Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/mLhMXQTycQRenzq9TSqQ2QpcXsk.roa
File:                     mLhMXQTycQRenzq9TSqQ2QpcXsk.roa (raw, json)
Hash identifier:          AAz8Ugf2Ec3hhHRcfW4YBOEew1XlMDwh5Vnk19obiFc=
Subject key identifier:   98:B8:4C:5D:04:F2:71:04:5E:9F:3A:BD:4D:2A:90:D9:0A:5C:5E:C9
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       52
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/mLhMXQTycQRenzq9TSqQ2QpcXsk.roa
Signing time:             Tue 31 Mar 2026 08:33:01 +0000
ROA not before:           Tue 31 Mar 2026 08:33:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9997
IP address blocks:        219.100.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Mar 31 08:33:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=98B84C5D04F271045E9F3ABD4D2A90D90A5C5EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:51:4c:f0:67:8f:9f:81:40:c3:b9:a4:e8:
                    4f:8b:1f:fb:68:f3:f3:ab:1d:3b:ed:8f:16:ef:10:
                    12:51:65:af:ab:71:a2:a3:7c:bc:04:cb:3d:0e:73:
                    37:5a:d6:a9:2e:85:e9:bf:c2:61:2f:3a:50:8b:0b:
                    c1:f1:60:1e:f9:6d:ff:f4:b2:31:df:83:d7:9d:68:
                    03:da:85:c1:5c:ee:f6:6d:f0:15:42:51:5d:f0:04:
                    49:18:4f:f0:6f:d0:a9:11:48:7c:25:07:21:73:2c:
                    77:d3:30:7d:b7:f7:9b:30:2d:fb:7c:bf:ad:08:e0:
                    54:76:0f:4d:ca:ed:b1:ce:d9:e6:1f:77:40:5c:07:
                    8a:f6:14:02:18:6f:ff:5f:31:49:75:99:80:36:3a:
                    f6:e3:37:02:d0:dd:9d:14:7d:27:b6:a2:3b:53:19:
                    37:4c:d4:05:bd:a8:15:f3:a3:72:4c:be:37:cc:e0:
                    ec:47:4e:99:fd:4c:2a:26:ed:29:e3:12:9a:61:fb:
                    ff:13:83:bd:79:76:7f:0a:03:70:57:aa:08:c9:93:
                    80:a4:53:8e:1a:b7:d2:dc:db:15:8d:1d:47:aa:34:
                    1f:bd:da:f3:32:85:22:ee:b1:3d:8f:fa:83:b7:d7:
                    91:1c:24:c9:cd:38:e3:b2:0d:e6:91:5e:2b:41:82:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B8:4C:5D:04:F2:71:04:5E:9F:3A:BD:4D:2A:90:D9:0A:5C:5E:C9
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/mLhMXQTycQRenzq9TSqQ2QpcXsk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:3e:f5:59:9f:68:c0:4c:fe:b8:46:86:eb:f9:c8:bd:07:
         7d:71:df:a6:6b:c4:fa:04:3e:d4:92:19:32:a7:9e:43:73:04:
         dd:d7:a9:5f:47:16:4f:ac:64:5d:eb:33:ad:47:7b:89:38:0e:
         f4:74:eb:7a:cd:7b:51:2a:eb:b6:d4:bf:ce:82:36:d4:7a:31:
         46:b4:60:46:86:7d:2d:2d:90:e1:4a:1b:20:54:d1:e2:44:6e:
         a7:f2:9b:8a:d2:68:20:02:62:3c:ba:fe:9a:5e:6e:b7:d5:ea:
         6b:04:58:55:40:91:e9:70:2e:5d:0c:d7:17:c5:14:ab:59:f0:
         eb:af:a3:81:2e:c2:1a:88:37:65:b1:2b:96:87:8c:49:fe:2e:
         7f:5b:de:71:7c:a7:38:9d:44:28:26:6d:be:96:62:14:3a:63:
         d3:79:54:e1:e2:d7:ae:ad:1c:f3:9a:92:36:81:20:87:30:cb:
         a9:bb:3f:94:92:8d:20:9b:fa:5f:3f:6b:03:7e:2b:f5:15:d0:
         36:c2:0e:14:7a:e0:99:e1:b2:e5:1a:9c:24:16:4f:5e:66:14:
         2e:01:56:5a:17:95:37:d0:32:dc:be:08:33:f6:35:74:a9:5e:
         5c:91:7d:85:75:ce:08:2e:da:a6:fd:f4:b6:79:fa:83:d0:59:
         44:28:1b:27
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw
MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTI2MDMzMTA4
MzMwMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOThCODRDNUQwNEYyNzEw
NDVFOUYzQUJENEQyQTkwRDkwQTVDNUVDOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMMiUUzwZ4+fgUDDuaToT4sf+2jz86sdO+2PFu8QElFlr6txoqN8
vATLPQ5zN1rWqS6F6b/CYS86UIsLwfFgHvlt//SyMd+D151oA9qFwVzu9m3wFUJR
XfAESRhP8G/QqRFIfCUHIXMsd9Mwfbf3mzAt+3y/rQjgVHYPTcrtsc7Z5h93QFwH
ivYUAhhv/18xSXWZgDY69uM3AtDdnRR9J7aiO1MZN0zUBb2oFfOjcky+N8zg7EdO
mf1MKibtKeMSmmH7/xODvXl2fwoDcFeqCMmTgKRTjhq30tzbFY0dR6o0H73a8zKF
Iu6xPY/6g7fXkRwkyc0447IN5pFeK0GC628CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSYuExdBPJxBF6fOr1NKpDZClxeyTAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV
RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2
OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NDYvbUxoTVhRVHljUVJlbnpxOVRTcVEyUXBjWHNrLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAttkKDANBgkqhkiG9w0BAQsFAAOCAQEA
PT4+9VmfaMBM/rhGhuv5yL0HfXHfpmvE+gQ+1JIZMqeeQ3ME3depX0cWT6xkXesz
rUd7iTgO9HTres17USrrttS/zoI21HoxRrRgRoZ9LS2Q4UobIFTR4kRup/KbitJo
IAJiPLr+ml5ut9XqawRYVUCR6XAuXQzXF8UUq1nw66+jgS7CGog3ZbErloeMSf4u
f1vecXynOJ1EKCZtvpZiFDpj03lU4eLXrq0c85qSNoEghzDLqbs/lJKNIJv6Xz9r
A34r9RXQNsIOFHrgmeGy5RqcJBZPXmYULgFWWheVN9Ay3L4IM/Y1dKleXJF9hXXO
CC7apv30tnn6g9BZRCgbJw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:46 2026 by rpki-client