Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/24elPBV5YwWdwjmAjolPtShQoSA.roa
File:                     24elPBV5YwWdwjmAjolPtShQoSA.roa (raw, json)
Hash identifier:          AHHYwEcdD2GUewxScBizLNCs5LvW4UyaTOWFtf/ZFdU=
Subject key identifier:   DB:87:A5:3C:15:79:63:05:9D:C2:39:80:8E:89:4F:B5:28:50:A1:20
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       38
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/24elPBV5YwWdwjmAjolPtShQoSA.roa
Signing time:             Tue 31 Mar 2026 08:34:58 +0000
ROA not before:           Tue 31 Mar 2026 08:34:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24255
IP address blocks:        103.198.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Mar 31 08:34:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DB87A53C157963059DC239808E894FB52850A120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:a6:b5:8d:eb:70:4a:90:eb:2d:ce:ca:0c:
                    a4:c9:07:6d:e8:5d:f0:a1:1e:fe:09:54:b5:b9:b0:
                    11:ab:24:7e:2e:a3:73:19:ab:94:d5:45:51:0f:57:
                    63:4a:0a:fd:27:c5:35:c8:21:8e:24:5c:5d:97:1a:
                    e8:cc:b8:4f:15:07:bb:5f:48:e0:25:7b:9d:86:b3:
                    32:43:66:a6:f6:bb:57:3e:83:5a:26:45:ef:36:47:
                    db:fe:96:67:8b:b7:a7:50:67:62:be:5c:f3:5e:cb:
                    29:65:8f:2d:ff:84:51:9c:dd:b8:13:00:0d:44:62:
                    60:e1:44:81:45:a4:3f:58:c7:5e:f8:87:4a:b1:44:
                    4e:75:34:a0:37:2b:8f:02:cd:73:57:fb:0a:4d:41:
                    39:43:ca:f8:8b:b3:e6:f0:ae:0d:ce:ad:9e:42:25:
                    10:bb:0f:1e:db:da:dc:41:21:93:36:64:63:7b:f5:
                    0b:71:93:bd:69:b2:ab:c8:8c:2e:b9:81:2e:c4:a8:
                    e5:ab:6b:4c:61:ec:4e:45:47:b2:f7:2b:0d:65:d9:
                    7c:41:cd:bb:b4:d8:39:b1:f6:ee:2e:ee:d2:ec:e8:
                    43:89:fe:7a:e2:6c:28:ee:ec:b9:54:0a:a4:8b:fc:
                    62:67:a0:71:01:b4:4e:b4:74:a1:84:02:df:15:ea:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:87:A5:3C:15:79:63:05:9D:C2:39:80:8E:89:4F:B5:28:50:A1:20
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/24elPBV5YwWdwjmAjolPtShQoSA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:f2:60:de:9c:ca:43:8c:ce:c0:68:b3:37:a3:44:46:f8:36:
         df:c0:e5:1e:56:9a:49:3d:63:c2:dd:3a:13:19:a6:c4:09:39:
         f7:fb:5e:29:4c:91:b0:b6:7d:22:aa:ba:7e:04:f7:1b:54:63:
         6a:95:2d:b9:e0:e6:99:b6:b2:9d:d8:17:47:a7:fb:0a:2a:15:
         e9:32:56:49:39:43:63:1d:23:f6:5b:58:b5:16:ea:e4:28:d5:
         0a:11:6c:32:b2:cc:e1:d5:f5:6a:76:a4:69:28:5b:26:67:2a:
         c0:9e:69:fc:b1:e1:99:43:35:2f:23:e3:93:d6:74:2a:1c:93:
         5a:64:81:18:63:e8:f6:a9:d8:01:f7:4d:f4:79:8c:a2:7b:58:
         ba:d6:48:de:7d:05:b5:9d:b1:4e:ca:2b:db:d7:09:40:d8:b6:
         99:49:2f:04:35:b6:6a:86:41:fc:4f:5a:49:84:38:e2:3e:b6:
         fd:39:53:3f:3b:a8:57:6c:23:32:fc:79:b4:c2:2f:6d:2c:db:
         10:de:53:19:0f:e3:05:b7:39:20:aa:f8:44:d5:8f:ee:72:84:
         84:4f:c2:cf:a9:f3:fd:4d:33:eb:51:09:44:d8:39:3f:2c:b6:
         ce:eb:57:e7:c8:7a:85:ca:8d:29:10:3f:db:a2:9a:0b:00:9b:
         79:08:91:d1
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQUVG
NTdGRjE0NEQyNTA5NEU0NjBFMEZEMzhDODAzNzkzMzRFRDZEMB4XDTI2MDMzMTA4
MzQ1OFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREI4N0E1M0MxNTc5NjMw
NTlEQzIzOTgwOEU4OTRGQjUyODUwQTEyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALeGprWN63BKkOstzsoMpMkHbehd8KEe/glUtbmwEaskfi6jcxmr
lNVFUQ9XY0oK/SfFNcghjiRcXZca6My4TxUHu19I4CV7nYazMkNmpva7Vz6DWiZF
7zZH2/6WZ4u3p1BnYr5c817LKWWPLf+EUZzduBMADURiYOFEgUWkP1jHXviHSrFE
TnU0oDcrjwLNc1f7Ck1BOUPK+Iuz5vCuDc6tnkIlELsPHtva3EEhkzZkY3v1C3GT
vWmyq8iMLrmBLsSo5atrTGHsTkVHsvcrDWXZfEHNu7TYObH27i7u0uzoQ4n+euJs
KO7suVQKpIv8YmegcQG0TrR0oYQC3xXqLrkCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTbh6U8FXljBZ3COYCOiU+1KFChIDAfBgNVHSMEGDAWgBT671f/FE0lCU5GDg/T
jIA3kzTtbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA1Ly11OVhfeFJOSlFsT1JnNFAwNHlBTjVNMDdXMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy11OVhfeFJOSlFsT1JnNFAwNHlBTjVN
MDdXMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MDUvMjRlbFBCVjVZd1dkd2ptQWpvbFB0U2hRb1NBLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfG1DANBgkqhkiG9w0BAQsFAAOCAQEA
bvJg3pzKQ4zOwGizN6NERvg238DlHlaaST1jwt06ExmmxAk59/teKUyRsLZ9Iqq6
fgT3G1RjapUtueDmmbayndgXR6f7CioV6TJWSTlDYx0j9ltYtRbq5CjVChFsMrLM
4dX1anakaShbJmcqwJ5p/LHhmUM1LyPjk9Z0KhyTWmSBGGPo9qnYAfdN9HmMontY
utZI3n0FtZ2xTsor29cJQNi2mUkvBDW2aoZB/E9aSYQ44j62/TlTPzuoV2wjMvx5
tMIvbSzbEN5TGQ/jBbc5IKr4RNWP7nKEhE/Cz6nz/U0z61EJRNg5Pyy2zutX58h6
hcqNKRA/26KaCwCbeQiR0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:41 2026 by rpki-client