Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/fc3IHeQ8d-ZkmoDou_JMWvDgQ24.roa
File:                     fc3IHeQ8d-ZkmoDou_JMWvDgQ24.roa (raw, json)
Hash identifier:          zaOqAdENjEwirF/tBrmy4NHl/Qt5NH7R4GHDq4Qc8kM=
Subject key identifier:   7D:CD:C8:1D:E4:3C:77:E6:64:9A:80:E8:BB:F2:4C:5A:F0:E0:43:6E
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       013F
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/fc3IHeQ8d-ZkmoDou_JMWvDgQ24.roa
Signing time:             Tue 31 Mar 2026 07:47:48 +0000
ROA not before:           Tue 31 Mar 2026 07:47:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     3949
IP address blocks:        153.254.110.72/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:47:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7DCDC81DE43C77E6649A80E8BBF24C5AF0E0436E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:24:a7:99:1f:0d:83:0b:9a:f4:c7:eb:7d:
                    b4:d0:b0:e8:ff:ab:f5:7b:f0:6d:9e:73:75:83:a2:
                    7a:b1:37:3d:5d:c5:67:83:59:54:ae:05:1f:b0:96:
                    15:da:0f:26:20:eb:90:63:8c:be:2a:50:c0:11:0a:
                    4a:d0:8f:fd:85:56:e9:a5:bf:13:6e:8d:54:31:24:
                    e7:10:03:c0:dc:6d:20:77:c3:e8:3b:02:0e:d1:e5:
                    bf:71:aa:d2:85:1b:ef:4f:fe:3d:3b:44:de:f3:f0:
                    b1:c1:b6:15:f2:df:c3:d5:9a:29:9d:41:22:33:5f:
                    6f:83:b9:5b:aa:86:36:8e:55:f8:24:b0:18:59:34:
                    ee:94:61:18:78:9b:ec:cd:ae:7e:97:8e:c0:30:a3:
                    21:0d:e0:c2:c8:c8:5c:32:a3:d4:9a:3a:3a:48:e5:
                    e9:e8:eb:82:2e:c6:76:41:68:f1:0c:b3:10:c3:c6:
                    18:22:9f:c1:fb:0f:22:ae:ce:3b:0c:50:c4:33:30:
                    6c:36:44:40:fe:a4:c7:01:a6:4b:43:92:de:56:21:
                    5c:87:85:02:5b:4d:8f:d2:ae:81:c3:ea:ab:7a:e0:
                    fe:62:ca:47:57:15:d4:ef:16:28:13:7b:d7:48:c9:
                    11:e3:ef:39:16:d3:71:8c:89:27:11:ac:bc:50:d1:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CD:C8:1D:E4:3C:77:E6:64:9A:80:E8:BB:F2:4C:5A:F0:E0:43:6E
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/fc3IHeQ8d-ZkmoDou_JMWvDgQ24.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.110.72/29

    Signature Algorithm: sha256WithRSAEncryption
         b1:79:f9:fb:6d:09:9b:5c:27:37:80:b5:43:b2:84:e5:3a:97:
         29:96:71:b9:f2:11:a6:59:b0:dd:36:0e:60:41:72:ba:84:54:
         12:a9:6b:e9:5e:4e:0c:db:9b:94:39:b2:77:37:18:8e:99:f1:
         bc:b6:b4:6d:b6:0a:a2:c3:ab:31:80:08:cf:34:40:1e:f0:42:
         d1:32:da:d9:f3:98:33:7a:1f:d2:d2:24:7a:58:1f:89:a8:01:
         1c:8f:5a:92:e8:4f:d4:8c:18:f7:75:fa:74:fc:3e:ce:d5:4d:
         16:b5:fc:f0:17:75:a2:e9:9d:fa:91:c4:ab:ec:48:49:58:ee:
         33:a6:9d:f7:df:0a:6b:3a:ff:82:10:16:da:d1:f9:e6:1a:76:
         10:9a:75:80:f9:72:e6:20:23:b1:af:07:7a:51:1d:46:2a:c7:
         31:15:a7:5e:65:c6:a8:7b:ae:78:16:06:59:8e:70:4f:f0:25:
         31:1b:80:13:2a:bd:b0:83:6f:d3:e5:79:05:ac:4c:59:01:59:
         19:35:23:b0:9c:87:7f:14:61:fc:81:a0:f7:45:09:49:d6:86:
         e5:b2:2c:5f:9c:a0:e1:5d:8a:27:5c:56:1b:ce:b3:2e:20:00:
         81:c9:f6:4a:6f:e9:02:09:67:a1:18:4f:73:61:ab:46:70:a1:
         58:19:c8:f0
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw
NzQ3NDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdEQ0RDODFERTQzQzc3
RTY2NDlBODBFOEJCRjI0QzVBRjBFMDQzNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJDCSnmR8Ngwua9MfrfbTQsOj/q/V78G2ec3WDonqxNz1dxWeD
WVSuBR+wlhXaDyYg65BjjL4qUMARCkrQj/2FVumlvxNujVQxJOcQA8DcbSB3w+g7
Ag7R5b9xqtKFG+9P/j07RN7z8LHBthXy38PVmimdQSIzX2+DuVuqhjaOVfgksBhZ
NO6UYRh4m+zNrn6XjsAwoyEN4MLIyFwyo9SaOjpI5eno64IuxnZBaPEMsxDDxhgi
n8H7DyKuzjsMUMQzMGw2RED+pMcBpktDkt5WIVyHhQJbTY/SroHD6qt64P5iykdX
FdTvFigTe9dIyRHj7zkW03GMiScRrLxQ0WYHAgMBAAGjggHeMIIB2jAdBgNVHQ4E
FgQUfc3IHeQ8d+ZkmoDou/JMWvDgQ24wHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDEyOC9mYzNJSGVROGQtWmttb0RvdV9KTVd2RGdRMjQucm9h
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDmf5uSDANBgkqhkiG9w0BAQsF
AAOCAQEAsXn5+20Jm1wnN4C1Q7KE5TqXKZZxufIRplmw3TYOYEFyuoRUEqlr6V5O
DNublDmydzcYjpnxvLa0bbYKosOrMYAIzzRAHvBC0TLa2fOYM3of0tIkelgfiagB
HI9akuhP1IwY93X6dPw+ztVNFrX88Bd1oumd+pHEq+xISVjuM6ad998Kazr/ghAW
2tH55hp2EJp1gPly5iAjsa8HelEdRirHMRWnXmXGqHuueBYGWY5wT/AlMRuAEyq9
sINv0+V5BaxMWQFZGTUjsJyHfxRh/IGg90UJSdaG5bIsX5yg4V2KJ1xWG86zLiAA
gcn2Sm/pAglnoRhPc2GrRnChWBnI8A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:42 2026 by rpki-client