Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/BkZblrTmEdcNmhjuuf0JDLbG2Yc.roa
File:                     BkZblrTmEdcNmhjuuf0JDLbG2Yc.roa (raw, json)
Hash identifier:          +Ppy8uvWutC94HxTjPsEnlwr35w8D8TEt32vpxAo2iY=
Subject key identifier:   06:46:5B:96:B4:E6:11:D7:0D:9A:18:EE:B9:FD:09:0C:B6:C6:D9:87
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       0109
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/BkZblrTmEdcNmhjuuf0JDLbG2Yc.roa
Signing time:             Tue 31 Mar 2026 07:39:15 +0000
ROA not before:           Tue 31 Mar 2026 07:39:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2518
IP address blocks:        61.203.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Mar 31 07:39:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=06465B96B4E611D70D9A18EEB9FD090CB6C6D987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:73:28:37:53:44:8e:f6:9c:69:7c:df:af:
                    af:78:14:e9:9e:f9:60:fa:27:61:02:92:2d:b2:77:
                    6d:25:e2:5f:4d:4f:22:c8:c9:99:26:23:ef:f8:b2:
                    2d:46:3c:dc:aa:ae:9e:36:a3:40:da:cd:b7:e9:21:
                    97:e0:b4:36:42:58:0f:f5:58:44:f5:90:f0:c5:69:
                    1b:b9:c2:b3:ca:4a:d0:10:d5:e6:7f:9e:4c:e0:63:
                    5c:18:ce:5b:97:e6:72:22:51:ff:db:cc:3e:c8:e6:
                    53:11:bc:d7:19:b6:f1:71:8f:0a:ff:a7:63:11:22:
                    a6:c5:20:0a:be:c5:d3:ca:87:a8:9e:10:be:f0:8e:
                    3a:c7:f1:9a:3d:ca:90:a3:e6:51:a4:48:ef:d7:3f:
                    49:50:63:b6:f7:0d:e2:7e:c4:38:09:14:ca:af:61:
                    47:a5:0f:4b:b6:ae:20:c6:79:57:24:53:de:54:c6:
                    7b:58:ff:58:25:c0:00:97:08:13:0e:66:ab:6e:a1:
                    5b:d5:39:d6:69:d3:58:f8:37:9d:df:96:a8:d5:d1:
                    cd:e6:0a:cc:ac:7a:a5:ca:4f:5a:01:fc:85:5e:d0:
                    00:6b:35:ea:e5:48:1d:07:e1:e8:1d:5d:a3:a1:38:
                    50:f9:9f:22:12:e9:05:1e:93:8d:db:48:73:33:07:
                    ac:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:46:5B:96:B4:E6:11:D7:0D:9A:18:EE:B9:FD:09:0C:B6:C6:D9:87
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/BkZblrTmEdcNmhjuuf0JDLbG2Yc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         62:79:43:99:61:2e:ce:5e:7c:69:40:1a:44:0a:53:ce:cd:41:
         88:17:80:8d:a2:05:83:8c:3e:8e:d5:e4:58:14:ed:69:55:60:
         d7:c8:33:15:93:9d:ad:5c:09:f7:d0:64:b4:69:16:2b:54:3e:
         bb:e2:17:cd:93:16:68:4d:6e:82:35:84:8f:c9:30:9f:5c:be:
         55:5c:66:98:b8:9d:5a:df:b9:7e:c2:48:00:20:56:c2:bb:ad:
         60:3c:69:a8:d6:66:85:ee:22:c8:12:3a:cf:03:4b:43:44:07:
         ca:78:49:ec:44:6d:24:34:1b:24:43:81:2f:21:fa:98:f3:8f:
         81:e7:fc:7c:75:b4:2f:4e:70:43:26:8b:2f:f3:e9:24:eb:12:
         03:ba:04:54:1e:b0:e7:32:3e:f0:a9:23:c5:0a:77:85:25:36:
         a8:77:0e:e2:b1:32:43:35:74:b1:9a:ec:22:39:72:be:ec:2f:
         85:e5:2f:bd:a8:70:a6:83:d1:5d:f7:70:02:6a:cf:b6:8b:7c:
         1c:ff:a6:55:cd:a5:e2:5e:fe:21:74:08:f7:a7:5f:eb:06:2f:
         40:f8:2e:e6:b0:e6:87:94:99:de:4f:3d:0f:50:2f:b0:81:8b:
         bb:f3:58:9b:31:12:18:cc:f5:60:31:2d:55:85:14:6c:97:07:
         ea:00:33:bd
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNjAzMzEw
NzM5MTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA2NDY1Qjk2QjRFNjEx
RDcwRDlBMThFRUI5RkQwOTBDQjZDNkQ5ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvw3MoN1NEjvacaXzfr694FOme+WD6J2ECki2yd20l4l9NTyLI
yZkmI+/4si1GPNyqrp42o0DazbfpIZfgtDZCWA/1WET1kPDFaRu5wrPKStAQ1eZ/
nkzgY1wYzluX5nIiUf/bzD7I5lMRvNcZtvFxjwr/p2MRIqbFIAq+xdPKh6ieEL7w
jjrH8Zo9ypCj5lGkSO/XP0lQY7b3DeJ+xDgJFMqvYUelD0u2riDGeVckU95UxntY
/1glwACXCBMOZqtuoVvVOdZp01j4N53flqjV0c3mCsyseqXKT1oB/IVe0ABrNerl
SB0H4egdXaOhOFD5nyIS6QUek43bSHMzB6ydAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUBkZblrTmEdcNmhjuuf0JDLbG2YcwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvOTM5L0JrWmJsclRtRWRjTm1oanV1ZjBKRExiRzJZYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc9ywAwDQYJKoZIhvcNAQELBQADggEB
AGJ5Q5lhLs5efGlAGkQKU87NQYgXgI2iBYOMPo7V5FgU7WlVYNfIMxWTna1cCffQ
ZLRpFitUPrviF82TFmhNboI1hI/JMJ9cvlVcZpi4nVrfuX7CSAAgVsK7rWA8aajW
ZoXuIsgSOs8DS0NEB8p4SexEbSQ0GyRDgS8h+pjzj4Hn/Hx1tC9OcEMmiy/z6STr
EgO6BFQesOcyPvCpI8UKd4UlNqh3DuKxMkM1dLGa7CI5cr7sL4XlL72ocKaD0V33
cAJqz7aLfBz/plXNpeJe/iF0CPenX+sGL0D4Luaw5oeUmd5PPQ9QL7CBi7vzWJsx
EhjM9WAxLVWFFGyXB+oAM70=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:20 2026 by rpki-client