Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/uwK6q0N32K4G3nSZwkioH0pv3i4.roa
File:                     uwK6q0N32K4G3nSZwkioH0pv3i4.roa (raw, json)
Hash identifier:          fck+30tLqD2uwbsFV3te3MKus3oS5d6iyor3GwiAiOE=
Subject key identifier:   BB:02:BA:AB:43:77:D8:AE:06:DE:74:99:C2:48:A8:1F:4A:6F:DE:2E
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       09
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/uwK6q0N32K4G3nSZwkioH0pv3i4.roa
Signing time:             Wed 25 Mar 2026 05:41:34 +0000
ROA not before:           Wed 25 Mar 2026 05:41:34 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        61.122.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 05:41:34 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=BB02BAAB4377D8AE06DE7499C248A81F4A6FDE2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:52:7c:50:42:82:a7:b7:72:3d:18:34:bb:
                    71:34:2d:f8:f8:0a:59:df:d6:86:69:9a:22:63:b4:
                    48:da:c7:b8:07:b0:10:cc:87:90:dd:48:f3:fc:25:
                    8f:82:0e:05:43:7c:0c:78:ca:92:83:44:20:37:92:
                    f7:b7:b6:75:d3:4b:e2:ec:10:9e:d5:e5:c3:ef:11:
                    cf:00:32:8d:8d:df:38:d0:fb:27:15:26:02:1b:88:
                    f7:0c:37:21:5a:0b:d1:97:7f:6a:a1:2c:16:52:e3:
                    c2:bf:ca:5b:5f:6b:a2:e6:3e:aa:ff:cc:e4:12:58:
                    28:fc:c3:4e:ed:23:1e:a9:d5:f5:a0:98:f5:be:c9:
                    67:c6:62:14:6f:49:96:3a:2b:63:35:82:6d:85:16:
                    f9:a2:8e:91:1d:56:6f:41:89:a5:63:38:b5:a1:65:
                    e5:be:6e:9c:b5:d0:20:65:53:46:a4:6e:6c:d9:ed:
                    03:8f:3f:81:33:27:9c:c6:9e:0a:2d:eb:83:28:21:
                    e2:1b:53:c4:f8:dc:11:82:2b:46:83:d3:26:d9:c7:
                    88:a5:e4:57:ea:5f:3b:37:32:77:10:3d:6e:3b:80:
                    d3:8e:8a:b2:a7:70:d3:c9:aa:f4:2e:bc:eb:9c:3c:
                    5a:44:95:7e:72:82:52:14:3f:64:ac:e7:84:26:f5:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:02:BA:AB:43:77:D8:AE:06:DE:74:99:C2:48:A8:1F:4A:6F:DE:2E
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/uwK6q0N32K4G3nSZwkioH0pv3i4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.122.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:c3:44:5f:7c:bc:b7:fe:51:fd:50:30:53:db:aa:7c:af:
         47:1e:6e:92:cc:4b:c8:95:84:e8:73:16:2b:c3:f1:41:23:8c:
         29:3e:ab:e2:c3:45:0a:31:2b:65:7c:ad:7c:47:e5:4c:30:f0:
         04:9c:81:78:87:23:2f:d9:57:5c:7e:00:d7:98:6f:77:9e:e4:
         c8:ae:8e:44:b6:6c:6d:38:62:b2:df:2b:48:01:97:b9:28:95:
         be:83:c1:40:35:8f:44:6b:04:67:16:4d:31:da:72:5b:ab:eb:
         5b:4c:92:7e:a5:78:3d:18:69:d8:4a:7b:ec:19:ea:b8:ef:68:
         f6:ea:70:2d:61:cd:b9:a7:61:d3:32:43:15:20:f6:8b:fd:c8:
         25:bc:38:8e:c7:88:33:81:76:43:e2:f0:86:f3:7d:52:89:13:
         f1:a9:d7:df:60:69:8e:fc:bc:b0:a9:5d:31:ec:0b:57:44:ed:
         19:f9:48:62:d6:21:41:3a:cc:c7:70:fb:ec:b0:ed:10:af:f3:
         9d:56:00:d4:5d:1a:fd:62:3f:71:45:4b:af:01:11:b4:b5:a8:
         0e:1d:8b:7a:cc:29:ae:f6:4f:d1:72:9f:ed:b3:ea:14:22:bb:
         ee:db:2b:4b:b0:57:5d:27:f6:02:85:72:86:84:89:ba:b0:4c:
         c4:96:3d:ca
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx
OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMyNTA1
NDEzNFoXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoQkIwMkJBQUI0Mzc3RDhB
RTA2REU3NDk5QzI0OEE4MUY0QTZGREUyRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKDMUnxQQoKnt3I9GDS7cTQt+PgKWd/WhmmaImO0SNrHuAewEMyH
kN1I8/wlj4IOBUN8DHjKkoNEIDeS97e2ddNL4uwQntXlw+8RzwAyjY3fOND7JxUm
AhuI9ww3IVoL0Zd/aqEsFlLjwr/KW19rouY+qv/M5BJYKPzDTu0jHqnV9aCY9b7J
Z8ZiFG9JljorYzWCbYUW+aKOkR1Wb0GJpWM4taFl5b5unLXQIGVTRqRubNntA48/
gTMnnMaeCi3rgygh4htTxPjcEYIrRoPTJtnHiKXkV+pfOzcydxA9bjuA046Ksqdw
08mq9C6865w8WkSVfnKCUhQ/ZKznhCb1hV8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS7ArqrQ3fYrgbedJnCSKgfSm/eLjAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe
nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL
bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80OTMvdXdLNnEwTjMySzRHM25TWndraW9IMHB2M2k0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD168DANBgkqhkiG9w0BAQsFAAOCAQEAVDzDRF98vLf+Uf1QMFPbqnyvRx5u
ksxLyJWE6HMWK8PxQSOMKT6r4sNFCjErZXytfEflTDDwBJyBeIcjL9lXXH4A15hv
d57kyK6ORLZsbThist8rSAGXuSiVvoPBQDWPRGsEZxZNMdpyW6vrW0ySfqV4PRhp
2Ep77BnquO9o9upwLWHNuadh0zJDFSD2i/3IJbw4jseIM4F2Q+LwhvN9UokT8anX
32Bpjvy8sKldMewLV0TtGflIYtYhQTrMx3D77LDtEK/znVYA1F0a/WI/cUVLrwER
tLWoDh2LeswprvZP0XKf7bPqFCK77tsrS7BXXSf2AoVyhoSJurBMxJY9yg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:55:40 2026 by rpki-client