Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/957/wmG2TuM7fOyf-Of13P9pK5Z3boo.roa
File:                     wmG2TuM7fOyf-Of13P9pK5Z3boo.roa (raw, json)
Hash identifier:          WaENVWamXp5Q+Q33aDYjZlo+7nwzyjA8I+goyIBXFEo=
Subject key identifier:   C2:61:B6:4E:E3:3B:7C:EC:9F:F8:E7:F5:DC:FF:69:2B:96:77:6E:8A
Certificate issuer:       /CN=60D0DEEE91CB41D21FE449CBC78CDFEF63771271
Certificate serial:       40
Authority key identifier: 60:D0:DE:EE:91:CB:41:D2:1F:E4:49:CB:C7:8C:DF:EF:63:77:12:71
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YNDe7pHLQdIf5EnLx4zf72N3EnE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/wmG2TuM7fOyf-Of13P9pK5Z3boo.roa
Signing time:             Thu 17 Sep 2026 09:11:59 +0000
ROA not before:           Thu 17 Sep 2026 09:11:59 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     131944
IP address blocks:        119.110.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YNDe7pHLQdIf5EnLx4zf72N3EnE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D0DEEE91CB41D21FE449CBC78CDFEF63771271
        Validity
            Not Before: Sep 17 09:11:59 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=C261B64EE33B7CEC9FF8E7F5DCFF692B96776E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:fa:b6:a6:92:92:d7:1c:ea:e9:d1:1a:28:
                    b7:c4:3e:9a:86:36:6c:ea:72:09:b0:d1:f4:98:23:
                    71:df:d4:fb:a2:bf:f3:55:85:37:4d:46:af:0b:91:
                    7f:52:7c:70:1c:7e:b2:a2:e7:52:2a:35:01:bb:26:
                    f1:6b:31:83:cc:55:3b:e5:26:b6:7f:3e:bf:4c:8d:
                    d3:a0:91:ff:25:95:ec:7c:3c:13:fc:15:3c:d4:fc:
                    64:72:39:96:42:84:86:b6:4f:bd:5a:a2:63:e1:43:
                    13:b5:fb:57:9f:fd:3b:d4:d1:4a:3e:06:09:35:8d:
                    72:01:ed:3b:6b:42:ff:04:e3:f3:4b:5d:39:ea:07:
                    89:67:1d:ca:a4:4b:cb:e0:33:17:dd:5f:9e:89:33:
                    ef:f7:a1:cc:37:64:3d:11:b6:59:52:d6:f1:4b:25:
                    53:7b:4f:eb:32:36:76:97:2c:78:f0:47:6b:5c:2e:
                    67:8a:ac:3f:3e:aa:9a:15:a7:4d:37:97:50:f2:d5:
                    83:1d:8d:8f:9c:0e:24:b5:9f:d3:7c:dd:0c:8c:e6:
                    16:58:d2:fe:5c:66:73:fa:55:cb:63:6e:61:5e:1d:
                    83:87:10:84:06:a8:1a:80:87:f3:44:5f:d8:80:a4:
                    cb:57:4a:16:6f:7c:35:39:b7:da:37:ba:94:83:49:
                    3e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:61:B6:4E:E3:3B:7C:EC:9F:F8:E7:F5:DC:FF:69:2B:96:77:6E:8A
            X509v3 Authority Key Identifier:
                keyid:60:D0:DE:EE:91:CB:41:D2:1F:E4:49:CB:C7:8C:DF:EF:63:77:12:71

