Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/ejQo8Mxrj0XCYz8zgC9h8sdgAIA.roa
File:                     ejQo8Mxrj0XCYz8zgC9h8sdgAIA.roa (raw, json)
Hash identifier:          pYFVpkm+KFCRDDgrar5aC6hz8EcMEsPw9Z//XKdJRIE=
Subject key identifier:   7A:34:28:F0:CC:6B:8F:45:C2:63:3F:33:80:2F:61:F2:C7:60:00:80
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       0107
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/ejQo8Mxrj0XCYz8zgC9h8sdgAIA.roa
Signing time:             Tue 31 Mar 2026 07:39:14 +0000
ROA not before:           Tue 31 Mar 2026 07:39:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2518
IP address blocks:        122.132.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Mar 31 07:39:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7A3428F0CC6B8F45C2633F33802F61F2C7600080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:f9:a2:6f:4f:fa:59:65:0f:97:b5:56:3c:
                    03:80:db:f5:bd:05:b6:89:d9:74:c9:76:6e:e2:6f:
                    ec:b8:d0:45:78:75:65:aa:ea:7c:29:d1:27:1c:c3:
                    71:33:aa:e4:b3:e3:44:86:e1:fa:7c:24:f2:01:12:
                    03:33:68:b0:85:31:6d:60:6f:a2:82:3e:54:56:da:
                    73:6c:b3:d2:26:b2:b2:0f:7b:a6:05:ff:9f:52:a7:
                    60:5f:6c:d5:64:7e:1f:63:24:97:59:1b:89:39:b0:
                    f4:fd:bb:59:95:ef:ef:ea:c3:88:21:e1:c3:1e:87:
                    9c:dd:05:c4:7d:78:67:18:ae:d0:4c:32:4c:fc:ed:
                    bf:d1:7e:26:25:af:e7:d9:b7:8b:87:40:ce:32:d1:
                    dd:9c:f5:b0:dd:8a:14:21:0d:51:12:f0:89:84:6b:
                    e3:8f:11:33:c6:2e:c3:d8:7e:83:a6:dc:30:42:3e:
                    da:64:f3:44:3d:db:00:b2:59:da:fe:03:eb:de:a3:
                    c0:04:62:11:98:86:b1:1a:92:68:aa:ff:4b:ac:fa:
                    d8:13:13:d4:d3:b3:e8:d3:3c:b1:cf:8b:89:bb:c2:
                    b3:e9:f1:cd:f2:00:f1:3f:e9:08:0d:c4:f4:b6:ec:
                    bb:a6:b1:28:f3:85:f5:7c:b3:a5:34:c0:8c:2a:36:
                    7b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:34:28:F0:CC:6B:8F:45:C2:63:3F:33:80:2F:61:F2:C7:60:00:80
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/ejQo8Mxrj0XCYz8zgC9h8sdgAIA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b5:98:33:31:7a:55:b3:7f:d2:92:e2:b7:a9:59:e7:e6:c2:a5:
         81:53:b2:36:63:74:45:e8:73:f2:fd:40:95:9c:5d:7c:85:36:
         79:ed:f5:32:b5:22:c7:99:60:5c:87:0f:06:0e:f5:1f:9f:fb:
         9a:f0:d2:aa:5a:25:6d:00:c0:7d:bd:da:f4:06:63:ae:b3:14:
         43:98:6a:46:a3:ac:26:12:1b:55:a0:9f:94:f9:68:2a:d4:84:
         1d:ab:61:31:75:3a:54:0c:13:ca:df:6d:af:53:8a:98:e5:7a:
         5e:bf:2c:97:97:1e:9f:ed:3a:07:4b:1b:6a:7e:f8:ad:ef:3d:
         2c:fa:f5:7b:43:c5:2f:6c:55:f5:7f:98:1b:66:a8:f6:a5:27:
         d3:a4:d7:c9:f7:71:15:dd:e1:b7:31:38:3f:6e:b3:7b:c7:e3:
         9f:53:48:49:1b:3c:8c:1d:14:6a:e2:d9:86:e9:5d:ab:22:f3:
         99:80:b6:af:11:04:8c:57:80:6c:a3:7e:36:fd:49:35:68:58:
         a7:d7:f9:f6:e1:e4:04:71:36:36:65:87:b2:2b:db:57:ec:30:
         a5:7f:fe:7a:4a:21:e3:ba:16:b9:4e:f4:70:41:a8:2b:6d:55:
         c6:03:91:fa:db:29:2e:cd:00:68:40:8d:84:e6:5a:a9:fc:15:
         fd:fe:04:bb
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNjAzMzEw
NzM5MTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdBMzQyOEYwQ0M2QjhG
NDVDMjYzM0YzMzgwMkY2MUYyQzc2MDAwODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLvPmib0/6WWUPl7VWPAOA2/W9BbaJ2XTJdm7ib+y40EV4dWWq
6nwp0Sccw3EzquSz40SG4fp8JPIBEgMzaLCFMW1gb6KCPlRW2nNss9ImsrIPe6YF
/59Sp2BfbNVkfh9jJJdZG4k5sPT9u1mV7+/qw4gh4cMeh5zdBcR9eGcYrtBMMkz8
7b/RfiYlr+fZt4uHQM4y0d2c9bDdihQhDVES8ImEa+OPETPGLsPYfoOm3DBCPtpk
80Q92wCyWdr+A+veo8AEYhGYhrEakmiq/0us+tgTE9TTs+jTPLHPi4m7wrPp8c3y
APE/6QgNxPS27LumsSjzhfV8s6U0wIwqNnvXAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUejQo8Mxrj0XCYz8zgC9h8sdgAIAwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvOTM5L2VqUW84TXhyajBYQ1l6OHpnQzloOHNkZ0FJQS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwJ6hDANBgkqhkiG9w0BAQsFAAOCAQEA
tZgzMXpVs3/SkuK3qVnn5sKlgVOyNmN0Rehz8v1AlZxdfIU2ee31MrUix5lgXIcP
Bg71H5/7mvDSqlolbQDAfb3a9AZjrrMUQ5hqRqOsJhIbVaCflPloKtSEHathMXU6
VAwTyt9tr1OKmOV6Xr8sl5cen+06B0sban74re89LPr1e0PFL2xV9X+YG2ao9qUn
06TXyfdxFd3htzE4P26ze8fjn1NISRs8jB0UauLZhuldqyLzmYC2rxEEjFeAbKN+
Nv1JNWhYp9f59uHkBHE2NmWHsivbV+wwpX/+ekoh47oWuU70cEGoK21VxgOR+tsp
Ls0AaECNhOZaqfwV/f4Euw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:38 2026 by rpki-client