Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/0fuuKOBmOFBDP_TKtANA8ayJ-mg.roa
File:                     0fuuKOBmOFBDP_TKtANA8ayJ-mg.roa (raw, json)
Hash identifier:          e8VMYQ5GF2ORVz43Q1u/v1QSYXvak4bJPDsTvlz9rwI=
Subject key identifier:   D1:FB:AE:28:E0:66:38:50:43:3F:F4:CA:B4:03:40:F1:AC:89:FA:68
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       61
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/0fuuKOBmOFBDP_TKtANA8ayJ-mg.roa
Signing time:             Tue 31 Mar 2026 07:51:48 +0000
ROA not before:           Tue 31 Mar 2026 07:51:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     138384
IP address blocks:        110.165.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Mar 31 07:51:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D1FBAE28E0663850433FF4CAB40340F1AC89FA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:37:78:0d:b0:78:2c:b3:46:47:01:57:16:
                    89:2f:37:4c:b0:88:39:ab:ad:ab:a7:5c:6e:ae:aa:
                    de:8e:d4:51:4d:a7:f1:85:88:9f:f6:a5:81:67:08:
                    90:d8:61:50:d8:94:e0:50:ee:e0:09:d7:e1:ba:06:
                    9b:50:ea:9e:69:21:b8:eb:e0:c7:9c:2d:4b:52:67:
                    ba:da:f9:82:16:5e:ce:a6:09:7b:81:e7:fd:f8:e0:
                    3d:93:1e:be:0e:fc:f1:a3:2b:3e:e3:0e:fa:ea:c6:
                    ae:08:d3:9a:46:8a:bd:ab:9f:53:e1:02:42:8c:43:
                    8b:ee:b8:af:db:bb:5b:e0:4f:73:95:0a:89:58:17:
                    c3:84:b8:7a:ee:68:e9:b0:fc:2f:39:b4:7a:0f:ac:
                    8d:9a:1e:ac:f9:e0:b5:91:82:44:5f:4c:ed:75:ad:
                    67:d2:5f:9d:eb:96:55:aa:25:2e:5c:a1:02:c2:58:
                    7b:d0:53:21:3d:7d:ad:d2:04:c9:e9:f0:7c:58:89:
                    d8:2a:ff:33:4f:20:95:92:71:5d:c4:a4:45:e2:63:
                    dd:44:4d:a1:f7:3f:a9:81:f8:fb:8b:3b:21:07:0d:
                    20:20:93:54:fa:fa:02:ae:f7:f9:e5:f2:92:1f:c5:
                    15:ec:2c:18:21:f8:4f:ff:46:2e:a2:ef:55:5f:d4:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FB:AE:28:E0:66:38:50:43:3F:F4:CA:B4:03:40:F1:AC:89:FA:68
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/0fuuKOBmOFBDP_TKtANA8ayJ-mg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.165.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ba:be:3e:3f:37:86:1f:a5:1c:89:21:60:0d:fc:e7:5b:62:5c:
         7e:a3:db:32:01:75:09:15:b4:a6:af:83:13:b3:9f:4e:74:a4:
         e4:03:4c:7d:55:b8:df:f3:95:6e:b5:56:8c:a5:38:6c:79:94:
         5c:af:75:65:90:00:bd:73:a4:e0:1c:0c:80:4e:d9:a0:3c:61:
         50:2b:4a:52:fe:49:b7:a4:be:cc:c7:aa:72:50:16:5a:75:77:
         e5:81:48:30:35:1e:fc:cf:44:7b:53:91:cc:eb:39:52:ba:55:
         64:ff:29:5f:6b:97:fe:56:56:35:d2:90:ac:12:8d:4f:f7:ce:
         f3:0d:92:2c:87:2e:10:d1:7b:5e:6c:82:77:60:e5:9e:41:43:
         46:97:1e:d9:ae:8a:5e:9f:48:2b:b3:8e:a7:cc:04:0b:9d:33:
         0a:db:af:03:e6:11:5a:ee:5f:0c:e3:27:27:5b:69:f1:51:d0:
         34:e6:48:b1:d2:23:3d:e2:2a:53:be:7e:04:a0:88:35:21:52:
         67:30:36:ef:37:7a:31:3a:62:57:f2:b0:28:21:92:8d:30:b2:
         93:64:7b:a4:30:bf:59:ca:66:cb:a2:18:0b:f1:90:0f:6f:94:
         6d:3f:fc:5d:11:fa:04:72:9b:50:14:b7:c3:9a:b7:2d:99:61:
         00:49:49:5a
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0OENE
MTYyODI0QzFGODYzODcxODk5MjY3Q0MxNjAyODA3NzY1MzFGMB4XDTI2MDMzMTA3
NTE0OFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDFGQkFFMjhFMDY2Mzg1
MDQzM0ZGNENBQjQwMzQwRjFBQzg5RkE2ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALo2N3gNsHgss0ZHAVcWiS83TLCIOautq6dcbq6q3o7UUU2n8YWI
n/algWcIkNhhUNiU4FDu4AnX4boGm1DqnmkhuOvgx5wtS1Jnutr5ghZezqYJe4Hn
/fjgPZMevg788aMrPuMO+urGrgjTmkaKvaufU+ECQoxDi+64r9u7W+BPc5UKiVgX
w4S4eu5o6bD8Lzm0eg+sjZoerPngtZGCRF9M7XWtZ9JfneuWVaolLlyhAsJYe9BT
IT19rdIEyenwfFiJ2Cr/M08glZJxXcSkReJj3URNofc/qYH4+4s7IQcNICCTVPr6
Aq73+eXykh/FFewsGCH4T/9GLqLvVV/UsRUCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBTR+64o4GY4UEM/9Mq0A0DxrIn6aDAfBgNVHSMEGDAWgBRIzRYoJMH4Y4cYmSZ8
wWAoB3ZTHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODgvU00wV0tDVEItR09IR0prbWZNRmdLQWQyVXg4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvU00wV0tDVEItR09IR0prbWZNRmdL
QWQyVXg4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDg4LzBmdXVLT0JtT0ZCRFBfVEt0QU5BOGF5Si1tZy5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdupYAwDQYJKoZIhvcNAQELBQAD
ggEBALq+Pj83hh+lHIkhYA3851tiXH6j2zIBdQkVtKavgxOzn050pOQDTH1VuN/z
lW61VoylOGx5lFyvdWWQAL1zpOAcDIBO2aA8YVArSlL+SbekvszHqnJQFlp1d+WB
SDA1HvzPRHtTkczrOVK6VWT/KV9rl/5WVjXSkKwSjU/3zvMNkiyHLhDRe15sgndg
5Z5BQ0aXHtmuil6fSCuzjqfMBAudMwrbrwPmEVruXwzjJydbafFR0DTmSLHSIz3i
KlO+fgSgiDUhUmcwNu83ejE6YlfysCghko0wspNke6Qwv1nKZsuiGAvxkA9vlG0/
/F0R+gRym1AUt8Oaty2ZYQBJSVo=
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:39:01 2026 by rpki-client