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YNDe7pHLQdIf5EnLx4zf72N3EnE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/wmG2TuM7fOyf-Of13P9pK5Z3boo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ee:55:f5:3a:59:db:92:84:06:a0:eb:e9:a3:e4:1d:43:cc:
         db:eb:50:7b:cb:f0:58:44:a5:b8:fd:f7:06:f4:2f:49:3c:2c:
         27:b6:9a:13:93:5a:21:9a:a6:c0:5b:88:d2:3b:e4:b7:66:2a:
         74:4e:ec:ee:b9:8b:6b:42:f3:41:b4:bd:b5:7c:85:64:30:01:
         6f:49:55:55:89:6f:18:aa:7c:29:fb:d0:72:77:fd:79:ba:52:
         0b:ff:89:eb:b7:bc:07:3a:7f:9a:00:e1:fd:ff:6d:16:9a:ab:
         71:05:49:76:1c:50:50:32:6a:81:49:2d:59:b1:cb:5a:45:19:
         55:46:3a:10:c4:29:fa:74:7e:22:b9:63:58:b1:45:4b:51:4d:
         3d:66:ca:23:31:c6:27:32:e3:78:10:66:47:f4:94:43:3a:5b:
         d4:ca:b9:ff:45:79:64:de:6f:06:6c:d4:0e:3b:ef:29:27:d7:
         f8:c8:ef:9e:91:32:61:ec:a0:ea:4e:fb:f9:77:dd:68:cd:2f:
         17:5a:72:03:5c:1d:be:9e:05:3d:7e:5e:1c:ef:27:46:a7:ea:
         22:c2:18:0c:77:37:27:4a:85:f5:3a:c3:63:2e:12:59:3d:75:
         6c:dd:21:c2:2c:10:84:6d:2c:4b:08:cc:c1:9e:44:d0:c4:08:
         01:3d:58:df
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MEQw
REVFRTkxQ0I0MUQyMUZFNDQ5Q0JDNzhDREZFRjYzNzcxMjcxMB4XDTI2MDkxNzA5
MTE1OVoXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoQzI2MUI2NEVFMzNCN0NF
QzlGRjhFN0Y1RENGRjY5MkI5Njc3NkU4QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANwg+ramkpLXHOrp0Root8Q+moY2bOpyCbDR9Jgjcd/U+6K/81WF
N01GrwuRf1J8cBx+sqLnUio1Absm8Wsxg8xVO+Umtn8+v0yN06CR/yWV7Hw8E/wV
PNT8ZHI5lkKEhrZPvVqiY+FDE7X7V5/9O9TRSj4GCTWNcgHtO2tC/wTj80tdOeoH
iWcdyqRLy+AzF91fnokz7/ehzDdkPRG2WVLW8UslU3tP6zI2dpcsePBHa1wuZ4qs
Pz6qmhWnTTeXUPLVgx2Nj5wOJLWf03zdDIzmFljS/lxmc/pVy2NuYV4dg4cQhAao
GoCH80Rf2ICky1dKFm98NTm32je6lINJPsECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTCYbZO4zt87J/45/Xc/2krlnduijAfBgNVHSMEGDAWgBRg0N7ukctB0h/kScvH
jN/vY3cScTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU3L1lORGU3cEhMUWRJZjVFbkx4NHpmNzJOM0VuRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1lORGU3cEhMUWRJZjVFbkx4NHpmNzJO
M0VuRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85NTcvd21HMlR1TTdmT3lmLU9mMTNQOXBLNVozYm9vLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHduXDANBgkqhkiG9w0BAQsFAAOCAQEA
L+5V9TpZ25KEBqDr6aPkHUPM2+tQe8vwWESluP33BvQvSTwsJ7aaE5NaIZqmwFuI
0jvkt2YqdE7s7rmLa0LzQbS9tXyFZDABb0lVVYlvGKp8KfvQcnf9ebpSC/+J67e8
Bzp/mgDh/f9tFpqrcQVJdhxQUDJqgUktWbHLWkUZVUY6EMQp+nR+IrljWLFFS1FN
PWbKIzHGJzLjeBBmR/SUQzpb1Mq5/0V5ZN5vBmzUDjvvKSfX+MjvnpEyYeyg6k77
+XfdaM0vF1pyA1wdvp4FPX5eHO8nRqfqIsIYDHc3J0qF9TrDYy4SWT11bN0hwiwQ
hG0sSwjMwZ5E0MQIAT1Y3w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:51:19 2026 by rpki-client