Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/RV2Or1uhenoIZudcDMKqq7Xih0I.roa
File:                     RV2Or1uhenoIZudcDMKqq7Xih0I.roa (raw, json)
Hash identifier:          Dsv82obNqL5gPfXBIiJ5+NtdFi+8Lusm2Tk2K5Dngp4=
Subject key identifier:   45:5D:8E:AF:5B:A1:7A:7A:08:66:E7:5C:0C:C2:AA:AB:B5:E2:87:42
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       CB
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/RV2Or1uhenoIZudcDMKqq7Xih0I.roa
Signing time:             Tue 14 Jul 2026 01:18:20 +0000
ROA not before:           Tue 14 Jul 2026 01:18:20 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        125.3.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 15:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Jul 14 01:18:20 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=455D8EAF5BA17A7A0866E75C0CC2AAABB5E28742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:80:77:8b:9b:a7:97:7b:5f:91:c4:68:fa:
                    ba:9c:93:1c:3f:ee:af:63:40:d5:5a:00:67:77:3b:
                    d6:e6:64:96:76:06:df:59:b3:29:89:39:14:50:bb:
                    27:cb:cf:a8:91:2d:6d:5c:17:33:76:48:4a:b3:1d:
                    8b:d6:e4:c0:2a:fc:0e:12:8d:b7:44:a7:a0:97:34:
                    31:00:6e:65:fe:5a:b3:13:db:4a:6a:4d:40:c7:17:
                    05:70:21:3e:7c:cf:7d:53:b3:58:55:2a:bb:ba:8d:
                    71:c1:ca:34:a6:36:b8:b1:1f:29:01:6c:e7:3e:c2:
                    f5:12:0f:34:e0:4f:d1:24:d3:0a:2a:fb:84:f2:ad:
                    dc:7a:55:b0:57:d5:15:86:8f:0f:a5:dd:da:e5:13:
                    ab:e6:80:5e:76:90:16:f9:9a:82:6c:70:4b:86:59:
                    6b:c1:63:bc:e9:92:de:18:55:80:9d:9d:88:04:6b:
                    02:b1:6e:1f:39:fa:d0:75:1d:e4:c5:8b:7a:72:07:
                    6e:54:38:65:22:b6:c7:02:f6:d8:3e:d3:e8:0d:33:
                    34:6a:15:03:5a:6b:8e:97:2d:84:00:9e:ed:49:23:
                    bf:cd:2d:50:c7:5f:e3:4c:7f:02:74:ed:5f:5a:da:
                    42:d9:17:c1:85:b0:47:6c:55:ca:92:3b:fd:38:c0:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5D:8E:AF:5B:A1:7A:7A:08:66:E7:5C:0C:C2:AA:AB:B5:E2:87:42
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/RV2Or1uhenoIZudcDMKqq7Xih0I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.3.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:b5:af:81:f3:9a:7b:68:dc:55:fa:5d:f5:ce:5c:8c:78:2f:
         92:44:fd:7c:3d:89:e4:16:06:93:57:71:79:c0:df:c7:c7:0c:
         93:bc:29:4f:c6:77:e7:0f:39:57:65:1c:1a:c5:6c:03:a3:93:
         ff:e0:38:90:56:60:81:c2:41:d2:ae:14:7f:ad:ca:c1:7f:97:
         88:f7:8f:b3:2d:ad:22:b5:e0:47:e5:ca:cf:80:83:5a:a2:e3:
         32:b3:72:ce:38:e2:4a:f8:19:7a:88:3a:04:08:53:84:7c:e7:
         dc:fb:6f:77:17:f6:84:84:13:d8:17:9e:38:c8:af:81:43:bc:
         b9:d4:f3:07:a0:0e:62:b4:a0:a3:71:b0:2e:6f:79:e5:64:f5:
         c1:12:fa:3b:a4:e5:d9:3e:40:36:90:e2:72:6b:d0:cb:d8:57:
         dc:d2:d2:0c:f3:c7:97:a7:e5:9f:60:42:61:62:94:f0:14:dd:
         8c:57:2f:57:69:dc:87:cb:b2:a7:32:f1:29:e6:38:b1:af:64:
         d8:6e:4e:d7:d3:7c:9e:ca:35:f9:85:68:fb:64:f3:26:35:aa:
         71:01:bf:a9:dd:75:a5:ad:33:9f:cd:45:bf:a1:63:e7:18:6b:
         53:fb:f4:ef:e2:7b:8c:65:fc:fe:90:a2:32:10:3c:81:07:73:
         6e:5b:0a:5b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw
NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjA3MTQw
MTE4MjBaFw0yNzA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ1NUQ4RUFGNUJBMTdB
N0EwODY2RTc1QzBDQzJBQUFCQjVFMjg3NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLj4B3i5unl3tfkcRo+rqckxw/7q9jQNVaAGd3O9bmZJZ2Bt9Z
symJORRQuyfLz6iRLW1cFzN2SEqzHYvW5MAq/A4SjbdEp6CXNDEAbmX+WrMT20pq
TUDHFwVwIT58z31Ts1hVKru6jXHByjSmNrixHykBbOc+wvUSDzTgT9Ek0woq+4Ty
rdx6VbBX1RWGjw+l3drlE6vmgF52kBb5moJscEuGWWvBY7zpkt4YVYCdnYgEawKx
bh85+tB1HeTFi3pyB25UOGUitscC9tg+0+gNMzRqFQNaa46XLYQAnu1JI7/NLVDH
X+NMfwJ07V9a2kLZF8GFsEdsVcqSO/04wH1jAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQURV2Or1uhenoIZudcDMKqq7Xih0IwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn
opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt
YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzkzL1JWMk9yMXVoZW5vSVp1ZGNETUtxcTdYaWgwSS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR9A9AwDQYJKoZIhvcNAQELBQADggEB
ALC1r4Hzmnto3FX6XfXOXIx4L5JE/Xw9ieQWBpNXcXnA38fHDJO8KU/Gd+cPOVdl
HBrFbAOjk//gOJBWYIHCQdKuFH+tysF/l4j3j7MtrSK14Eflys+Ag1qi4zKzcs44
4kr4GXqIOgQIU4R859z7b3cX9oSEE9gXnjjIr4FDvLnU8wegDmK0oKNxsC5veeVk
9cES+juk5dk+QDaQ4nJr0MvYV9zS0gzzx5en5Z9gQmFilPAU3YxXL1dp3IfLsqcy
8SnmOLGvZNhuTtfTfJ7KNfmFaPtk8yY1qnEBv6nddaWtM5/NRb+hY+cYa1P79O/i
e4xl/P6QojIQPIEHc25bCls=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:54 2026 by rpki-client