Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20294/_5pKuFTfMS2H0cvodF_wev6kDQs.roa
File:                     _5pKuFTfMS2H0cvodF_wev6kDQs.roa (raw, json)
Hash identifier:          kUZEitkquw67oZTJNleX1YntfcxsawjWjLyJ/+nzuls=
Subject key identifier:   FF:9A:4A:B8:54:DF:31:2D:87:D1:CB:E8:74:5F:F0:7A:FE:A4:0D:0B
Certificate issuer:       /CN=9F9C0AA00FEF558C8886CCD6C1155090A16A657A
Certificate serial:       02
Authority key identifier: 9F:9C:0A:A0:0F:EF:55:8C:88:86:CC:D6:C1:15:50:90:A1:6A:65:7A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n5wKoA_vVYyIhszWwRVQkKFqZXo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20294/_5pKuFTfMS2H0cvodF_wev6kDQs.roa
Signing time:             Tue 21 Jul 2026 09:37:01 +0000
ROA not before:           Tue 21 Jul 2026 09:37:01 +0000
ROA not after:            Wed 21 Jul 2027 09:25:07 +0000
asID:                     38637
IP address blocks:        162.4.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20294/n5wKoA_vVYyIhszWwRVQkKFqZXo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20294/n5wKoA_vVYyIhszWwRVQkKFqZXo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n5wKoA_vVYyIhszWwRVQkKFqZXo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9C0AA00FEF558C8886CCD6C1155090A16A657A
        Validity
            Not Before: Jul 21 09:37:01 2026 GMT
            Not After : Jul 21 09:25:07 2027 GMT
        Subject: CN=FF9A4AB854DF312D87D1CBE8745FF07AFEA40D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:16:65:d0:f5:45:1c:5a:18:ad:a4:a8:c2:
                    41:24:d8:06:53:94:bf:0e:2b:23:e6:45:42:4f:80:
                    2c:a5:48:a2:d2:86:5b:d9:f3:fb:5e:94:ee:c1:3d:
                    ba:94:da:ba:a0:fe:7a:3e:fa:77:bd:4e:e6:0f:83:
                    00:32:ad:0d:63:d1:b0:15:b7:c8:57:74:ff:7b:65:
                    1c:02:e1:b7:9f:06:e2:1c:4a:24:75:2a:86:56:37:
                    ee:ab:77:23:3e:2d:36:32:29:7c:ea:b7:bd:59:85:
                    c2:23:d1:ca:c8:38:4b:6f:0f:38:8b:a9:f4:1d:5f:
                    5a:e7:b9:7e:17:8a:70:9c:d6:7d:1b:09:a4:9c:e1:
                    b0:0f:dc:54:f9:1a:8a:bc:f3:d0:7d:1a:78:78:a6:
                    60:59:cc:e6:8b:e1:ec:d3:00:de:36:dd:3c:f1:c1:
                    b9:da:5b:3f:74:fe:be:31:88:af:d3:07:9a:83:ba:
                    72:8b:4d:97:24:89:94:0d:83:2b:cf:98:c6:d2:d5:
                    d0:5e:f3:97:37:85:12:65:a3:79:ca:4e:63:2d:5d:
                    1d:2d:17:81:7c:ef:bd:80:54:70:76:17:24:74:e7:
                    fc:69:4c:f5:b8:4e:db:f1:8c:18:a2:63:5b:15:6e:
                    07:05:21:2e:ea:67:f9:63:b9:90:a6:78:1d:dd:2c:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9A:4A:B8:54:DF:31:2D:87:D1:CB:E8:74:5F:F0:7A:FE:A4:0D:0B
            X509v3 Authority Key Identifier:
