09:7e:b3:11:f0:e1:48:81:8a:e3:
                    7e:c7:5c:d3:7a:82:65:1d:fb:ab:55:69:01:af:49:
                    e4:73:e8:7d:a5:a9:63:38:28:c8:77:0b:5d:9f:3e:
                    16:66:6f:e4:15:f6:85:a1:64:49:d8:29:41:b4:44:
                    3b:13:18:d1:0f:ec:19:c1:8f:0f:6c:28:c4:cc:49:
                    51:89:8a:6c:01:f4:3a:71:c9:83:ec:31:3d:f4:d0:
                    fe:20:1f:aa:b7:00:ed:34:23:f9:e3:d9:2e:39:7e:
                    48:6b:58:f4:37:df:68:59:66:c6:55:a3:bb:e2:4a:
                    0d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:01:21:61:26:05:2E:D0:CD:86:CC:B5:7C:3C:83:E7:A8:AD:63:18
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/qQEhYSYFLtDNhsy1fDyD56itYxg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a8:73:f1:16:f3:68:d8:7c:c8:e6:cd:82:df:f2:09:7a:19:
         7e:42:57:a1:b5:1a:aa:1a:6e:8d:ed:eb:29:f3:83:09:6c:0a:
         4e:80:56:ed:5c:c2:2c:a0:f7:56:ec:c1:69:cd:e1:90:31:67:
         33:a2:8a:29:85:43:0a:b5:08:5c:7b:c0:57:64:6c:46:fe:20:
         b3:41:47:4c:f3:df:86:a4:41:98:73:aa:be:e0:d7:61:b0:67:
         80:32:df:c5:03:15:5b:32:0d:2d:4a:cb:70:ae:b4:5e:41:32:
         55:d8:16:ff:0e:7e:79:f4:5e:9c:86:a3:e8:e5:c1:de:5f:e2:
         e8:4e:ef:20:1e:4f:6f:12:e6:e6:eb:8f:96:18:e5:35:9d:09:
         68:70:41:b9:e6:c7:61:77:d8:b7:07:04:0e:dc:1a:e5:ae:54:
         0a:70:fd:10:a1:2b:75:5a:cd:dc:e2:99:7e:00:c5:a4:02:f7:
         29:29:ba:72:b8:b7:ec:f2:a9:9f:c6:8d:24:49:cd:2f:9e:e6:
         b0:20:7d:be:9f:52:4e:0e:89:3c:89:0f:2d:38:be:ec:3e:9b:
         cf:e0:93:f8:ab:ea:ec:2e:4b:aa:46:ef:29:b7:0e:1b:31:8f:
         29:c5:d1:9c:77:4d:23:f7:a1:68:18:75:97:69:e3:df:ae:0c:
         97:55:25:ae
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdF
RTM5NENDOEIxNjUxQjc1OEYzODhGNzNBODhFNjhCRDI3MjIyRjAeFw0yNjAzMzEw
NzMyNTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE5MDEyMTYxMjYwNTJF
RDBDRDg2Q0NCNTdDM0M4M0U3QThBRDYzMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzCc6qcTwR8mafMN3Tkc8KQEr9GqzF4RQA0SrIinkZcMrO/JTs
3icD2xtqYwMUVBMiS0ujaiomPtkgKFLJSROo4YKQF8J6fcPAvgInPvFo68YLCCG1
wAa5wxNC5D9/P6u4h7B0UY4gd0fix4GjcOmm9K12rLf3xhYfCs8+VUUUpKNz+7O+
FXX+UJXnCX6zEfDhSIGK437HXNN6gmUd+6tVaQGvSeRz6H2lqWM4KMh3C12fPhZm
b+QV9oWhZEnYKUG0RDsTGNEP7BnBjw9sKMTMSVGJimwB9DpxyYPsMT300P4gH6q3
AO00I/nj2S45fkhrWPQ332hZZsZVo7viSg27AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUqQEhYSYFLtDNhsy1fDyD56itYxgwHwYDVR0jBBgwFoAUh+45TMixZRt1jziP
c6iOaL0nIi8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzg4My9oLTQ1VE1peFpSdDFqemlQYzZpT2FMMG5JaTguY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oLTQ1VE1peFpSdDFqemlQYzZpT2FM
MG5JaTguY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvODgzL3FRRWhZU1lGTHRETmhzeTFmRHlENTZpdFl4Zy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLTz8wDQYJKoZIhvcNAQELBQADggEB
AIKoc/EW82jYfMjmzYLf8gl6GX5CV6G1Gqoabo3t6ynzgwlsCk6AVu1cwiyg91bs
wWnN4ZAxZzOiiimFQwq1CFx7wFdkbEb+ILNBR0zz34akQZhzqr7g12GwZ4Ay38UD
FVsyDS1Ky3CutF5BMlXYFv8Ofnn0XpyGo+jlwd5f4uhO7yAeT28S5ubrj5YY5TWd
CWhwQbnmx2F32LcHBA7cGuWuVApw/RChK3VazdzimX4AxaQC9ykpunK4t+zyqZ/G
jSRJzS+e5rAgfb6fUk4OiTyJDy04vuw+m8/gk/ir6uwuS6pG7ym3DhsxjynF0Zx3
TSP3oWgYdZdp49+uDJdVJa4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:34 2026 by rpki-client