Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/r0n_Lbz_0yh04c64Rj4zRSXScAk.roa
File:                     r0n_Lbz_0yh04c64Rj4zRSXScAk.roa (raw, json)
Hash identifier:          VL9nGcpjDy2qvW+5IBKiPanGVwaMchgDBek6euDFJfE=
Subject key identifier:   AF:49:FF:2D:BC:FF:D3:28:74:E1:CE:B8:46:3E:33:45:25:D2:70:09
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       5B
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/r0n_Lbz_0yh04c64Rj4zRSXScAk.roa
Signing time:             Tue 31 Mar 2026 07:51:45 +0000
ROA not before:           Tue 31 Mar 2026 07:51:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     138384
IP address blocks:        219.105.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Mar 31 07:51:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AF49FF2DBCFFD32874E1CEB8463E334525D27009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:d9:1d:15:04:a1:c6:f0:fc:04:2f:41:df:
                    90:08:bf:dc:11:26:a8:ae:e4:31:7e:fe:ea:bd:2c:
                    90:a2:68:a0:e7:6d:42:35:ca:5a:52:f6:61:3b:05:
                    2a:0c:b5:2b:f2:49:be:9e:25:72:c7:1d:79:61:de:
                    c1:12:25:b6:5b:ef:d9:58:2b:bb:97:29:a8:0f:97:
                    41:f8:ea:a4:9f:b1:a1:37:ce:25:09:b8:95:3a:c4:
                    f2:0f:0c:3a:fb:66:c4:13:2a:62:e9:0e:0c:93:82:
                    54:f0:e4:85:3a:53:a8:f6:6d:01:aa:2b:64:9e:c1:
                    dd:85:74:5c:f8:81:79:52:be:95:90:79:27:b7:33:
                    22:b2:e0:93:48:61:e4:a0:d1:40:e6:56:f2:22:01:
                    7d:e3:af:71:ef:11:85:50:36:ea:64:86:df:04:88:
                    40:dd:75:c3:fd:a3:2a:1e:c7:34:b0:5e:22:84:b4:
                    81:c1:22:7e:43:93:2c:3d:89:42:14:7a:3d:53:46:
                    8d:d8:a5:f0:25:42:af:eb:16:ad:2b:50:95:fe:4f:
                    d9:e8:6c:a6:40:9c:ec:dd:43:8c:99:09:3a:fb:2d:
                    dc:14:f7:bc:89:14:bc:15:f1:5f:3b:00:ab:4a:e4:
                    38:58:44:71:d1:82:a8:85:1c:b2:85:cc:8c:78:e3:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:49:FF:2D:BC:FF:D3:28:74:E1:CE:B8:46:3E:33:45:25:D2:70:09
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/r0n_Lbz_0yh04c64Rj4zRSXScAk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:a1:09:f7:22:8e:eb:1b:8e:72:17:c9:07:e2:2c:22:f0:fb:
         1b:70:fa:db:bd:fa:89:a9:7a:65:8f:02:60:a0:4a:85:56:cd:
         ab:40:7a:85:c7:35:67:e7:7a:d9:dd:68:25:72:cc:6d:6d:cc:
         d4:05:8c:23:7f:84:42:47:5b:19:bb:d9:21:93:0f:b6:e8:80:
         83:8a:86:a8:a6:b8:d4:fd:c2:94:b1:cb:7c:77:8a:ef:ea:a0:
         8a:6c:d1:c1:52:45:7c:57:9c:4c:78:de:bc:ed:35:c6:45:8e:
         9b:dc:80:9d:5b:13:cb:2d:d7:dc:71:03:ea:10:10:77:5d:c3:
         02:85:12:02:a2:c4:2c:07:a4:50:10:3d:0f:6c:82:7e:03:c5:
         69:fd:58:dd:50:d0:a1:cf:d6:7f:b7:1c:bb:0e:80:95:f6:c1:
         5e:9a:5b:b8:78:dc:a0:51:00:56:39:63:83:5d:cc:82:e0:cc:
         5b:1d:c6:e7:72:30:c5:ab:17:5f:01:e0:e3:e1:db:f4:9c:a6:
         b4:7c:be:3a:49:20:05:af:63:4b:31:e3:56:82:30:ef:e6:02:
         a1:14:84:27:22:b1:83:65:aa:36:b1:e3:ae:ee:45:46:d7:18:
         06:b2:92:95:7a:91:b5:08:0c:55:15:4e:ea:1e:3e:ef:af:57:
         8e:3e:73:0a
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0OENE
MTYyODI0QzFGODYzODcxODk5MjY3Q0MxNjAyODA3NzY1MzFGMB4XDTI2MDMzMTA3
NTE0NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQUY0OUZGMkRCQ0ZGRDMy
ODc0RTFDRUI4NDYzRTMzNDUyNUQyNzAwOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALZs2R0VBKHG8PwEL0HfkAi/3BEmqK7kMX7+6r0skKJooOdtQjXK
WlL2YTsFKgy1K/JJvp4lcscdeWHewRIltlvv2Vgru5cpqA+XQfjqpJ+xoTfOJQm4
lTrE8g8MOvtmxBMqYukODJOCVPDkhTpTqPZtAaorZJ7B3YV0XPiBeVK+lZB5J7cz
IrLgk0hh5KDRQOZW8iIBfeOvce8RhVA26mSG3wSIQN11w/2jKh7HNLBeIoS0gcEi
fkOTLD2JQhR6PVNGjdil8CVCr+sWrStQlf5P2ehspkCc7N1DjJkJOvst3BT3vIkU
vBXxXzsAq0rkOFhEcdGCqIUcsoXMjHjjZM8CAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBSvSf8tvP/TKHThzrhGPjNFJdJwCTAfBgNVHSMEGDAWgBRIzRYoJMH4Y4cYmSZ8
wWAoB3ZTHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODgvU00wV0tDVEItR09IR0prbWZNRmdLQWQyVXg4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvU00wV0tDVEItR09IR0prbWZNRmdL
QWQyVXg4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDg4L3Iwbl9MYnpfMHloMDRjNjRSajR6UlNYU2NBay5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATbaZAwDQYJKoZIhvcNAQELBQAD
ggEBAGihCfcijusbjnIXyQfiLCLw+xtw+tu9+ompemWPAmCgSoVWzatAeoXHNWfn
etndaCVyzG1tzNQFjCN/hEJHWxm72SGTD7bogIOKhqimuNT9wpSxy3x3iu/qoIps
0cFSRXxXnEx43rztNcZFjpvcgJ1bE8st19xxA+oQEHddwwKFEgKixCwHpFAQPQ9s
gn4DxWn9WN1Q0KHP1n+3HLsOgJX2wV6aW7h43KBRAFY5Y4NdzILgzFsdxudyMMWr
F18B4OPh2/ScprR8vjpJIAWvY0sx41aCMO/mAqEUhCcisYNlqjax467uRUbXGAay
kpV6kbUIDFUVTuoePu+vV44+cwo=
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:08 2026 by rpki-client