Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/NO6FxIxaVg8Uv6Nxl7rDbbjuyc0.roa
File:                     NO6FxIxaVg8Uv6Nxl7rDbbjuyc0.roa (raw, json)
Hash identifier:          8qJ/ctClROXBoD2zyhdEjaquHQuxFiPpcelTHg1Sl08=
Subject key identifier:   34:EE:85:C4:8C:5A:56:0F:14:BF:A3:71:97:BA:C3:6D:B8:EE:C9:CD
Certificate issuer:       /CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Certificate serial:       2E
Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/NO6FxIxaVg8Uv6Nxl7rDbbjuyc0.roa
Signing time:             Sun 01 Mar 2026 01:35:30 +0000
ROA not before:           Sun 01 Mar 2026 01:35:30 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     23827
IP address blocks:        202.226.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0
        Validity
            Not Before: Mar  1 01:35:30 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=34EE85C48C5A560F14BFA37197BAC36DB8EEC9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:bd:52:13:4f:0e:4b:cf:c0:90:b2:e5:ed:
                    ff:10:28:fb:b6:67:49:3a:a4:b9:4e:4b:0d:f3:91:
                    16:4a:8e:4d:ae:cb:c4:31:47:f7:d6:63:2e:c4:da:
                    e1:aa:78:99:3c:4f:64:03:0b:49:ae:79:3a:dc:c5:
                    e8:c4:e4:8e:a2:c4:e4:62:6a:ae:d2:ad:ab:cb:e1:
                    6d:48:a6:ca:0f:ee:19:4f:53:be:e5:4e:2f:95:34:
                    0d:91:fd:4e:fe:5c:25:ef:f3:18:42:2f:b9:4a:04:
                    15:57:a3:42:9a:e0:00:00:1b:03:84:e9:04:4c:6e:
                    a8:7d:33:bd:46:84:e2:0f:6c:80:49:e1:f7:58:0f:
                    f1:bf:c6:04:82:44:85:21:88:68:af:20:b8:01:33:
                    cb:3c:ed:c1:20:b8:96:ab:52:0e:54:8c:9c:41:22:
                    6f:fa:ed:78:d2:21:0d:e2:69:2c:18:95:31:36:11:
                    b8:3e:f9:f6:46:2b:42:7f:06:78:a0:23:c5:d7:76:
                    58:d0:98:09:f1:e4:72:33:c1:82:88:11:cf:8c:ae:
                    c8:c7:1d:05:bf:5d:af:b6:97:50:03:78:7d:eb:71:
                    da:11:08:0a:eb:01:e3:b9:df:62:3c:a9:95:cc:49:
                    f6:f2:d6:7c:f7:1c:24:98:8d:1b:b5:e7:99:0e:23:
                    ad:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EE:85:C4:8C:5A:56:0F:14:BF:A3:71:97:BA:C3:6D:B8:EE:C9:CD
            X509v3 Authority Key Identifier:
                keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/NO6FxIxaVg8Uv6Nxl7rDbbjuyc0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:c6:4b:c1:b5:84:c6:43:9e:d6:20:20:f9:88:51:b6:33:
         33:d6:24:8e:13:d6:55:45:59:ee:e3:3e:c1:3f:da:a2:c3:8c:
         10:4d:8b:d3:0b:15:60:04:e4:6c:13:4b:0a:70:81:4d:be:7c:
         36:b8:5b:6d:81:7d:cf:ca:43:0d:6d:8f:cb:40:d8:96:98:91:
         8d:b0:54:b8:67:db:7a:ea:61:4f:f3:22:50:25:b4:40:75:32:
         1b:17:d0:5f:63:7c:ba:b7:79:00:e3:9b:fa:54:9f:88:b2:12:
         a1:a1:14:a6:e6:8f:46:4d:29:28:83:f0:de:f7:a5:20:a3:04:
         cb:09:85:e0:02:29:8c:95:f6:2e:80:c7:52:d1:a3:a1:9f:5f:
         45:7b:62:f9:e0:e5:46:5d:a0:23:07:9b:09:d6:2d:08:8b:a7:
         42:31:06:76:21:ff:9b:89:a2:da:42:ce:5f:2d:a0:8b:0f:27:
         38:f5:02:bc:e0:52:c5:71:2d:9c:99:ed:18:e0:b0:ac:b8:e9:
         a2:d6:e5:da:a3:80:33:f9:19:e4:ff:7e:a8:10:51:d0:93:40:
         d1:34:06:44:34:99:dc:bf:db:bd:cc:3d:89:02:0d:90:36:ef:
         1d:ec:66:39:0e:53:39:3e:b7:ff:31:58:94:7e:e5:40:36:63:
         c2:c6:7a:d6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERDgy
OUQ2NDZENTNFQ0YyOTg5NTBCNjg3NTMyREU5MjZFQzdFQkMwMB4XDTI2MDMwMTAx
MzUzMFoXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoMzRFRTg1QzQ4QzVBNTYw
RjE0QkZBMzcxOTdCQUMzNkRCOEVFQzlDRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANP5vVITTw5Lz8CQsuXt/xAo+7ZnSTqkuU5LDfORFkqOTa7LxDFH
99ZjLsTa4ap4mTxPZAMLSa55OtzF6MTkjqLE5GJqrtKtq8vhbUimyg/uGU9TvuVO
L5U0DZH9Tv5cJe/zGEIvuUoEFVejQprgAAAbA4TpBExuqH0zvUaE4g9sgEnh91gP
8b/GBIJEhSGIaK8guAEzyzztwSC4lqtSDlSMnEEib/rteNIhDeJpLBiVMTYRuD75
9kYrQn8GeKAjxdd2WNCYCfHkcjPBgogRz4yuyMcdBb9dr7aXUAN4fetx2hEICusB
47nfYjyplcxJ9vLWfPccJJiNG7XnmQ4jrUECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ07oXEjFpWDxS/o3GXusNtuO7JzTAfBgNVHSMEGDAWgBTdgp1kbVPs8piVC2h1
Mt6SbsfrwDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODkxLzNZS2RaRzFUN1BLWWxRdG9kVExla203SDY4QS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzNZS2RaRzFUN1BLWWxRdG9kVExla203
SDY4QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84OTEvTk82RnhJeGFWZzhVdjZOeGw3ckRiYmp1eWMwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsriODANBgkqhkiG9w0BAQsFAAOCAQEALL7GS8G1hMZDntYgIPmIUbYzM9Yk
jhPWVUVZ7uM+wT/aosOMEE2L0wsVYATkbBNLCnCBTb58NrhbbYF9z8pDDW2Py0DY
lpiRjbBUuGfbeuphT/MiUCW0QHUyGxfQX2N8urd5AOOb+lSfiLISoaEUpuaPRk0p
KIPw3velIKMEywmF4AIpjJX2LoDHUtGjoZ9fRXti+eDlRl2gIwebCdYtCIunQjEG
diH/m4mi2kLOXy2giw8nOPUCvOBSxXEtnJntGOCwrLjpotbl2qOAM/kZ5P9+qBBR
0JNA0TQGRDSZ3L/bvcw9iQINkDbvHexmOQ5TOT63/zFYlH7lQDZjwsZ61g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:46:40 2026 by rpki-client