Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Ag1VizhIG_vTBxc-quSPn52_YmQ.roa
File:                     Ag1VizhIG_vTBxc-quSPn52_YmQ.roa (raw, json)
Hash identifier:          fzkk3RlrfPzkF0ZkNOZGgnqGnoYtB0Pj/TCIKRheGZY=
Subject key identifier:   02:0D:55:8B:38:48:1B:FB:D3:07:17:3E:AA:E4:8F:9F:9D:BF:62:64
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0177
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Ag1VizhIG_vTBxc-quSPn52_YmQ.roa
Signing time:             Tue 31 Mar 2026 07:48:18 +0000
ROA not before:           Tue 31 Mar 2026 07:48:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        101.110.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=020D558B38481BFBD307173EAAE48F9F9DBF6264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:99:87:6a:f7:b5:9d:24:ed:c8:13:a4:8c:
                    fa:bd:1c:53:4f:8b:ea:18:24:83:fc:6c:39:2b:0c:
                    64:62:c0:55:ed:ad:36:ee:4c:e9:98:e2:c8:bc:38:
                    86:83:e3:92:8e:bc:dc:ce:7a:71:76:bd:31:be:ed:
                    dc:f3:98:a2:3c:a3:5a:b0:47:54:2e:fd:ca:03:73:
                    35:8e:15:51:21:73:f1:1a:18:1f:f0:cf:6f:26:b9:
                    02:43:e6:3f:94:24:33:38:46:71:89:e7:f6:79:69:
                    1a:9a:e4:da:eb:58:7a:7c:af:4b:24:c0:74:83:9e:
                    55:16:21:79:ef:d2:c8:7d:83:cc:8d:e1:f3:9f:7a:
                    c4:1e:00:b5:d1:11:51:f2:59:dc:a7:82:b9:b7:37:
                    98:26:26:95:5d:6d:39:2b:9b:fa:80:05:f3:3b:62:
                    35:8c:d0:3e:b9:18:76:76:58:80:69:14:dc:2d:77:
                    4c:d7:c2:c7:72:50:de:95:50:d4:96:ab:97:94:6c:
                    4d:cb:84:97:bc:15:d8:4b:84:39:7b:bd:cc:88:29:
                    af:74:bc:e9:8b:e3:38:b4:bd:14:22:c4:f8:7e:0f:
                    da:20:06:77:83:75:b3:bf:27:b8:24:9b:e9:16:4c:
                    93:c5:89:ea:5c:36:01:e6:b1:15:ba:26:b8:65:ac:
                    0c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0D:55:8B:38:48:1B:FB:D3:07:17:3E:AA:E4:8F:9F:9D:BF:62:64
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Ag1VizhIG_vTBxc-quSPn52_YmQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.110.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9a:e2:c8:bb:ef:79:bf:03:96:fb:7c:06:7d:e1:66:56:ca:67:
         a0:80:72:0d:f8:9c:f6:36:8d:8d:3d:c5:ba:c8:1f:c2:4b:60:
         00:22:6f:1b:bc:a0:c9:bf:39:1e:c4:f0:8a:cb:0f:1e:e7:62:
         8d:c0:62:ff:7f:c8:f3:ba:b6:ee:65:f5:37:28:99:e6:2f:c6:
         96:28:b0:88:d6:b5:cf:f1:06:a7:e3:9d:0c:49:ed:72:9a:76:
         7c:ff:26:92:a9:f3:e6:23:50:e1:82:c6:19:8a:56:78:71:1c:
         f9:27:3e:b3:19:f6:d9:04:3c:1d:60:e9:5f:cd:79:1a:91:5e:
         b5:92:53:ab:9c:49:3b:0d:73:67:33:c5:a9:15:52:4e:86:e3:
         a1:42:94:27:43:e7:99:df:d9:8d:37:80:06:4f:f9:a4:ed:ad:
         f1:f5:7b:ad:8a:86:df:ce:50:5b:ee:34:20:8e:5e:a0:a4:59:
         12:f4:42:a9:74:2b:80:56:8e:d5:38:cd:5e:d5:d1:5e:4a:03:
         e1:09:57:66:b0:8f:7e:21:32:00:83:0d:1d:ae:60:67:ae:25:
         9d:1d:2d:38:4a:4d:16:cc:98:e8:4c:86:2e:2e:ed:27:f3:04:
         de:71:64:5d:de:ac:22:e4:2a:0d:70:bd:22:a6:7e:02:4a:3d:
         55:84:2b:29
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw
NzQ4MThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyMEQ1NThCMzg0ODFC
RkJEMzA3MTczRUFBRTQ4RjlGOURCRjYyNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCng5mHave1nSTtyBOkjPq9HFNPi+oYJIP8bDkrDGRiwFXtrTbu
TOmY4si8OIaD45KOvNzOenF2vTG+7dzzmKI8o1qwR1Qu/coDczWOFVEhc/EaGB/w
z28muQJD5j+UJDM4RnGJ5/Z5aRqa5NrrWHp8r0skwHSDnlUWIXnv0sh9g8yN4fOf
esQeALXREVHyWdyngrm3N5gmJpVdbTkrm/qABfM7YjWM0D65GHZ2WIBpFNwtd0zX
wsdyUN6VUNSWq5eUbE3LhJe8FdhLhDl7vcyIKa90vOmL4zi0vRQixPh+D9ogBneD
dbO/J7gkm+kWTJPFiepcNgHmsRW6JrhlrAzHAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUAg1VizhIG/vTBxc+quSPn52/YmQwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDEyOC9BZzFWaXpoSUdfdlRCeGMtcXVTUG41Ml9ZbVEucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHZW6AMA0GCSqGSIb3DQEBCwUA
A4IBAQCa4si773m/A5b7fAZ94WZWymeggHIN+Jz2No2NPcW6yB/CS2AAIm8bvKDJ
vzkexPCKyw8e52KNwGL/f8jzurbuZfU3KJnmL8aWKLCI1rXP8Qan450MSe1ymnZ8
/yaSqfPmI1DhgsYZilZ4cRz5Jz6zGfbZBDwdYOlfzXkakV61klOrnEk7DXNnM8Wp
FVJOhuOhQpQnQ+eZ39mNN4AGT/mk7a3x9XutiobfzlBb7jQgjl6gpFkS9EKpdCuA
Vo7VOM1e1dFeSgPhCVdmsI9+ITIAgw0drmBnriWdHS04Sk0WzJjoTIYuLu0n8wTe
cWRd3qwi5CoNcL0ipn4CSj1VhCsp
-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:14 2026 by rpki-client