Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/RDXawRlUEK8a9NIECCIkvRvUgug.roa
File:                     RDXawRlUEK8a9NIECCIkvRvUgug.roa (raw, json)
Hash identifier:          s9jAT8v/h+hV7VBdXDVBixvDKTWuBm0Vtyzg/zsIpZM=
Subject key identifier:   44:35:DA:C1:19:54:10:AF:1A:F4:D2:04:08:22:24:BD:1B:D4:82:E8
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       016C
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/RDXawRlUEK8a9NIECCIkvRvUgug.roa
Signing time:             Tue 31 Mar 2026 07:48:12 +0000
ROA not before:           Tue 31 Mar 2026 07:48:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        61.213.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4435DAC1195410AF1AF4D204082224BD1BD482E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:2f:d4:5b:94:c3:32:47:cb:ef:3c:68:5e:
                    be:45:36:d6:b7:8e:cc:4d:70:5d:47:27:b7:66:e4:
                    ba:3f:d6:0a:5a:a9:cd:eb:ca:af:14:f5:4c:e0:12:
                    45:de:fd:7f:dc:98:0c:9e:9a:b5:8e:b2:6f:d8:ea:
                    71:64:f8:a5:66:a7:ae:4a:12:50:c5:e2:54:7c:9b:
                    17:fb:47:d3:cf:bd:d7:fe:04:80:ef:8d:e7:52:e6:
                    0b:fc:b9:41:ea:1d:f5:43:c3:04:83:68:66:5f:1f:
                    8d:8d:10:3a:83:dc:5a:98:90:69:29:4b:d0:85:77:
                    0f:0c:a3:d7:9b:c7:f8:6b:2d:39:81:30:f6:2e:d6:
                    43:b2:3f:af:e7:ff:22:34:4f:e3:85:f0:2f:d5:c4:
                    f8:71:05:5e:95:6b:b2:68:1c:1c:fe:af:6a:a5:cd:
                    6e:5b:8b:97:88:44:05:69:9d:72:99:67:3b:e3:a0:
                    ab:98:de:ae:67:d9:32:a6:c3:cf:0f:62:bd:2d:b8:
                    c0:8a:71:6b:51:15:5f:dc:c2:93:56:0b:9a:b1:b9:
                    c6:10:37:d9:9d:f3:0d:e9:88:db:76:16:05:d5:03:
                    a6:d8:13:93:76:09:22:49:b3:73:0c:aa:3e:d5:5c:
                    ee:69:ee:e2:47:ef:66:b9:2c:d1:d8:12:e6:9e:d7:
                    40:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:35:DA:C1:19:54:10:AF:1A:F4:D2:04:08:22:24:BD:1B:D4:82:E8
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/RDXawRlUEK8a9NIECCIkvRvUgug.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:7f:b3:54:54:d6:ea:42:d6:5d:fd:48:e9:aa:a8:5d:b2:99:
         0e:5e:bc:34:cb:98:1d:15:06:a0:6c:09:7f:c7:44:c6:00:8a:
         bf:a5:7d:f8:f9:d2:80:47:db:2d:be:d6:1c:03:b7:df:8a:32:
         78:87:fa:db:19:1c:99:80:63:01:90:fe:b1:1f:3b:b5:d8:e2:
         18:41:88:7c:d3:12:33:68:96:65:54:fd:c4:31:b3:52:7f:74:
         0a:9d:66:14:22:7f:48:fd:19:63:f7:41:43:34:3e:87:c4:5b:
         98:c2:be:10:d3:ad:a3:5d:7c:ce:6b:60:b5:2b:4e:5b:90:e8:
         c8:bd:09:42:5a:6d:ba:4a:c8:1a:86:c2:70:6e:66:3b:56:d5:
         95:4c:7f:1a:39:0f:ed:9d:8c:52:12:b2:4a:b9:7d:a4:10:34:
         15:63:0f:88:0e:57:8d:1d:7b:da:5c:ac:90:5e:35:10:4e:18:
         1d:e7:3c:19:e9:4f:4c:83:44:b9:4d:83:a9:00:c9:c1:ca:77:
         13:26:0b:e5:4a:26:2e:19:b6:ec:dc:19:78:82:8a:63:af:3e:
         31:4c:bf:91:11:b9:33:90:09:51:8e:fc:7b:78:3a:f4:34:03:
         ad:1b:fa:22:6b:a8:68:a5:e2:e0:b8:04:1f:65:6a:41:6c:b4:
         73:5e:68:7e
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw
NzQ4MTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ0MzVEQUMxMTk1NDEw
QUYxQUY0RDIwNDA4MjIyNEJEMUJENDgyRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1Ay/UW5TDMkfL7zxoXr5FNta3jsxNcF1HJ7dm5Lo/1gpaqc3r
yq8U9UzgEkXe/X/cmAyemrWOsm/Y6nFk+KVmp65KElDF4lR8mxf7R9PPvdf+BIDv
jedS5gv8uUHqHfVDwwSDaGZfH42NEDqD3FqYkGkpS9CFdw8Mo9ebx/hrLTmBMPYu
1kOyP6/n/yI0T+OF8C/VxPhxBV6Va7JoHBz+r2qlzW5bi5eIRAVpnXKZZzvjoKuY
3q5n2TKmw88PYr0tuMCKcWtRFV/cwpNWC5qxucYQN9md8w3piNt2FgXVA6bYE5N2
CSJJs3MMqj7VXO5p7uJH72a5LNHYEuae10DhAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQURDXawRlUEK8a9NIECCIkvRvUgugwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDEyOC9SRFhhd1JsVUVLOGE5TklFQ0NJa3ZSdlVndWcucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPdWgMA0GCSqGSIb3DQEBCwUA
A4IBAQAEf7NUVNbqQtZd/UjpqqhdspkOXrw0y5gdFQagbAl/x0TGAIq/pX34+dKA
R9stvtYcA7ffijJ4h/rbGRyZgGMBkP6xHzu12OIYQYh80xIzaJZlVP3EMbNSf3QK
nWYUIn9I/Rlj90FDND6HxFuYwr4Q062jXXzOa2C1K05bkOjIvQlCWm26SsgahsJw
bmY7VtWVTH8aOQ/tnYxSErJKuX2kEDQVYw+IDleNHXvaXKyQXjUQThgd5zwZ6U9M
g0S5TYOpAMnByncTJgvlSiYuGbbs3Bl4gopjrz4xTL+REbkzkAlRjvx7eDr0NAOt
G/oia6hopeLguAQfZWpBbLRzXmh+
-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:15 2026 by rpki-client