Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20028/RbpZYJM8DC7AtCzNNOUk-UxHWz4.roa
File:                     RbpZYJM8DC7AtCzNNOUk-UxHWz4.roa (raw, json)
Hash identifier:          OX2jF9MN1wOWhbV7qw2XgXuDAiAbXkaZ2qjcZwvJ6G0=
Subject key identifier:   45:BA:59:60:93:3C:0C:2E:C0:B4:2C:CD:34:E5:24:F9:4C:47:5B:3E
Certificate issuer:       /CN=D76CABBF06D33FBC002EE07B000140BC3B612B16
Certificate serial:       19
Authority key identifier: D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/RbpZYJM8DC7AtCzNNOUk-UxHWz4.roa
Signing time:             Tue 31 Mar 2026 08:46:04 +0000
ROA not before:           Tue 31 Mar 2026 08:46:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131915
IP address blocks:        133.186.16.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D76CABBF06D33FBC002EE07B000140BC3B612B16
        Validity
            Not Before: Mar 31 08:46:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=45BA5960933C0C2EC0B42CCD34E524F94C475B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:ef:83:0c:16:13:56:7f:20:13:3d:0c:85:
                    42:07:78:ce:a5:f2:33:f0:9a:a5:40:65:f5:22:76:
                    95:71:ee:55:c1:23:f1:3c:bb:7d:de:11:86:f7:18:
                    32:04:38:84:3d:a1:ca:15:bb:91:a7:a8:e4:a1:4b:
                    85:ec:ea:f2:57:12:13:eb:7c:22:79:ee:41:dd:9b:
                    06:8e:65:a0:ea:21:69:66:99:61:15:77:11:7e:a3:
                    6c:bd:76:84:9f:91:13:c7:02:f6:24:e2:61:fc:25:
                    cf:d0:bf:12:cd:8a:54:9c:15:31:be:e7:3f:18:24:
                    ec:42:f3:8f:16:b3:67:4e:92:44:d4:42:a1:d7:53:
                    0d:78:f5:64:2d:b1:fd:bb:c4:a7:00:bc:3b:f0:e0:
                    97:03:db:c1:c5:91:3b:c9:21:3b:5a:62:5b:84:69:
                    65:37:3a:7b:a9:6a:38:ee:10:bb:9b:5b:76:34:ab:
                    9c:84:56:b4:6e:29:8e:db:dd:ef:64:c5:c1:c2:c2:
                    20:91:bb:1f:f0:e6:bd:5d:59:a8:ae:26:77:c8:cc:
                    a1:e2:2d:92:32:ca:38:60:e0:ae:32:65:7c:73:16:
                    0a:e5:57:db:01:14:53:b2:8c:3b:9e:02:9d:8f:82:
                    d4:b3:94:d3:8d:20:71:cf:9f:c0:d0:c2:0f:23:9c:
                    98:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BA:59:60:93:3C:0C:2E:C0:B4:2C:CD:34:E5:24:F9:4C:47:5B:3E
            X509v3 Authority Key Identifier:
                keyid:D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/RbpZYJM8DC7AtCzNNOUk-UxHWz4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.186.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:02:d9:4a:79:bb:84:85:1e:63:51:ad:8c:63:4e:dd:b9:81:
         80:fc:d5:9e:eb:4a:2d:96:13:32:35:07:84:52:e9:b6:21:1e:
         89:56:be:b2:11:ca:5a:67:35:4f:c6:90:50:8d:cf:f0:c4:c1:
         13:87:e5:93:f9:0b:55:34:d3:a3:c7:4b:09:53:18:d8:72:e2:
         05:7a:40:0b:64:9c:15:39:12:d8:dd:51:0b:fc:7f:73:44:85:
         35:d8:59:82:fa:7a:d0:f6:03:db:af:70:80:96:25:9d:53:18:
         b1:be:23:19:d0:7e:2d:0b:63:c4:fb:8b:f2:ab:02:b1:1a:16:
         c5:41:39:d8:17:5f:18:4d:25:37:7d:e7:d1:8a:24:12:08:f9:
         48:12:71:07:e8:27:fa:78:b6:fd:9d:f4:6b:c3:94:0c:48:e1:
         cc:d6:d2:2b:34:de:31:9a:f7:cf:11:10:3a:10:0a:0a:a5:30:
         e7:b6:59:5c:2d:44:d0:52:07:31:ad:1a:f4:01:c9:60:9b:ab:
         1a:eb:6f:9f:46:14:db:e4:fa:6e:d3:09:8a:0a:ec:cb:92:87:
         25:95:53:3d:9a:cb:0c:ff:69:6f:a3:31:c2:fa:61:40:93:f2:
         c7:a6:3b:2a:f4:da:b7:a9:fc:ab:08:61:0a:ee:f9:13:d8:db:
         d4:d1:0f:30
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzZD
QUJCRjA2RDMzRkJDMDAyRUUwN0IwMDAxNDBCQzNCNjEyQjE2MB4XDTI2MDMzMTA4
NDYwNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDVCQTU5NjA5MzNDMEMy
RUMwQjQyQ0NEMzRFNTI0Rjk0QzQ3NUIzRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALCg74MMFhNWfyATPQyFQgd4zqXyM/CapUBl9SJ2lXHuVcEj8Ty7
fd4RhvcYMgQ4hD2hyhW7kaeo5KFLhezq8lcSE+t8InnuQd2bBo5loOohaWaZYRV3
EX6jbL12hJ+RE8cC9iTiYfwlz9C/Es2KVJwVMb7nPxgk7ELzjxazZ06SRNRCoddT
DXj1ZC2x/bvEpwC8O/DglwPbwcWRO8khO1piW4RpZTc6e6lqOO4Qu5tbdjSrnIRW
tG4pjtvd72TFwcLCIJG7H/DmvV1ZqK4md8jMoeItkjLKOGDgrjJlfHMWCuVX2wEU
U7KMO54CnY+C1LOU040gcc+fwNDCDyOcmDECAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBRFullgkzwMLsC0LM005ST5TEdbPjAfBgNVHSMEGDAWgBTXbKu/BtM/vAAu4HsA
AUC8O2ErFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMjgvMTJ5cnZ3YlRQN3dBTHVCN0FBRkF2RHRoS3hZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTJ5cnZ3YlRQN3dBTHVCN0FBRkF2
RHRoS3hZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDI4L1JicFpZSk04REM3QXRDek5OT1VrLVV4SFd6NC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASFuhAwDQYJKoZIhvcNAQELBQAD
ggEBAMsC2Up5u4SFHmNRrYxjTt25gYD81Z7rSi2WEzI1B4RS6bYhHolWvrIRylpn
NU/GkFCNz/DEwROH5ZP5C1U006PHSwlTGNhy4gV6QAtknBU5EtjdUQv8f3NEhTXY
WYL6etD2A9uvcICWJZ1TGLG+IxnQfi0LY8T7i/KrArEaFsVBOdgXXxhNJTd959GK
JBII+UgScQfoJ/p4tv2d9GvDlAxI4czW0is03jGa988REDoQCgqlMOe2WVwtRNBS
BzGtGvQByWCbqxrrb59GFNvk+m7TCYoK7MuShyWVUz2aywz/aW+jMcL6YUCT8sem
Oyr02rep/KsIYQru+RPY29TRDzA=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:37 2026 by rpki-client