Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/5sDYzGeYGq2sKcGkHPtla3vVmHw.roa
File:                     5sDYzGeYGq2sKcGkHPtla3vVmHw.roa (raw, json)
Hash identifier:          715nxSKIGO+39Z3jW1281ncsla41KAIhYIR4yA0Qrh8=
Subject key identifier:   E6:C0:D8:CC:67:98:1A:AD:AC:29:C1:A4:1C:FB:65:6B:7B:D5:98:7C
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       69
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/5sDYzGeYGq2sKcGkHPtla3vVmHw.roa
Signing time:             Tue 31 Mar 2026 07:51:52 +0000
ROA not before:           Tue 31 Mar 2026 07:51:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     138384
IP address blocks:        133.106.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Mar 31 07:51:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E6C0D8CC67981AADAC29C1A41CFB656B7BD5987C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:76:fe:bd:87:87:e7:40:4d:fd:77:1f:f3:
                    16:8e:51:0d:a1:05:a1:8c:47:27:e8:18:0d:ea:32:
                    17:3f:ff:a6:79:3e:1f:70:28:ff:10:87:7b:b1:bf:
                    9c:06:9f:80:e2:4f:5c:9b:41:bf:0c:a3:25:db:be:
                    ae:39:b0:ab:90:94:9c:2a:74:e8:c5:b7:d4:3e:a2:
                    00:a7:2f:aa:d2:0e:88:40:c6:0d:67:2f:c0:af:97:
                    34:91:5d:17:72:18:6f:93:10:86:8e:ad:47:ad:16:
                    c2:52:be:6d:ff:4b:64:93:16:ad:b2:3c:f0:28:a8:
                    a7:34:a8:d8:e8:f0:ef:59:6a:20:cc:c3:85:fd:72:
                    eb:e0:ce:f6:f5:33:4c:73:82:da:a4:34:69:19:8c:
                    de:6b:15:b8:9f:fe:5f:ff:ab:b3:e9:33:a1:92:0c:
                    df:1c:9d:90:83:33:a6:33:05:96:29:ba:1a:16:1a:
                    6a:f9:00:e1:ef:8e:80:59:ad:a7:a0:18:6e:b5:b7:
                    5b:06:cb:d0:55:a1:bb:11:97:11:9c:6b:3a:87:ce:
                    11:8e:cb:7c:01:1e:ae:27:e9:07:42:c6:67:d0:b6:
                    33:46:8f:43:5e:bb:c1:03:91:aa:0d:ec:29:a4:be:
                    ae:35:40:50:1d:1e:08:ff:46:73:10:13:14:7b:0d:
                    4d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C0:D8:CC:67:98:1A:AD:AC:29:C1:A4:1C:FB:65:6B:7B:D5:98:7C
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/5sDYzGeYGq2sKcGkHPtla3vVmHw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.106.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4c:e7:cf:f8:f1:50:6e:83:3c:49:60:03:b6:4f:35:9a:47:7a:
         2f:c6:b7:42:79:b6:d5:65:88:c3:bc:a4:c9:ba:f2:c0:03:c9:
         ca:2f:ba:84:15:18:9c:04:ac:66:71:f3:8d:4e:ce:71:6a:30:
         b3:4d:78:cb:4e:79:6c:51:d2:c9:02:05:5c:de:e0:2d:14:df:
         2f:7c:9f:54:5c:75:0e:25:4e:30:d1:76:97:0e:de:5f:43:d8:
         c8:ce:52:56:d4:41:c9:a0:20:64:55:92:d8:49:2e:33:0e:8b:
         a7:c6:dc:8d:69:27:65:ec:22:51:ef:21:e3:b5:83:e6:78:1d:
         3e:62:ba:cd:17:0a:b1:d6:3e:45:c1:7c:69:cb:99:50:e0:06:
         8a:30:c6:1c:da:2d:30:94:a1:70:01:f2:85:ff:7f:34:76:ca:
         8c:b9:b0:3f:f9:bb:ba:42:62:12:67:d4:bc:24:6b:3a:6d:7c:
         9c:a3:f9:89:9e:7f:ad:03:24:10:35:b2:b9:8a:f3:9d:c5:a1:
         79:4f:55:09:eb:83:6e:1e:45:4d:01:ec:0b:7a:4a:48:99:9b:
         90:07:78:0c:13:ad:18:bf:f7:37:f3:91:02:e6:31:bc:ac:f0:
         00:8a:4d:65:ac:00:89:ea:37:85:a8:0a:cb:89:61:30:94:04:
         52:96:cd:d0
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0OENE
MTYyODI0QzFGODYzODcxODk5MjY3Q0MxNjAyODA3NzY1MzFGMB4XDTI2MDMzMTA3
NTE1MloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTZDMEQ4Q0M2Nzk4MUFB
REFDMjlDMUE0MUNGQjY1NkI3QkQ1OTg3QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANEvdv69h4fnQE39dx/zFo5RDaEFoYxHJ+gYDeoyFz//pnk+H3Ao
/xCHe7G/nAafgOJPXJtBvwyjJdu+rjmwq5CUnCp06MW31D6iAKcvqtIOiEDGDWcv
wK+XNJFdF3IYb5MQho6tR60WwlK+bf9LZJMWrbI88CiopzSo2Ojw71lqIMzDhf1y
6+DO9vUzTHOC2qQ0aRmM3msVuJ/+X/+rs+kzoZIM3xydkIMzpjMFlim6GhYaavkA
4e+OgFmtp6AYbrW3WwbL0FWhuxGXEZxrOofOEY7LfAEerifpB0LGZ9C2M0aPQ167
wQORqg3sKaS+rjVAUB0eCP9GcxATFHsNTWUCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBTmwNjMZ5garawpwaQc+2Vre9WYfDAfBgNVHSMEGDAWgBRIzRYoJMH4Y4cYmSZ8
wWAoB3ZTHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODgvU00wV0tDVEItR09IR0prbWZNRmdLQWQyVXg4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvU00wV0tDVEItR09IR0prbWZNRmdL
QWQyVXg4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDg4LzVzRFl6R2VZR3Eyc0tjR2tIUHRsYTN2Vm1Idy5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaFakAwDQYJKoZIhvcNAQELBQAD
ggEBAEznz/jxUG6DPElgA7ZPNZpHei/Gt0J5ttVliMO8pMm68sADycovuoQVGJwE
rGZx841OznFqMLNNeMtOeWxR0skCBVze4C0U3y98n1RcdQ4lTjDRdpcO3l9D2MjO
UlbUQcmgIGRVkthJLjMOi6fG3I1pJ2XsIlHvIeO1g+Z4HT5ius0XCrHWPkXBfGnL
mVDgBoowxhzaLTCUoXAB8oX/fzR2yoy5sD/5u7pCYhJn1LwkazptfJyj+Ymef60D
JBA1srmK853FoXlPVQnrg24eRU0B7At6SkiZm5AHeAwTrRi/9zfzkQLmMbys8ACK
TWWsAInqN4WoCsuJYTCUBFKWzdA=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:02 2026 by rpki-client