Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/s9Q-BTTXl5h-JbS2z-W49Va76os.roa
File:                     s9Q-BTTXl5h-JbS2z-W49Va76os.roa (raw, json)
Hash identifier:          bxoHBecgFL8VSaTcqMCfxZRXkyuHszdUUe3+pshI3v8=
Subject key identifier:   B3:D4:3E:05:34:D7:97:98:7E:25:B4:B6:CF:E5:B8:F5:56:BB:EA:8B
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       0F
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/s9Q-BTTXl5h-JbS2z-W49Va76os.roa
Signing time:             Wed 25 Mar 2026 05:47:29 +0000
ROA not before:           Wed 25 Mar 2026 05:47:29 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        61.213.128.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 05:47:29 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=B3D43E0534D797987E25B4B6CFE5B8F556BBEA8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:e2:d3:85:2f:b7:70:95:89:88:7d:68:69:
                    32:ad:96:78:bf:62:20:d0:74:06:02:24:2f:ed:6a:
                    be:ed:95:91:b0:b7:ee:8f:ef:31:7c:c8:67:6c:94:
                    c7:4e:8f:8d:29:6e:48:04:7c:cd:c8:3b:30:1f:45:
                    d1:f0:a2:49:01:33:a4:9e:a0:d4:f7:af:71:c1:bd:
                    4f:57:00:ca:85:05:b7:ae:53:63:b8:bb:da:f8:f7:
                    c9:b8:6f:35:32:fc:82:6e:35:25:bd:7d:99:da:d5:
                    c1:97:50:5d:93:2e:5e:b5:04:91:18:4c:76:ee:a0:
                    43:3e:89:ff:78:f9:76:d5:f3:1b:3e:a7:68:48:9c:
                    9a:03:34:66:1c:2c:ca:e7:62:1f:e1:3e:36:51:bf:
                    24:7a:ec:24:4d:87:32:cf:14:46:51:ac:96:78:f2:
                    c8:4e:dd:62:9d:e3:9d:0b:ba:c4:44:83:09:67:ac:
                    5f:48:64:c6:a9:c9:87:4d:18:19:ab:75:80:ba:e5:
                    4a:fd:25:aa:20:32:fb:96:00:8a:a4:a8:7d:35:b8:
                    aa:16:e9:d1:c3:1d:9c:84:1b:16:53:85:66:0d:0d:
                    34:37:78:23:f1:85:7b:6c:97:eb:8f:58:a8:23:6d:
                    6a:50:07:45:a5:dd:80:ff:af:c8:50:51:92:29:3f:
                    24:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D4:3E:05:34:D7:97:98:7E:25:B4:B6:CF:E5:B8:F5:56:BB:EA:8B
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/s9Q-BTTXl5h-JbS2z-W49Va76os.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:6b:ff:e0:4f:02:d3:7f:a1:a2:7e:e0:68:3d:95:c2:bf:d2:
         22:e9:7e:0c:f3:65:26:98:37:7f:2f:b2:7e:a7:f6:14:ea:d1:
         3b:72:78:f1:1a:93:23:ec:a4:11:e2:43:00:38:cb:5b:ba:a1:
         6c:f5:6d:0d:d7:c9:30:0b:40:5c:06:a7:d9:62:af:b9:4a:ee:
         49:79:33:1a:74:52:d7:02:95:f8:85:fe:0b:78:94:fc:98:96:
         01:b3:21:9f:6a:15:cb:16:cb:6f:ae:58:3a:48:84:97:ef:ff:
         ef:4f:ef:5e:ef:f8:e9:b9:a8:24:23:94:5f:a5:ed:dc:25:f7:
         32:46:39:35:06:58:f5:77:14:0d:2f:21:23:6a:b4:5d:69:12:
         25:41:72:bc:a9:cf:b7:78:60:8d:96:ae:c4:81:55:36:dd:cd:
         2e:80:39:85:c4:0a:6d:ff:fe:34:a5:61:08:be:b2:aa:7f:4e:
         9a:a5:bd:93:2d:09:2e:32:aa:f8:95:20:3a:0a:39:cc:b8:9d:
         8f:b3:a9:2b:92:71:b1:75:3e:6d:25:b5:99:07:bb:1b:3d:f7:
         59:d8:f7:6a:44:9b:2c:b4:85:25:48:28:4b:de:31:35:6d:a7:
         33:34:3a:e2:2c:76:ef:00:53:cd:c4:81:ba:0f:60:68:54:24:
         d1:ef:ea:66
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx
OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMyNTA1
NDcyOVoXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoQjNENDNFMDUzNEQ3OTc5
ODdFMjVCNEI2Q0ZFNUI4RjU1NkJCRUE4QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALM14tOFL7dwlYmIfWhpMq2WeL9iINB0BgIkL+1qvu2VkbC37o/v
MXzIZ2yUx06PjSluSAR8zcg7MB9F0fCiSQEzpJ6g1PevccG9T1cAyoUFt65TY7i7
2vj3ybhvNTL8gm41Jb19mdrVwZdQXZMuXrUEkRhMdu6gQz6J/3j5dtXzGz6naEic
mgM0ZhwsyudiH+E+NlG/JHrsJE2HMs8URlGslnjyyE7dYp3jnQu6xESDCWesX0hk
xqnJh00YGat1gLrlSv0lqiAy+5YAiqSofTW4qhbp0cMdnIQbFlOFZg0NNDd4I/GF
e2yX649YqCNtalAHRaXdgP+vyFBRkik/JKECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSz1D4FNNeXmH4ltLbP5bj1VrvqizAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe
nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL
bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80OTMvczlRLUJUVFhsNWgtSmJTMnotVzQ5VmE3Nm9zLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD3VgDANBgkqhkiG9w0BAQsFAAOCAQEABWv/4E8C03+hon7gaD2Vwr/SIul+
DPNlJpg3fy+yfqf2FOrRO3J48RqTI+ykEeJDADjLW7qhbPVtDdfJMAtAXAan2WKv
uUruSXkzGnRS1wKV+IX+C3iU/JiWAbMhn2oVyxbLb65YOkiEl+//70/vXu/46bmo
JCOUX6Xt3CX3MkY5NQZY9XcUDS8hI2q0XWkSJUFyvKnPt3hgjZauxIFVNt3NLoA5
hcQKbf/+NKVhCL6yqn9OmqW9ky0JLjKq+JUgOgo5zLidj7OpK5JxsXU+bSW1mQe7
Gz33Wdj3akSbLLSFJUgoS94xNW2nMzQ64ix27wBTzcSBug9gaFQk0e/qZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:16:51 2026 by rpki-client