Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/F1y_UJZhy-Re8KHz9sqkAe2mgDU.roa
File:                     F1y_UJZhy-Re8KHz9sqkAe2mgDU.roa (raw, json)
Hash identifier:          vs98BoAd3q2XoHRXrWpp355vZL3kBBdJABrhz8zQMbY=
Subject key identifier:   17:5C:BF:50:96:61:CB:E4:5E:F0:A1:F3:F6:CA:A4:01:ED:A6:80:35
Certificate issuer:       /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial:       70
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/F1y_UJZhy-Re8KHz9sqkAe2mgDU.roa
Signing time:             Thu 05 Nov 2026 01:17:56 +0000
ROA not before:           Thu 05 Nov 2026 01:17:56 +0000
ROA not after:            Fri 15 Oct 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        27.133.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
        Validity
            Not Before: Nov  5 01:17:56 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=175CBF509661CBE45EF0A1F3F6CAA401EDA68035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:45:a5:95:36:2b:d8:86:44:67:66:67:3a:
                    83:8a:d9:bc:09:8d:13:19:6f:35:13:3d:02:35:8b:
                    67:92:64:25:03:36:20:a8:3e:e9:cf:89:ba:e4:ab:
                    0d:a3:a4:15:15:21:06:29:fb:c1:69:2e:0b:6f:ae:
                    65:23:36:ee:e6:d7:5f:81:6e:80:6c:b4:06:ae:86:
                    ea:30:c8:f7:4d:08:b1:c5:c0:7f:01:4a:64:48:ad:
                    a3:f4:7c:95:91:07:08:c9:73:d6:d4:c6:a9:62:13:
                    1c:48:66:50:68:2e:66:01:35:e5:31:d5:b7:27:4d:
                    a4:2d:51:d4:54:cf:4e:03:90:ea:7d:2f:ac:3f:33:
                    63:44:ce:42:0a:5e:8d:b2:b0:f5:2e:63:7a:4a:44:
                    de:b5:37:6f:05:04:1c:75:58:86:38:5c:17:50:1e:
                    fd:2c:30:34:cb:d2:40:47:6f:98:00:4a:3b:4d:50:
                    14:b9:3e:7e:12:19:57:00:e3:bd:f7:02:d3:49:e1:
                    16:76:6e:0b:90:a2:7b:bb:3c:27:46:38:4f:5f:4f:
                    fe:3e:9f:31:ba:86:8d:fb:41:17:de:49:c0:a3:27:
                    d0:62:dd:59:fb:d7:88:cb:77:5a:ea:5b:dd:33:ed:
                    6a:81:9c:ec:56:18:c0:3d:d7:bf:8a:a2:5b:4f:eb:
                    db:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5C:BF:50:96:61:CB:E4:5E:F0:A1:F3:F6:CA:A4:01:ED:A6:80:35
            X509v3 Authority Key Identifier:
                keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/F1y_UJZhy-Re8KHz9sqkAe2mgDU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:c1:a2:fb:ad:60:57:e1:2a:db:9c:1e:63:6d:a8:76:a7:c1:
         18:c8:eb:b7:d0:33:9d:c1:d2:ef:7f:87:9d:c6:bf:8e:f4:7e:
         62:6c:bd:8e:c8:4c:27:19:e9:c2:95:3d:0b:cc:48:55:7d:f5:
         bb:d4:92:2a:c5:85:87:97:fc:bd:f7:f5:4f:0f:b0:2a:96:ce:
         9d:2b:ee:2e:9c:3d:d8:eb:7f:d8:63:7b:46:9f:f4:e1:46:32:
         4a:97:53:28:1a:8c:c7:7d:df:2a:36:b6:b4:ff:20:35:0e:b7:
         50:00:0b:7c:67:12:9e:68:9e:d2:43:61:47:f8:3e:9a:36:f9:
         d7:dd:87:01:fa:d6:e3:8a:c9:a3:f7:06:d0:c0:68:2b:f8:ac:
         0c:4a:d1:46:a9:59:0f:ce:41:d7:65:45:53:7a:68:18:2e:ec:
         cf:f2:0e:89:d7:f5:15:17:cf:78:39:02:21:f6:82:97:94:62:
         bc:5a:86:05:f2:ee:4b:37:c3:bb:49:5f:c4:65:e1:dd:7a:c7:
         b1:89:e0:ef:e1:3d:44:57:11:be:8e:6e:26:f1:78:65:a1:f6:
         19:7d:b3:d2:af:29:73:73:74:a5:69:f6:3e:d6:46:02:87:77:
         eb:0d:73:87:2a:17:15:69:e9:75:4d:bf:93:8a:95:09:41:e1:
         c2:88:00:85
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy
QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI2MTEwNTAx
MTc1NloXDTI3MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMTc1Q0JGNTA5NjYxQ0JF
NDVFRjBBMUYzRjZDQUE0MDFFREE2ODAzNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALC0RaWVNivYhkRnZmc6g4rZvAmNExlvNRM9AjWLZ5JkJQM2IKg+
6c+JuuSrDaOkFRUhBin7wWkuC2+uZSM27ubXX4FugGy0Bq6G6jDI900IscXAfwFK
ZEito/R8lZEHCMlz1tTGqWITHEhmUGguZgE15THVtydNpC1R1FTPTgOQ6n0vrD8z
Y0TOQgpejbKw9S5jekpE3rU3bwUEHHVYhjhcF1Ae/SwwNMvSQEdvmABKO01QFLk+
fhIZVwDjvfcC00nhFnZuC5Cie7s8J0Y4T19P/j6fMbqGjftBF95JwKMn0GLdWfvX
iMt3Wupb3TPtaoGc7FYYwD3Xv4qiW0/r2y8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQXXL9QlmHL5F7wofP2yqQB7aaANTAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5
YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi
SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yMzIvRjF5X1VKWmh5LVJlOEtIejlzcWtBZTJtZ0RVLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABuFzDANBgkqhkiG9w0BAQsFAAOCAQEA
T8Gi+61gV+Eq25weY22odqfBGMjrt9AzncHS73+Hnca/jvR+Ymy9jshMJxnpwpU9
C8xIVX31u9SSKsWFh5f8vff1Tw+wKpbOnSvuLpw92Ot/2GN7Rp/04UYySpdTKBqM
x33fKja2tP8gNQ63UAALfGcSnmie0kNhR/g+mjb5192HAfrW44rJo/cG0MBoK/is
DErRRqlZD85B12VFU3poGC7sz/IOidf1FRfPeDkCIfaCl5RivFqGBfLuSzfDu0lf
xGXh3XrHsYng7+E9RFcRvo5uJvF4ZaH2GX2z0q8pc3N0pWn2PtZGAod36w1zhyoX
FWnpdU2/k4qVCUHhwogAhQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:57:00 2026 by rpki-client