Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/xmv5XniQEgbAV-f_d2cXciksEDo.roa
File:                     xmv5XniQEgbAV-f_d2cXciksEDo.roa (raw, json)
Hash identifier:          EpJHDw9yoRrxoKvUtOcZRuX2mALGURohXbMRnYG6Ios=
Subject key identifier:   C6:6B:F9:5E:78:90:12:06:C0:57:E7:FF:77:67:17:72:29:2C:10:3A
Certificate issuer:       /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial:       4D
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/xmv5XniQEgbAV-f_d2cXciksEDo.roa
Signing time:             Sun 01 Feb 2026 01:29:55 +0000
ROA not before:           Sun 01 Feb 2026 01:29:55 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     131954
IP address blocks:        121.58.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
        Validity
            Not Before: Feb  1 01:29:55 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=C66BF95E78901206C057E7FF77671772292C103A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:60:fc:00:81:ec:df:a3:3e:23:91:ae:c0:c1:
                    93:f9:4b:f2:d4:ad:bf:ee:03:a6:97:7c:ad:74:3d:
                    5e:22:7c:e1:b3:66:58:f5:d5:e8:bc:e9:3d:99:ad:
                    c3:98:e2:d3:09:ae:f8:70:5a:9a:ed:9e:92:82:3c:
                    1e:47:15:95:1e:8a:3d:df:b0:5b:e6:7f:25:c9:d6:
                    77:cf:f6:b8:26:9a:f1:27:84:f7:27:c3:e0:78:bf:
                    f9:10:2b:18:d3:44:b8:7c:dd:fe:b5:07:78:b9:bd:
                    5a:b6:d3:f5:de:6d:fa:cb:40:0e:f7:1e:36:9e:7a:
                    2d:6b:d2:e1:92:6a:46:3c:b5:49:51:a9:5d:c6:1b:
                    ed:33:bb:d6:99:1c:64:13:65:ec:d4:a7:90:7a:46:
                    71:1b:fb:2a:27:b7:54:2f:da:1a:1f:e3:18:ff:03:
                    ef:be:22:1d:ec:fc:01:c3:14:cd:ca:93:46:6d:f4:
                    cf:44:b5:15:9d:8d:c7:da:81:96:81:c0:96:70:7b:
                    b6:9e:35:05:9e:e6:24:df:da:af:1a:c1:ee:3a:e6:
                    bb:13:ed:d7:36:d5:4e:c0:1a:73:c5:d7:6a:4c:9f:
                    32:7a:11:82:9d:3f:5c:1e:69:88:cd:bb:89:4d:ec:
                    32:5a:81:27:63:bb:1c:4b:25:97:e7:37:13:3d:95:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6B:F9:5E:78:90:12:06:C0:57:E7:FF:77:67:17:72:29:2C:10:3A
            X509v3 Authority Key Identifier:
                keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/xmv5XniQEgbAV-f_d2cXciksEDo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.58.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:24:04:8a:5e:94:2c:1f:39:d2:a4:57:a7:ef:c1:7c:e2:c9:
         62:f1:0c:c4:ba:5b:c6:c4:7a:b1:f8:39:d4:9d:c8:f6:6c:19:
         61:eb:e5:95:4c:5e:93:cf:0c:63:b3:de:5b:04:62:57:01:7d:
         9e:f5:6d:6f:7c:b5:eb:fa:f1:6e:80:78:0a:e0:7c:db:c2:70:
         a5:66:01:f4:69:2b:45:33:05:ed:bc:7c:11:73:4a:af:c0:1a:
         5b:52:61:d0:9e:f4:62:7f:07:14:77:f7:34:ec:c5:48:5c:52:
         1f:fc:70:fa:f7:0e:44:9a:07:49:7e:7a:26:70:30:e0:0f:e8:
         e8:16:72:aa:e3:1d:af:9c:2e:ce:d0:a2:cf:cd:1d:8f:31:35:
         e6:1a:98:a7:b2:58:31:6b:08:73:8a:ec:53:56:51:6d:dc:91:
         7e:f9:16:37:5a:76:57:9b:5e:9b:4e:d6:e2:e0:93:6e:0b:eb:
         8b:e6:58:a2:7e:98:68:60:51:cb:06:fa:1c:ad:88:54:74:9e:
         22:e9:fb:85:5b:86:fe:7d:d9:14:07:94:6d:f9:e6:8e:dd:ef:
         d6:a0:dd:4a:6a:c1:7f:75:68:de:84:eb:c1:35:65:d4:c6:05:
         08:3b:76:b1:8e:2d:89:89:89:81:c3:54:b3:f2:c6:7b:79:d5:
         51:84:de:f0
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjc4
REQ2QjYxQ0I2NzNCQTQ0MjNDODFCRjYzQTYxREQ3MjRFODQwMB4XDTI2MDIwMTAx
Mjk1NVoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoQzY2QkY5NUU3ODkwMTIw
NkMwNTdFN0ZGNzc2NzE3NzIyOTJDMTAzQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANJg/ACB7N+jPiORrsDBk/lL8tStv+4Dppd8rXQ9XiJ84bNmWPXV
6LzpPZmtw5ji0wmu+HBamu2ekoI8HkcVlR6KPd+wW+Z/JcnWd8/2uCaa8SeE9yfD
4Hi/+RArGNNEuHzd/rUHeLm9WrbT9d5t+stADvceNp56LWvS4ZJqRjy1SVGpXcYb
7TO71pkcZBNl7NSnkHpGcRv7Kie3VC/aGh/jGP8D774iHez8AcMUzcqTRm30z0S1
FZ2Nx9qBloHAlnB7tp41BZ7mJN/arxrB7jrmuxPt1zbVTsAac8XXakyfMnoRgp0/
XB5piM27iU3sMlqBJ2O7HEsll+c3Ez2Vas0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTGa/leeJASBsBX5/93ZxdyKSwQOjAfBgNVHSMEGDAWgBQWeN1rYctnO6RCPIG/
Y6Yd1yToQDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU0L0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRjazZFQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRj
azZFQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NTQveG12NVhuaVFFZ2JBVi1mX2QyY1hjaWtzRURvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3k6gDANBgkqhkiG9w0BAQsFAAOCAQEAjCQEil6ULB850qRXp+/BfOLJYvEM
xLpbxsR6sfg51J3I9mwZYevllUxek88MY7PeWwRiVwF9nvVtb3y16/rxboB4CuB8
28JwpWYB9GkrRTMF7bx8EXNKr8AaW1Jh0J70Yn8HFHf3NOzFSFxSH/xw+vcORJoH
SX56JnAw4A/o6BZyquMdr5wuztCiz80djzE15hqYp7JYMWsIc4rsU1ZRbdyRfvkW
N1p2V5tem07W4uCTbgvri+ZYon6YaGBRywb6HK2IVHSeIun7hVuG/n3ZFAeUbfnm
jt3v1qDdSmrBf3Vo3oTrwTVl1MYFCDt2sY4tiYmJgcNUs/LGe3nVUYTe8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:29:25 2026 by rpki-client