Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20102/0ja_mgv6b0rNI7i8oGuL1b-nLvE.roa
File:                     0ja_mgv6b0rNI7i8oGuL1b-nLvE.roa (raw, json)
Hash identifier:          AIMk2de8WCmqYWfkZsiRQPPRgANT+RxivxWrWOy4i+0=
Subject key identifier:   D2:36:BF:9A:0B:FA:6F:4A:CD:23:B8:BC:A0:6B:8B:D5:BF:A7:2E:F1
Certificate issuer:       /CN=33D2C2C8816F30E6B58262B93C717C85513505C5
Certificate serial:       28
Authority key identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/0ja_mgv6b0rNI7i8oGuL1b-nLvE.roa
Signing time:             Tue 31 Mar 2026 08:41:09 +0000
ROA not before:           Tue 31 Mar 2026 08:41:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131952
IP address blocks:        103.142.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D2C2C8816F30E6B58262B93C717C85513505C5
        Validity
            Not Before: Mar 31 08:41:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D236BF9A0BFA6F4ACD23B8BCA06B8BD5BFA72EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:c6:72:62:82:4e:bb:dd:2e:e5:f4:58:19:
                    1b:e9:d9:99:39:e8:27:ba:78:18:4a:64:34:b1:25:
                    a8:23:d9:ed:31:05:50:78:3c:43:f2:aa:11:72:e2:
                    2a:32:67:4f:b3:1e:9a:59:2f:ee:cc:7c:47:80:54:
                    8f:66:0a:9a:c6:96:d0:ff:f3:19:4a:86:17:bd:b5:
                    df:53:19:40:7c:2c:27:ba:32:22:18:b5:cb:64:fc:
                    03:13:95:8e:3f:43:1e:57:7f:e7:71:a9:b1:f6:84:
                    85:01:54:07:06:19:18:03:f4:aa:50:0d:46:db:40:
                    8a:d1:38:9e:ae:df:de:25:86:f1:36:fa:39:90:c0:
                    43:1e:4f:f2:4b:85:bc:08:01:aa:93:01:bb:59:f9:
                    e2:3d:af:50:7c:db:5c:9b:1f:19:1e:bd:27:3c:94:
                    72:6a:40:29:3e:60:6f:9c:dc:04:4b:5b:7f:4a:7d:
                    90:7d:2a:88:dd:7b:11:dc:61:1e:55:d6:eb:ea:68:
                    17:00:8b:94:2b:03:43:75:30:0c:67:dd:eb:ed:1b:
                    23:42:58:e9:e7:b7:ec:5e:b3:48:64:c5:e5:3f:90:
                    5c:21:3a:24:a4:0a:6a:57:6e:a2:9c:89:8f:48:cb:
                    bf:35:20:0c:b3:6c:4c:bf:6f:59:f7:3a:2a:78:87:
                    3e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:36:BF:9A:0B:FA:6F:4A:CD:23:B8:BC:A0:6B:8B:D5:BF:A7:2E:F1
            X509v3 Authority Key Identifier:
                keyid:33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/0ja_mgv6b0rNI7i8oGuL1b-nLvE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:b7:82:f1:b3:31:d3:4a:b0:fd:23:6d:11:10:4a:26:73:
         7e:d1:31:4c:59:cd:84:cd:e9:11:c3:b9:61:fc:98:0d:be:63:
         34:53:79:b0:38:c4:f1:b8:e5:b3:17:d6:2c:f9:ab:df:dd:99:
         59:e1:6b:f5:e6:41:31:df:a5:bb:a9:5a:86:2f:36:e0:79:28:
         36:d1:24:7f:cd:7d:86:4b:44:dc:2b:5c:93:d5:1e:01:71:18:
         ee:42:2a:08:00:04:f4:87:a3:aa:e9:b2:17:b8:f4:2b:72:42:
         d0:eb:a7:35:de:e7:7c:50:94:21:95:d3:3a:6e:57:92:50:d5:
         07:4c:2e:f4:00:6e:f1:f0:c2:c5:bd:e3:d8:8e:ad:7d:a1:11:
         14:77:ae:8b:b8:ed:fe:fe:83:b3:19:5d:63:65:bf:c6:95:e1:
         a8:7e:87:38:a5:28:19:64:52:34:b1:50:27:aa:64:79:48:88:
         a4:ae:b7:c6:c5:64:43:19:17:a7:80:24:f9:96:90:f7:ac:14:
         76:c3:a2:fd:ff:6a:b4:94:bb:30:36:64:f2:86:1f:7c:16:ab:
         2a:5a:af:82:6c:95:28:77:21:3f:89:3f:77:61:f4:5e:72:c8:
         3a:7e:84:d3:8c:9c:38:2d:9b:37:ae:3e:6c:36:45:28:bf:a4:
         d8:1e:8c:9b
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0Qy
QzJDODgxNkYzMEU2QjU4MjYyQjkzQzcxN0M4NTUxMzUwNUM1MB4XDTI2MDMzMTA4
NDEwOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDIzNkJGOUEwQkZBNkY0
QUNEMjNCOEJDQTA2QjhCRDVCRkE3MkVGMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK0IxnJigk673S7l9FgZG+nZmTnoJ7p4GEpkNLElqCPZ7TEFUHg8
Q/KqEXLiKjJnT7Memlkv7sx8R4BUj2YKmsaW0P/zGUqGF72131MZQHwsJ7oyIhi1
y2T8AxOVjj9DHld/53GpsfaEhQFUBwYZGAP0qlANRttAitE4nq7f3iWG8Tb6OZDA
Qx5P8kuFvAgBqpMBu1n54j2vUHzbXJsfGR69JzyUcmpAKT5gb5zcBEtbf0p9kH0q
iN17EdxhHlXW6+poFwCLlCsDQ3UwDGfd6+0bI0JY6ee37F6zSGTF5T+QXCE6JKQK
alduopyJj0jLvzUgDLNsTL9vWfc6KniHPvECAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBTSNr+aC/pvSs0juLyga4vVv6cu8TAfBgNVHSMEGDAWgBQz0sLIgW8w5rWCYrk8
cXyFUTUFxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMDIvTTlMQ3lJRnZNT2ExZ21LNVBIRjhoVkUxQmNVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTlMQ3lJRnZNT2ExZ21LNVBIRjho
VkUxQmNVLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMTAyLzBqYV9tZ3Y2YjByTkk3aThvR3VMMWItbkx2RS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnjgwwDQYJKoZIhvcNAQELBQAD
ggEBAIU9t4LxszHTSrD9I20REEomc37RMUxZzYTN6RHDuWH8mA2+YzRTebA4xPG4
5bMX1iz5q9/dmVnha/XmQTHfpbupWoYvNuB5KDbRJH/NfYZLRNwrXJPVHgFxGO5C
KggABPSHo6rpshe49CtyQtDrpzXe53xQlCGV0zpuV5JQ1QdMLvQAbvHwwsW949iO
rX2hERR3rou47f7+g7MZXWNlv8aV4ah+hzilKBlkUjSxUCeqZHlIiKSut8bFZEMZ
F6eAJPmWkPesFHbDov3/arSUuzA2ZPKGH3wWqypar4JslSh3IT+JP3dh9F5yyDp+
hNOMnDgtmzeuPmw2RSi/pNgejJs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:17 2026 by rpki-client