                keyid:9F:9C:0A:A0:0F:EF:55:8C:88:86:CC:D6:C1:15:50:90:A1:6A:65:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20294/n5wKoA_vVYyIhszWwRVQkKFqZXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n5wKoA_vVYyIhszWwRVQkKFqZXo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20294/_5pKuFTfMS2H0cvodF_wev6kDQs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:57:42:52:af:c8:cc:72:50:17:9c:fd:98:8e:9f:2c:1a:d2:
         1e:28:c3:e4:69:15:6c:6a:19:5f:8b:ff:ec:d1:a5:90:71:cc:
         82:15:d2:aa:c2:a4:3e:70:4f:98:58:e7:f0:eb:b4:87:3f:91:
         2d:da:03:ce:f0:8a:96:32:ea:4f:78:eb:55:7f:09:07:b6:ee:
         47:3c:b8:9a:21:d9:43:8f:19:50:d3:8d:54:ce:ba:96:78:28:
         7d:bc:f0:f2:23:bc:94:1b:02:69:24:00:9d:d6:b5:b3:58:8d:
         11:cb:9c:59:f2:a6:47:88:0a:ff:eb:12:3c:d1:e9:60:06:2a:
         4b:14:b7:f2:b6:21:34:7a:05:a8:2f:e5:d7:a9:d0:72:dc:54:
         7f:11:3a:3b:aa:dd:5f:b7:eb:89:56:60:24:14:d8:ed:a1:1e:
         09:b3:f5:ac:18:49:f9:af:aa:3a:b1:b8:62:58:0f:03:ef:73:
         6c:e1:b1:a3:ed:ae:9c:97:07:65:37:56:9b:d0:94:16:48:5b:
         8a:8c:00:a5:4b:7b:69:47:64:4c:4b:c9:a9:5f:62:d4:66:15:
         c8:ba:c6:13:e7:dc:7f:ec:bd:73:85:f8:af:49:b9:07:28:c9:
         c1:2b:53:1e:25:47:44:31:0e:4a:e6:d5:4d:52:1b:3b:d5:28:
         50:74:2d:0f
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RjlD
MEFBMDBGRUY1NThDODg4NkNDRDZDMTE1NTA5MEExNkE2NTdBMB4XDTI2MDcyMTA5
MzcwMVoXDTI3MDcyMTA5MjUwN1owMzExMC8GA1UEAxMoRkY5QTRBQjg1NERGMzEy
RDg3RDFDQkU4NzQ1RkYwN0FGRUE0MEQwQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALWIFmXQ9UUcWhitpKjCQSTYBlOUvw4rI+ZFQk+ALKVIotKGW9nz
+16U7sE9upTauqD+ej76d71O5g+DADKtDWPRsBW3yFd0/3tlHALht58G4hxKJHUq
hlY37qt3Iz4tNjIpfOq3vVmFwiPRysg4S28POIup9B1fWue5fheKcJzWfRsJpJzh
sA/cVPkairzz0H0aeHimYFnM5ovh7NMA3jbdPPHBudpbP3T+vjGIr9MHmoO6cotN
lySJlA2DK8+YxtLV0F7zlzeFEmWjecpOYy1dHS0XgXzvvYBUcHYXJHTn/GlM9bhO
2/GMGKJjWxVuBwUhLupn+WO5kKZ4Hd0sap0CAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBT/mkq4VN8xLYfRy+h0X/B6/qQNCzAfBgNVHSMEGDAWgBSfnAqgD+9VjIiGzNbB
FVCQoWplejAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyOTQvbjV3S29BX3ZWWXlJaHN6V3dSVlFrS0ZxWlhvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbjV3S29BX3ZWWXlJaHN6V3dSVlFr
S0ZxWlhvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjk0L181cEt1RlRmTVMySDBjdm9kRl93ZXY2a0RRcy5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGiBBwwDQYJKoZIhvcNAQELBQAD
ggEBALZXQlKvyMxyUBec/ZiOnywa0h4ow+RpFWxqGV+L/+zRpZBxzIIV0qrCpD5w
T5hY5/DrtIc/kS3aA87wipYy6k9461V/CQe27kc8uJoh2UOPGVDTjVTOupZ4KH28
8PIjvJQbAmkkAJ3WtbNYjRHLnFnypkeICv/rEjzR6WAGKksUt/K2ITR6Bagv5dep
0HLcVH8ROjuq3V+364lWYCQU2O2hHgmz9awYSfmvqjqxuGJYDwPvc2zhsaPtrpyX
B2U3VpvQlBZIW4qMAKVLe2lHZExLyalfYtRmFci6xhPn3H/svXOF+K9JuQcoycEr
Ux4lR0QxDkrm1U1SGzvVKFB0LQ8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:31 2026 by rpki-client