Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/nBKFjMkdfODIyDAsVUAFTotDYL4.roa
File:                     nBKFjMkdfODIyDAsVUAFTotDYL4.roa (raw, json)
Hash identifier:          4uDHSwXo+VDIQCrx/WJkYRTmp3rC+NHv04FvgXYZTVk=
Subject key identifier:   9C:12:85:8C:C9:1D:7C:E0:C8:C8:30:2C:55:40:05:4E:8B:43:60:BE
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       017C
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/nBKFjMkdfODIyDAsVUAFTotDYL4.roa
Signing time:             Tue 31 Mar 2026 07:48:20 +0000
ROA not before:           Tue 31 Mar 2026 07:48:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        211.130.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9C12858CC91D7CE0C8C8302C5540054E8B4360BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:f6:ee:d6:5e:1e:8f:54:6f:79:dd:83:30:
                    34:a0:dd:46:9f:51:8d:5f:05:1c:5c:2b:f6:2f:5e:
                    c0:5f:f2:a9:c2:07:18:09:71:13:61:0d:be:7f:61:
                    6d:29:08:10:88:f8:76:8c:2e:b0:e2:ea:45:3d:1b:
                    df:ef:7a:08:e1:9d:a6:ff:e0:12:9b:fe:40:b0:78:
                    e9:b0:83:59:a2:d3:e1:ec:8c:07:95:a6:8a:23:b9:
                    df:f7:1f:5d:d8:53:21:4a:7d:44:a4:9f:d3:40:93:
                    60:3a:d0:d2:2a:73:ea:d7:1b:9e:67:64:1a:55:97:
                    66:57:60:f7:99:a1:63:e5:04:77:da:12:97:bc:f8:
                    ee:ea:5c:10:b7:a2:da:76:c3:ce:19:1b:db:91:ab:
                    33:8d:27:32:29:f3:e2:4c:c8:a1:3c:4c:87:c0:e3:
                    33:a1:cd:85:91:4a:09:17:fe:d7:df:0f:4f:46:cf:
                    5e:02:ea:1a:49:62:80:62:2e:0a:85:69:6d:32:5b:
                    22:22:63:f0:ce:5e:8c:63:96:f2:41:e2:f5:9b:4c:
                    58:c1:c6:0d:2b:24:53:a7:68:3b:03:db:04:e8:45:
                    b1:a3:97:5d:8f:e4:05:56:64:ed:a1:21:d4:bb:52:
                    4a:14:94:1e:f1:1c:cf:2e:14:46:09:8e:7e:79:76:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:12:85:8C:C9:1D:7C:E0:C8:C8:30:2C:55:40:05:4E:8B:43:60:BE
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/nBKFjMkdfODIyDAsVUAFTotDYL4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.130.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:76:91:69:7a:62:57:1a:75:d1:6c:5e:80:11:ca:53:99:2b:
         41:b6:ef:f7:94:d1:c8:e5:f5:31:ba:21:ce:2b:f4:1c:3e:6a:
         35:cd:c2:6b:c3:ba:f9:a3:f8:35:aa:45:d6:34:fa:89:46:4d:
         11:ec:1d:82:36:23:9d:40:56:64:91:9c:25:ff:ca:d8:03:ec:
         f4:9f:21:9b:65:1f:b6:1e:e2:9f:d0:94:8c:24:e0:51:5f:be:
         9c:39:7e:ba:06:50:99:f8:b2:2d:df:ff:91:ac:17:7a:d9:4f:
         27:db:0e:b2:ca:f6:56:08:23:ec:e8:1e:7a:9b:fb:3d:44:94:
         0d:67:55:61:58:d7:ea:1a:1b:f2:38:e0:8f:33:e0:52:a0:47:
         90:6f:92:64:6b:f9:9d:59:4e:bc:18:0a:d0:c5:f9:b9:9f:1e:
         40:8c:af:31:75:6a:89:c8:bf:ee:42:40:82:3e:cd:eb:f4:97:
         ff:c3:c3:2b:66:40:ad:53:4e:3e:22:8b:69:ae:8c:9b:39:30:
         3c:8d:11:a4:96:86:5e:46:81:16:55:f8:bf:5e:98:51:a0:94:
         6e:c2:2c:32:ed:ff:c6:55:90:16:b3:08:f0:65:88:d8:81:7a:
         1f:84:cd:88:ce:cb:6c:09:02:e9:92:63:bf:10:6c:46:61:b6:
         9f:9a:de:16
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw
NzQ4MjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlDMTI4NThDQzkxRDdD
RTBDOEM4MzAyQzU1NDAwNTRFOEI0MzYwQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL5/bu1l4ej1Rved2DMDSg3UafUY1fBRxcK/YvXsBf8qnCBxgJ
cRNhDb5/YW0pCBCI+HaMLrDi6kU9G9/vegjhnab/4BKb/kCweOmwg1mi0+HsjAeV
poojud/3H13YUyFKfUSkn9NAk2A60NIqc+rXG55nZBpVl2ZXYPeZoWPlBHfaEpe8
+O7qXBC3otp2w84ZG9uRqzONJzIp8+JMyKE8TIfA4zOhzYWRSgkX/tffD09Gz14C
6hpJYoBiLgqFaW0yWyIiY/DOXoxjlvJB4vWbTFjBxg0rJFOnaDsD2wToRbGjl12P
5AVWZO2hIdS7UkoUlB7xHM8uFEYJjn55djbfAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUnBKFjMkdfODIyDAsVUAFTotDYL4wHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDEyOC9uQktGak1rZGZPREl5REFzVlVBRlRvdERZTDQucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF04JgMA0GCSqGSIb3DQEBCwUA
A4IBAQBtdpFpemJXGnXRbF6AEcpTmStBtu/3lNHI5fUxuiHOK/QcPmo1zcJrw7r5
o/g1qkXWNPqJRk0R7B2CNiOdQFZkkZwl/8rYA+z0nyGbZR+2HuKf0JSMJOBRX76c
OX66BlCZ+LIt3/+RrBd62U8n2w6yyvZWCCPs6B56m/s9RJQNZ1VhWNfqGhvyOOCP
M+BSoEeQb5Jka/mdWU68GArQxfm5nx5AjK8xdWqJyL/uQkCCPs3r9Jf/w8MrZkCt
U04+IotproybOTA8jRGkloZeRoEWVfi/XphRoJRuwiwy7f/GVZAWswjwZYjYgXof
hM2IzstsCQLpkmO/EGxGYbafmt4W
-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:15 2026 by rpki-client