Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/Yd8q6T63oEFIVfikb25Xx7Ut4sg.roa
File:                     Yd8q6T63oEFIVfikb25Xx7Ut4sg.roa (raw, json)
Hash identifier:          rJRVzI2XiKuPg9HN4BXe6770immB2DONx3a3BQwokOA=
Subject key identifier:   61:DF:2A:E9:3E:B7:A0:41:48:55:F8:A4:6F:6E:57:C7:B5:2D:E2:C8
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       0105
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Yd8q6T63oEFIVfikb25Xx7Ut4sg.roa
Signing time:             Tue 31 Mar 2026 07:39:13 +0000
ROA not before:           Tue 31 Mar 2026 07:39:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2518
IP address blocks:        203.136.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Mar 31 07:39:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=61DF2AE93EB7A0414855F8A46F6E57C7B52DE2C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:27:87:30:d6:1b:8d:a1:3a:b5:6c:2e:7a:
                    57:5b:70:c8:18:90:ae:4d:fe:62:5c:40:30:1c:6a:
                    40:83:03:20:a3:21:3c:97:c2:d5:d9:d4:42:59:a6:
                    e8:d4:ff:ab:9a:4a:15:0f:46:f1:cc:8b:96:32:6d:
                    6a:83:c9:5f:3e:4f:4f:ff:ec:ee:7f:32:4b:e4:0f:
                    08:aa:c5:d3:66:d7:34:c0:b1:db:7f:52:30:cc:17:
                    60:c1:47:3f:0b:9d:7c:9f:67:d8:b9:c2:49:2f:ad:
                    47:e0:77:0e:a6:4f:e1:2d:3f:08:d3:96:6f:bf:3d:
                    6c:32:6d:46:5e:5b:fb:41:d4:c0:a4:2c:43:ab:e8:
                    4d:90:8f:f3:aa:70:3d:d1:ea:97:fa:06:1b:2f:5f:
                    cf:63:1b:bc:33:58:47:86:da:fd:dc:b2:75:22:bf:
                    88:9e:be:85:31:54:b6:69:fa:5b:2a:74:d3:88:41:
                    72:d5:dc:35:d4:87:25:d9:f1:a9:1d:01:56:d7:5d:
                    ae:8a:ea:b2:3c:cc:ba:f6:c0:ad:9f:ec:9f:72:1e:
                    62:7f:a5:0e:dd:a1:11:87:a2:97:8c:38:52:66:0e:
                    25:ee:67:f2:29:0f:df:98:50:99:e4:fd:29:b9:d2:
                    a3:7c:0a:60:a2:23:d5:c7:ec:ab:0c:92:9d:5e:7f:
                    cb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DF:2A:E9:3E:B7:A0:41:48:55:F8:A4:6F:6E:57:C7:B5:2D:E2:C8
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Yd8q6T63oEFIVfikb25Xx7Ut4sg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:67:46:5d:e5:61:23:1c:2a:fd:57:8f:bb:6e:ce:2f:42:96:
         66:93:8c:2e:df:a6:ff:57:df:f6:a4:35:71:20:5e:3f:04:b9:
         52:e7:34:2e:f4:48:42:c3:18:33:d4:a7:fd:9d:eb:44:59:b2:
         88:e3:65:12:5f:a7:85:c4:2c:fb:7e:59:3e:03:f4:e6:4b:c4:
         18:70:af:f3:d9:8a:fd:4d:54:34:6e:fb:96:41:ae:e0:25:62:
         80:15:1f:02:02:3d:5d:3d:ec:b7:a6:86:08:51:f7:b8:26:72:
         42:e8:86:44:89:2d:d7:be:f4:91:c3:5c:4b:ef:dd:08:de:94:
         0f:98:29:27:ea:4a:d6:78:e3:74:b8:06:e6:7c:d7:b4:69:45:
         eb:cc:8a:16:1a:b6:9d:6f:47:90:0a:da:b4:91:64:fc:f7:0d:
         d3:73:0b:c3:a2:dc:28:df:fa:94:f9:54:7a:b6:e4:13:3a:5e:
         c1:b7:ec:93:05:b1:29:8b:1d:98:8c:3b:d8:e8:e9:8d:1a:83:
         7a:57:26:ad:14:98:1d:fd:23:bf:66:df:63:29:b4:27:25:cd:
         7a:26:40:95:33:c9:f1:bd:5a:ee:ea:50:05:5f:06:4e:4a:41:
         98:d4:9b:7c:37:1f:bb:23:32:c2:1a:53:6d:44:c8:54:fd:f2:
         98:66:fc:48
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNjAzMzEw
NzM5MTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYxREYyQUU5M0VCN0Ew
NDE0ODU1RjhBNDZGNkU1N0M3QjUyREUyQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPHyeHMNYbjaE6tWwueldbcMgYkK5N/mJcQDAcakCDAyCjITyX
wtXZ1EJZpujU/6uaShUPRvHMi5YybWqDyV8+T0//7O5/MkvkDwiqxdNm1zTAsdt/
UjDMF2DBRz8LnXyfZ9i5wkkvrUfgdw6mT+EtPwjTlm+/PWwybUZeW/tB1MCkLEOr
6E2Qj/OqcD3R6pf6BhsvX89jG7wzWEeG2v3csnUiv4ievoUxVLZp+lsqdNOIQXLV
3DXUhyXZ8akdAVbXXa6K6rI8zLr2wK2f7J9yHmJ/pQ7doRGHopeMOFJmDiXuZ/Ip
D9+YUJnk/Sm50qN8CmCiI9XH7KsMkp1ef8vJAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUYd8q6T63oEFIVfikb25Xx7Ut4sgwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvOTM5L1lkOHE2VDYzb0VGSVZmaWtiMjVYeDdVdDRzZy5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDLiDANBgkqhkiG9w0BAQsFAAOCAQEA
nGdGXeVhIxwq/VePu27OL0KWZpOMLt+m/1ff9qQ1cSBePwS5Uuc0LvRIQsMYM9Sn
/Z3rRFmyiONlEl+nhcQs+35ZPgP05kvEGHCv89mK/U1UNG77lkGu4CVigBUfAgI9
XT3st6aGCFH3uCZyQuiGRIkt1770kcNcS+/dCN6UD5gpJ+pK1njjdLgG5nzXtGlF
68yKFhq2nW9HkAratJFk/PcN03MLw6LcKN/6lPlUerbkEzpewbfskwWxKYsdmIw7
2OjpjRqDelcmrRSYHf0jv2bfYym0JyXNeiZAlTPJ8b1a7upQBV8GTkpBmNSbfDcf
uyMywhpTbUTIVP3ymGb8SA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:24 2026 by rpki-client