Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/xqYCuFQr2WOh4tnCDWm_s2uDOcE.roa
File:                     xqYCuFQr2WOh4tnCDWm_s2uDOcE.roa (raw, json)
Hash identifier:          HbL9YbFDJU/M17AYCenbpC3/dIAUba3DVa6TkyPxIjY=
Subject key identifier:   C6:A6:02:B8:54:2B:D9:63:A1:E2:D9:C2:0D:69:BF:B3:6B:83:39:C1
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       F3
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/xqYCuFQr2WOh4tnCDWm_s2uDOcE.roa
Signing time:             Tue 31 Mar 2026 07:39:00 +0000
ROA not before:           Tue 31 Mar 2026 07:39:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2518
IP address blocks:        210.151.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Mar 31 07:39:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C6A602B8542BD963A1E2D9C20D69BFB36B8339C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9f:1f:51:7d:fa:3b:79:6a:1a:3b:2c:e9:73:
                    b9:d9:36:20:6c:d8:d5:16:ee:fe:f8:5c:49:6a:4f:
                    42:ef:b1:5d:a2:d8:ec:1f:43:fc:09:8e:4f:75:96:
                    76:ce:71:96:e3:02:de:18:43:5a:74:86:7c:60:aa:
                    79:1d:a2:16:30:96:9b:f8:74:6d:e3:38:7f:1c:67:
                    43:04:4e:af:0c:65:f9:18:41:f6:f8:64:07:d4:3a:
                    a2:45:ed:da:85:47:59:1c:1d:55:0b:2f:65:5c:f1:
                    52:38:2d:6d:db:ed:8c:e7:fc:3c:da:41:dd:af:17:
                    55:6c:72:1c:b3:b1:9c:26:b8:db:91:03:72:73:89:
                    e0:c1:62:ef:62:42:ae:00:ae:dd:9f:8f:7a:75:e5:
                    48:d3:68:d3:53:09:0c:15:fd:a8:a6:47:3c:ca:d7:
                    cf:43:29:93:21:6a:1a:77:59:b4:52:bd:96:e4:3a:
                    76:a7:05:db:0d:c0:fc:4c:d9:4b:1e:21:23:b7:32:
                    b6:75:42:41:6f:6e:7e:55:80:6d:74:6a:a5:67:8d:
                    41:dc:f7:b0:e4:6c:cb:44:4f:7d:a6:de:e0:f2:e3:
                    6d:d1:00:46:17:7e:7d:fc:d8:0a:f1:2e:7f:f6:2d:
                    62:92:79:00:95:9f:0a:87:41:ae:c2:a3:ab:61:d5:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A6:02:B8:54:2B:D9:63:A1:E2:D9:C2:0D:69:BF:B3:6B:83:39:C1
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/xqYCuFQr2WOh4tnCDWm_s2uDOcE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.151.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         22:3d:07:b1:86:bf:3c:c8:94:04:6c:73:5f:b6:6c:e4:f1:50:
         17:0a:64:ee:af:10:54:5e:be:e9:17:65:23:d4:f7:fd:f1:e1:
         23:0d:5c:19:af:20:ac:7b:d6:84:c4:3c:6b:c2:74:92:c9:b9:
         9f:1f:b2:82:6b:bb:b3:f3:60:82:4c:a1:8c:6f:c6:bd:20:74:
         20:4b:5a:a6:53:e1:b4:c4:38:67:1f:b7:f0:70:ea:a6:af:52:
         4d:3a:47:2f:80:ff:87:90:68:2e:61:1a:af:0e:27:4b:32:c3:
         fe:47:c0:c1:25:04:ff:da:46:b8:58:3a:f6:26:af:f8:0f:25:
         32:17:1e:da:a8:51:64:8e:76:d9:45:98:e9:6c:30:47:83:80:
         86:8c:a9:ae:4a:fd:e0:44:d2:fb:e0:cf:5b:b1:84:17:2f:18:
         62:27:2f:39:6d:69:7c:02:62:a9:d0:e9:39:68:b5:bf:de:42:
         0d:d7:83:61:4b:47:5b:6a:df:54:76:c1:2b:dc:ab:a7:b2:85:
         5c:53:fb:ab:d9:c2:0d:2a:59:ed:65:b4:5c:73:17:47:75:2b:
         36:e9:75:09:84:2b:d3:84:bd:8f:d4:42:5c:11:6c:84:ba:a8:
         29:35:e9:b2:0c:72:11:b0:e8:da:e1:59:70:ae:ac:bf:a6:2d:
         97:28:80:97
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNjAzMzEw
NzM5MDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM2QTYwMkI4NTQyQkQ5
NjNBMUUyRDlDMjBENjlCRkIzNkI4MzM5QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvnx9Rffo7eWoaOyzpc7nZNiBs2NUW7v74XElqT0LvsV2i2Owf
Q/wJjk91lnbOcZbjAt4YQ1p0hnxgqnkdohYwlpv4dG3jOH8cZ0METq8MZfkYQfb4
ZAfUOqJF7dqFR1kcHVULL2Vc8VI4LW3b7Yzn/DzaQd2vF1VschyzsZwmuNuRA3Jz
ieDBYu9iQq4Art2fj3p15UjTaNNTCQwV/aimRzzK189DKZMhahp3WbRSvZbkOnan
BdsNwPxM2UseISO3MrZ1QkFvbn5VgG10aqVnjUHc97DkbMtET32m3uDy423RAEYX
fn382ArxLn/2LWKSeQCVnwqHQa7Co6th1QiBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUxqYCuFQr2WOh4tnCDWm/s2uDOcEwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvOTM5L3hxWUN1RlFyMldPaDR0bkNEV21fczJ1RE9jRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfSl4AwDQYJKoZIhvcNAQELBQADggEB
ACI9B7GGvzzIlARsc1+2bOTxUBcKZO6vEFRevukXZSPU9/3x4SMNXBmvIKx71oTE
PGvCdJLJuZ8fsoJru7PzYIJMoYxvxr0gdCBLWqZT4bTEOGcft/Bw6qavUk06Ry+A
/4eQaC5hGq8OJ0syw/5HwMElBP/aRrhYOvYmr/gPJTIXHtqoUWSOdtlFmOlsMEeD
gIaMqa5K/eBE0vvgz1uxhBcvGGInLzltaXwCYqnQ6Tlotb/eQg3Xg2FLR1tq31R2
wSvcq6eyhVxT+6vZwg0qWe1ltFxzF0d1KzbpdQmEK9OEvY/UQlwRbIS6qCk16bIM
chGw6NrhWXCurL+mLZcogJc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:22 2026 by rpki-client