Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/433/3nIikKwnooBcMM8ZtgWH8-gae9o.roa
File:                     3nIikKwnooBcMM8ZtgWH8-gae9o.roa (raw, json)
Hash identifier:          U/mgiWgqbTVjflA/eOWV2fA+jWOKv8qANZalHmtKzAM=
Subject key identifier:   DE:72:22:90:AC:27:A2:80:5C:30:CF:19:B6:05:87:F3:E8:1A:7B:DA
Certificate issuer:       /CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
Certificate serial:       16
Authority key identifier: 56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/3nIikKwnooBcMM8ZtgWH8-gae9o.roa
Signing time:             Sat 21 Mar 2026 07:46:52 +0000
ROA not before:           Sat 21 Mar 2026 07:46:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18077
IP address blocks:        122.250.0.0/15 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 12:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
        Validity
            Not Before: Mar 21 07:46:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DE722290AC27A2805C30CF19B60587F3E81A7BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:78:de:9c:2c:2d:a8:d3:db:e5:e8:e2:d1:2e:
                    c7:8f:d7:d4:81:f5:e3:2a:af:24:8a:ca:4f:31:0f:
                    59:63:bd:d7:26:d8:18:57:1d:0d:69:38:33:d0:e0:
                    82:30:d4:b3:03:d7:d2:f0:02:18:b0:65:ce:7c:1f:
                    2a:a5:cf:3e:05:3c:79:97:fa:ec:52:ad:85:7e:37:
                    9f:a8:ee:f0:20:85:aa:7f:83:13:12:e5:33:6c:93:
                    7b:75:b6:e2:23:71:af:e3:c0:47:e4:9d:92:81:03:
                    de:47:22:f7:df:d5:b3:2e:29:8a:04:ca:42:c8:62:
                    f7:99:bf:fb:54:61:f1:89:27:28:cc:ca:bd:bd:29:
                    15:f2:c8:5f:ff:56:0a:09:de:9a:5a:c4:78:7b:f0:
                    88:35:8b:85:83:0c:23:1f:9f:ec:e0:ab:fb:af:72:
                    43:45:4b:21:0d:16:98:f1:97:aa:3f:af:ed:dc:0f:
                    38:27:13:69:a7:b0:1d:12:b8:6d:0e:96:b9:bd:e4:
                    96:13:0d:07:05:02:7b:82:a2:b3:7f:60:d0:87:d0:
                    5d:dd:e6:77:d4:91:2a:9d:cd:ba:df:53:51:f1:ea:
                    5b:9f:68:97:77:d1:34:76:e8:07:1c:92:6c:30:ab:
                    cf:2b:2f:ea:8b:9b:cc:27:8c:11:d4:65:a1:d4:ca:
                    e7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:72:22:90:AC:27:A2:80:5C:30:CF:19:B6:05:87:F3:E8:1A:7B:DA
            X509v3 Authority Key Identifier:
                keyid:56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/3nIikKwnooBcMM8ZtgWH8-gae9o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.250.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9c:ba:7b:83:88:f2:7e:51:9a:2f:f8:2c:d5:ff:3c:a3:eb:f1:
         1d:44:06:10:ff:b8:07:e3:3c:5b:e6:cf:2f:0e:ac:bf:c1:6b:
         79:00:11:e2:68:0c:c6:f3:24:2e:76:78:61:56:28:04:4a:2b:
         79:71:03:57:ab:51:47:e6:c5:28:ea:4d:aa:a5:03:fc:b5:77:
         8c:14:e0:b9:6b:fa:f5:02:0a:39:2f:40:4b:48:e5:b9:6e:d2:
         3a:c3:77:8f:c5:4d:d7:32:66:eb:b5:36:c6:ad:56:6c:ca:56:
         f0:df:99:42:49:78:58:a0:c1:ad:1f:74:98:fa:d3:23:8b:73:
         09:af:0e:c0:a9:c2:65:db:ed:22:d5:9b:b9:e8:88:bd:7f:24:
         45:a8:05:56:85:1b:f5:56:22:89:da:93:30:58:ad:b6:c2:1c:
         37:50:7f:61:8e:b6:84:48:03:4e:be:a1:5d:38:12:07:60:f9:
         0f:d0:bb:3d:3a:97:8c:56:07:5e:79:e2:5b:0f:00:41:dc:8d:
         1f:53:be:a6:d2:12:7d:8b:79:c1:ee:92:03:1a:8b:eb:f9:04:
         7f:39:ba:48:49:93:5a:c6:7e:9f:e9:17:79:da:43:8b:57:34:
         24:2c:48:37:0a:4b:76:d9:99:e2:d9:38:74:13:1a:f1:8a:9f:
         1e:f9:b3:08
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NkIy
NEUzODM4NDVBRkU3REFBNjMxQzAxRDgwRkI1MTZDMzQ4QkIwMB4XDTI2MDMyMTA3
NDY1MloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREU3MjIyOTBBQzI3QTI4
MDVDMzBDRjE5QjYwNTg3RjNFODFBN0JEQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO543pwsLajT2+Xo4tEux4/X1IH14yqvJIrKTzEPWWO91ybYGFcd
DWk4M9DggjDUswPX0vACGLBlznwfKqXPPgU8eZf67FKthX43n6ju8CCFqn+DExLl
M2yTe3W24iNxr+PAR+SdkoED3kci99/Vsy4pigTKQshi95m/+1Rh8YknKMzKvb0p
FfLIX/9WCgnemlrEeHvwiDWLhYMMIx+f7OCr+69yQ0VLIQ0WmPGXqj+v7dwPOCcT
aaewHRK4bQ6Wub3klhMNBwUCe4Kis39g0IfQXd3md9SRKp3Nut9TUfHqW59ol3fR
NHboBxySbDCrzysv6oubzCeMEdRlodTK5z8CAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBTeciKQrCeigFwwzxm2BYfz6Bp72jAfBgNVHSMEGDAWgBRWsk44OEWv59qmMcAd
gPtRbDSLsDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMzL1ZySk9PRGhGci1mYXBqSEFIWUQ3VVd3MGk3QS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ZySk9PRGhGci1mYXBqSEFIWUQ3VVd3
MGk3QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80MzMvM25JaWtLd25vb0JjTU04WnRnV0g4LWdhZTlvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAXr6MA0GCSqGSIb3DQEBCwUAA4IBAQCcunuDiPJ+UZov+CzV/zyj6/EdRAYQ
/7gH4zxb5s8vDqy/wWt5ABHiaAzG8yQudnhhVigESit5cQNXq1FH5sUo6k2qpQP8
tXeMFOC5a/r1Ago5L0BLSOW5btI6w3ePxU3XMmbrtTbGrVZsylbw35lCSXhYoMGt
H3SY+tMji3MJrw7AqcJl2+0i1Zu56Ii9fyRFqAVWhRv1ViKJ2pMwWK22whw3UH9h
jraESANOvqFdOBIHYPkP0Ls9OpeMVgdeeeJbDwBB3I0fU76m0hJ9i3nB7pIDGovr
+QR/ObpISZNaxn6f6Rd52kOLVzQkLEg3Ckt22Zni2Th0Exrxip8e+bMI
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:20 2026 by rpki-client