Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/CjmMjg9RKE9zN-uJ6X-A0bz_FrE.roa
File:                     CjmMjg9RKE9zN-uJ6X-A0bz_FrE.roa (raw, json)
Hash identifier:          l1HifF+GM46Z/Q3CBQrf42C3V+qPfMErm8cC5T0lr8U=
Subject key identifier:   0A:39:8C:8E:0F:51:28:4F:73:37:EB:89:E9:7F:80:D1:BC:FF:16:B1
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0169
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/CjmMjg9RKE9zN-uJ6X-A0bz_FrE.roa
Signing time:             Tue 31 Mar 2026 07:48:11 +0000
ROA not before:           Tue 31 Mar 2026 07:48:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        61.213.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0A398C8E0F51284F7337EB89E97F80D1BCFF16B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:ed:65:89:38:16:69:cc:d5:17:2f:4d:ef:
                    33:16:77:a6:2c:0b:05:3d:fc:c4:c4:3b:1b:1a:b7:
                    c5:af:6e:af:96:e8:b9:47:ff:21:b2:35:ab:ea:96:
                    c7:92:a7:28:b6:47:93:d8:6e:e7:d5:75:54:54:f7:
                    59:db:24:77:f4:a6:6f:9d:c4:bc:5d:59:d0:38:39:
                    d4:5c:5f:8d:5b:b4:86:e1:58:c6:63:95:88:c8:58:
                    42:90:ff:17:e2:64:2e:d1:a8:85:08:7f:4d:d8:a6:
                    fe:33:3a:11:b6:31:ab:6e:e7:f0:07:70:5e:0c:4f:
                    35:46:83:65:96:a1:6d:72:4c:58:f6:27:e8:3e:51:
                    b3:de:b6:bf:f1:7d:36:56:db:97:9e:e2:4b:22:b8:
                    88:10:29:18:e1:76:f7:bd:3b:84:4f:e7:4f:dc:8f:
                    98:54:fb:80:49:cf:8b:2c:e6:6b:fb:dc:20:a4:37:
                    8e:b1:6c:a5:70:8a:da:cc:dd:79:fc:11:63:64:ec:
                    d0:f2:e9:4a:4c:dc:65:9a:07:0c:e8:6e:1b:20:36:
                    f0:e6:e7:83:17:28:ee:39:0f:71:4c:1c:9e:be:aa:
                    16:ef:9f:be:cc:c4:f9:71:14:52:f6:d1:50:ec:5e:
                    48:2f:0e:11:3c:7f:4b:65:63:72:39:9f:35:eb:a7:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:39:8C:8E:0F:51:28:4F:73:37:EB:89:E9:7F:80:D1:BC:FF:16:B1
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/CjmMjg9RKE9zN-uJ6X-A0bz_FrE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:94:fb:5c:b3:ad:bb:a8:54:f1:48:a9:c7:9a:eb:f9:d8:3d:
         aa:6a:e3:dd:cd:f6:34:ec:75:3e:4e:82:b3:de:34:bc:5d:40:
         34:48:72:33:a7:95:40:a6:62:47:49:83:86:e7:ff:9d:f4:58:
         b2:49:f5:79:f7:3b:db:f7:05:29:75:04:c0:db:5a:f0:af:14:
         f7:ef:18:74:c1:f3:92:ba:8f:34:e8:66:ea:fc:ab:e8:96:f6:
         a4:69:75:c5:35:a8:3d:ff:c4:6a:be:e5:50:f5:b0:ab:d9:16:
         e0:76:0f:ae:27:d6:ba:89:2b:73:9b:d3:53:48:1a:0f:41:0f:
         9e:3f:94:00:f3:d3:a4:32:66:f2:17:a8:70:31:ee:66:81:46:
         af:9d:8d:3f:8f:76:ec:98:12:0b:6e:b8:39:51:99:66:29:91:
         2b:9e:e3:62:97:0f:f6:13:ab:05:cc:50:06:b1:3a:fd:29:8c:
         33:e2:d2:7c:80:25:37:ef:f4:c6:77:09:2c:69:a0:91:54:20:
         4d:be:a0:af:1b:28:00:80:17:15:d8:09:55:53:ea:81:36:ba:
         51:15:57:03:f3:91:85:01:83:62:5b:5c:fb:95:73:ad:1b:5f:
         78:9f:1f:17:55:88:aa:5e:84:09:10:d1:0f:6a:62:9e:80:38:
         72:dc:41:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:13 2026 by rpki-client