Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/udXzNYW3_rZ1GXjZBGyL01fRNCI.roa
File:                     udXzNYW3_rZ1GXjZBGyL01fRNCI.roa (raw, json)
Hash identifier:          mQPVwZUQUg95yK4mdtdD+8bf1+odaGQ5QGPkPCmObcA=
Subject key identifier:   B9:D5:F3:35:85:B7:FE:B6:75:19:78:D9:04:6C:8B:D3:57:D1:34:22
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       2D
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/udXzNYW3_rZ1GXjZBGyL01fRNCI.roa
Signing time:             Tue 31 Mar 2026 08:42:22 +0000
ROA not before:           Tue 31 Mar 2026 08:42:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        133.149.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Mar 31 08:42:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B9D5F33585B7FEB6751978D9046C8BD357D13422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:7f:d3:11:59:cb:14:9e:a7:f8:ef:c9:dc:
                    ae:5a:f5:3a:f2:89:1f:a3:01:1f:ef:2e:c2:71:af:
                    78:dd:6a:32:d1:e7:2a:ad:01:c6:b9:89:0a:0f:3a:
                    66:41:61:6e:75:24:1e:d1:03:61:04:16:c2:bf:c3:
                    63:49:05:d3:59:74:e6:71:e3:f2:7d:7a:08:77:4d:
                    a2:fa:fd:fc:05:de:fa:4e:83:3f:64:22:19:e6:69:
                    79:b3:6c:d3:e2:bb:08:c0:d5:89:25:9a:9b:f2:78:
                    4d:ae:25:39:dc:f4:fc:7d:76:80:88:bb:c7:b6:fe:
                    64:d4:05:74:56:1b:10:45:18:76:a4:82:f9:be:5e:
                    e3:3e:cb:74:4e:c5:2d:c6:2f:8c:74:7f:11:ab:4a:
                    f9:eb:29:a3:c3:0c:96:51:15:61:bb:c7:74:8a:1e:
                    0d:a6:5d:d5:60:84:b6:41:fc:13:d5:d3:3d:4b:24:
                    9e:ae:b2:ed:f0:cb:61:a3:6c:7c:30:00:a1:7e:b9:
                    70:8d:3d:09:41:46:79:4b:e3:65:2f:f3:b6:5b:17:
                    a7:c6:9f:85:04:7f:28:0d:73:83:33:72:12:f5:8a:
                    16:e4:d8:22:59:b8:66:6a:6e:4f:69:0c:57:27:e0:
                    2b:b6:c9:2f:42:29:65:9c:0f:4a:33:03:bb:c9:01:
                    3d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D5:F3:35:85:B7:FE:B6:75:19:78:D9:04:6C:8B:D3:57:D1:34:22
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/udXzNYW3_rZ1GXjZBGyL01fRNCI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.149.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:88:74:46:52:c6:0d:ce:65:85:d7:2c:e9:d1:27:71:5f:59:
         34:84:17:a8:94:76:f2:0d:a2:e2:53:9a:b2:01:b4:ce:2c:81:
         f4:2e:df:4b:5a:08:6b:02:65:fd:62:5c:8d:89:c6:f9:35:a2:
         b5:08:10:84:e1:66:c0:de:27:8f:e2:69:4b:62:0a:9e:29:93:
         2d:95:71:56:d8:e9:f9:3e:93:fc:94:5e:ae:39:fb:1b:00:6f:
         f3:83:64:fc:c3:5c:2d:73:27:be:ce:7d:16:ea:99:77:88:3f:
         e1:60:2b:a4:b3:f6:e2:b4:ca:0a:9d:43:f8:a6:9f:40:23:7c:
         48:16:bd:3a:8d:eb:45:09:43:33:85:fa:73:8c:bd:56:e8:7f:
         5d:22:f8:9e:4b:c5:1e:e0:78:c7:6f:a4:5a:3f:c9:4a:ff:fa:
         68:b5:a2:b2:d0:e6:6c:60:af:47:80:61:27:45:61:98:1a:82:
         06:9c:fe:34:c7:44:31:a8:02:c8:46:12:cb:2c:9f:94:8f:4f:
         94:26:2e:9e:52:2b:79:70:de:49:1c:7f:51:c3:b1:6c:b6:3f:
         5e:63:39:e2:65:86:5d:1e:f7:96:6a:ef:1a:84:34:1b:0b:0b:
         52:30:f4:00:c9:55:a3:84:06:83:4f:a5:7d:1a:d8:13:b4:50:
         83:c1:b6:c8
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjQy
RTc4NzM5MEI2Q0U2Q0VFNjg1QjQ0M0Y5M0FCMzYzOUYxMTZDMB4XDTI2MDMzMTA4
NDIyMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjlENUYzMzU4NUI3RkVC
Njc1MTk3OEQ5MDQ2QzhCRDM1N0QxMzQyMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMR3f9MRWcsUnqf478ncrlr1OvKJH6MBH+8uwnGveN1qMtHnKq0B
xrmJCg86ZkFhbnUkHtEDYQQWwr/DY0kF01l05nHj8n16CHdNovr9/AXe+k6DP2Qi
GeZpebNs0+K7CMDViSWam/J4Ta4lOdz0/H12gIi7x7b+ZNQFdFYbEEUYdqSC+b5e
4z7LdE7FLcYvjHR/EatK+espo8MMllEVYbvHdIoeDaZd1WCEtkH8E9XTPUsknq6y
7fDLYaNsfDAAoX65cI09CUFGeUvjZS/ztlsXp8afhQR/KA1zgzNyEvWKFuTYIlm4
ZmpuT2kMVyfgK7bJL0IpZZwPSjMDu8kBPX0CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBS51fM1hbf+tnUZeNkEbIvTV9E0IjAfBgNVHSMEGDAWgBSmQueHOQts5s7mhbRD
+TqzY58RbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzExL3BrTG5oemtMYk9iTzVvVzBRX2s2czJPZkVXdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3BrTG5oemtMYk9iTzVvVzBRX2s2czJP
ZkVXdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zMTEvdWRYek5ZVzNfcloxR1hqWkJHeUwwMWZSTkNJLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBIWVUDANBgkqhkiG9w0BAQsFAAOCAQEA
Eoh0RlLGDc5lhdcs6dEncV9ZNIQXqJR28g2i4lOasgG0ziyB9C7fS1oIawJl/WJc
jYnG+TWitQgQhOFmwN4nj+JpS2IKnimTLZVxVtjp+T6T/JRerjn7GwBv84Nk/MNc
LXMnvs59FuqZd4g/4WArpLP24rTKCp1D+KafQCN8SBa9Oo3rRQlDM4X6c4y9Vuh/
XSL4nkvFHuB4x2+kWj/JSv/6aLWistDmbGCvR4BhJ0VhmBqCBpz+NMdEMagCyEYS
yyyflI9PlCYunlIreXDeSRx/UcOxbLY/XmM54mWGXR73lmrvGoQ0GwsLUjD0AMlV
o4QGg0+lfRrYE7RQg8G2yA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:24 2026 by rpki-client