Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/likNXSfsR3zxNst09YAYtA8fzgw.roa
File:                     likNXSfsR3zxNst09YAYtA8fzgw.roa (raw, json)
Hash identifier:          6tTLsMr0Cp8eNROPjEbeyW6fO/YmWlMzpSQNNlJCFRc=
Subject key identifier:   96:29:0D:5D:27:EC:47:7C:F1:36:CB:74:F5:80:18:B4:0F:1F:CE:0C
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       010C
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/likNXSfsR3zxNst09YAYtA8fzgw.roa
Signing time:             Tue 31 Mar 2026 07:39:16 +0000
ROA not before:           Tue 31 Mar 2026 07:39:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2518
IP address blocks:        61.193.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Mar 31 07:39:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=96290D5D27EC477CF136CB74F58018B40F1FCE0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:f8:94:b9:37:5b:ee:25:76:30:ac:52:1c:
                    28:bc:b4:1d:3e:c8:4a:b2:72:07:51:a6:d7:d6:c2:
                    c5:55:a5:21:33:95:73:cf:0a:88:5b:13:34:36:f7:
                    87:ff:c3:e4:56:51:d2:93:41:e9:f9:cb:bf:85:9e:
                    11:5a:a4:52:fb:de:86:e8:9e:99:47:de:85:19:b3:
                    82:67:1d:4a:7f:f9:6e:0a:3e:67:35:29:ab:cb:e5:
                    fe:5e:75:bf:0a:1f:94:ba:75:4e:2f:17:92:f9:ca:
                    63:9e:1e:b6:c1:d2:20:f7:e5:b3:fc:dc:08:92:29:
                    43:f1:d6:08:01:6d:5b:54:3b:1a:38:dd:a2:26:c9:
                    e3:74:78:ac:46:ac:3d:7c:0f:1d:b5:4a:ab:f1:70:
                    a3:ff:63:27:5c:ca:87:b1:a7:3b:e1:44:4b:a0:5b:
                    86:9b:86:ad:11:ee:0a:7d:ad:91:cf:23:f6:ac:bd:
                    8d:b0:2b:8f:f0:2e:ff:d9:94:31:5a:c4:00:52:bb:
                    59:c9:f6:3e:36:17:6e:f5:5f:2a:56:99:c1:50:c2:
                    25:cf:24:5a:d9:29:56:45:a1:8f:59:36:f9:7f:20:
                    9b:ed:c3:6d:59:d2:8e:2d:0d:c0:89:ae:de:87:95:
                    52:84:96:33:e8:7d:cf:ec:bc:d8:a8:1a:3d:a5:26:
                    62:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:29:0D:5D:27:EC:47:7C:F1:36:CB:74:F5:80:18:B4:0F:1F:CE:0C
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/likNXSfsR3zxNst09YAYtA8fzgw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.193.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5a:22:d5:fb:53:89:81:03:c9:c4:01:69:cc:38:57:7a:35:23:
         ae:93:35:5d:72:a3:e0:79:6a:35:2c:96:20:51:69:13:1a:a9:
         8b:2d:2f:bc:63:98:25:be:51:a2:82:e8:0f:03:46:8a:99:31:
         98:05:aa:e9:2a:f5:ad:09:78:68:6f:29:10:ac:81:7b:09:c8:
         6b:7a:59:5f:c1:d6:8f:df:51:79:33:0d:e9:68:f9:57:09:8b:
         28:f2:08:2f:ce:af:66:11:68:7e:81:fa:fa:eb:9a:36:f0:95:
         3f:de:18:cf:1e:f7:6e:7f:b9:4a:ec:83:fd:6b:d5:d2:05:03:
         78:55:3d:9b:d7:b4:90:e1:89:78:f1:74:af:b9:2c:3e:b6:75:
         ab:71:4e:69:77:2a:a4:db:9e:93:3b:3c:cb:8b:80:0e:24:c6:
         e2:fb:69:73:f9:3c:3b:aa:4a:e4:63:da:c8:f2:e5:8a:6b:f2:
         e9:38:ca:5f:09:18:21:09:d9:ea:f7:54:b2:75:fb:79:0f:2f:
         1f:cd:11:c8:a2:70:15:1d:50:fb:83:bc:3b:e5:35:53:b2:ec:
         50:1f:72:f3:8e:27:d5:45:34:db:35:d6:09:b4:59:5a:d1:c4:
         16:47:b9:71:c8:5f:1f:fe:5a:b5:3c:8a:ca:06:b4:d7:93:d1:
         0f:4b:cd:c9
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNjAzMzEw
NzM5MTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk2MjkwRDVEMjdFQzQ3
N0NGMTM2Q0I3NEY1ODAxOEI0MEYxRkNFMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3k/iUuTdb7iV2MKxSHCi8tB0+yEqycgdRptfWwsVVpSEzlXPP
CohbEzQ294f/w+RWUdKTQen5y7+FnhFapFL73obonplH3oUZs4JnHUp/+W4KPmc1
KavL5f5edb8KH5S6dU4vF5L5ymOeHrbB0iD35bP83AiSKUPx1ggBbVtUOxo43aIm
yeN0eKxGrD18Dx21SqvxcKP/YydcyoexpzvhREugW4abhq0R7gp9rZHPI/asvY2w
K4/wLv/ZlDFaxABSu1nJ9j42F271XypWmcFQwiXPJFrZKVZFoY9ZNvl/IJvtw21Z
0o4tDcCJrt6HlVKEljPofc/svNioGj2lJmKJAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUlikNXSfsR3zxNst09YAYtA8fzgwwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvOTM5L2xpa05YU2ZzUjN6eE5zdDA5WUFZdEE4Znpndy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc9wQAwDQYJKoZIhvcNAQELBQADggEB
AFoi1ftTiYEDycQBacw4V3o1I66TNV1yo+B5ajUsliBRaRMaqYstL7xjmCW+UaKC
6A8DRoqZMZgFqukq9a0JeGhvKRCsgXsJyGt6WV/B1o/fUXkzDelo+VcJiyjyCC/O
r2YRaH6B+vrrmjbwlT/eGM8e925/uUrsg/1r1dIFA3hVPZvXtJDhiXjxdK+5LD62
datxTml3KqTbnpM7PMuLgA4kxuL7aXP5PDuqSuRj2sjy5Ypr8uk4yl8JGCEJ2er3
VLJ1+3kPLx/NEciicBUdUPuDvDvlNVOy7FAfcvOOJ9VFNNs11gm0WVrRxBZHuXHI
Xx/+WrU8isoGtNeT0Q9Lzck=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:45 2026 by rpki-client