Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/kJUtm-J1uqAEToBPyMPJb1GzI7k.roa
File:                     kJUtm-J1uqAEToBPyMPJb1GzI7k.roa (raw, json)
Hash identifier:          zOZPMw3owy5G9IZOGppjkn49RD6V8Jd8II3SUXrFqxg=
Subject key identifier:   90:95:2D:9B:E2:75:BA:A0:04:4E:80:4F:C8:C3:C9:6F:51:B3:23:B9
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02B9
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/kJUtm-J1uqAEToBPyMPJb1GzI7k.roa
Signing time:             Tue 31 Mar 2026 07:34:40 +0000
ROA not before:           Tue 31 Mar 2026 07:34:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        182.48.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=90952D9BE275BAA0044E804FC8C3C96F51B323B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:2c:38:c0:cf:5e:28:d3:e5:b9:9c:af:63:
                    da:46:86:f2:a2:de:e7:8d:43:a9:c4:02:f7:1a:06:
                    3f:37:cd:bf:11:42:83:7a:80:6b:dc:1c:eb:e8:ff:
                    0e:d3:30:37:6b:a1:5e:be:7f:22:46:32:7e:d0:65:
                    7c:a7:ed:3b:95:1b:2b:10:13:e0:c9:61:06:bb:3c:
                    fb:95:df:51:20:94:da:77:07:0c:79:bf:8f:42:90:
                    03:b2:0b:51:4e:41:05:b1:92:f3:94:b6:a2:d5:fb:
                    b7:9e:9b:55:dd:9e:1b:1f:6e:fd:63:6a:d7:6f:5a:
                    8d:53:23:bd:03:32:95:92:75:c8:99:dd:dd:fa:2d:
                    e1:81:e6:8d:65:40:bf:a0:ed:45:ac:73:d9:f8:3f:
                    41:0e:e1:50:c5:a7:d0:bd:51:1f:bb:99:1a:68:34:
                    9d:ca:f3:19:48:0e:68:58:3a:81:0f:89:c2:02:53:
                    b6:0f:30:34:ec:97:38:1b:4d:fc:50:cc:07:e9:17:
                    90:b2:b1:72:5a:52:6e:4c:c1:a3:a9:20:13:b2:ee:
                    db:7f:2f:ea:00:14:c4:15:aa:37:34:da:66:5e:62:
                    11:88:30:ae:1c:cf:49:53:0c:c6:cd:b9:a6:ad:6c:
                    5b:91:32:25:8c:34:a3:35:13:c4:a0:a1:16:c7:04:
                    3a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:95:2D:9B:E2:75:BA:A0:04:4E:80:4F:C8:C3:C9:6F:51:B3:23:B9
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/kJUtm-J1uqAEToBPyMPJb1GzI7k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:83:6a:50:45:06:5f:74:87:fa:e9:a1:65:b4:1d:9f:13:a2:
         0a:57:0b:48:e2:bc:e8:31:fe:37:ec:fb:93:16:40:45:36:d0:
         da:1f:98:4d:b8:48:32:a8:32:d3:34:d3:db:d4:82:ba:c3:df:
         0e:4f:98:a4:9d:92:39:d8:18:8e:9c:a8:64:de:78:c0:d3:c5:
         38:ea:13:c3:05:d1:c7:7a:05:7f:42:95:95:06:fa:f5:97:71:
         99:43:00:9a:84:a3:78:1b:f9:81:b0:09:17:13:18:87:63:1c:
         91:d3:40:6d:8a:90:01:6a:9b:51:12:df:f5:70:fd:04:2b:26:
         f2:b7:75:bd:7a:a9:0b:6d:e5:c9:84:a9:93:45:0a:eb:7a:44:
         00:95:7b:ab:e4:85:5b:f7:5e:8d:c2:11:29:ca:86:81:de:d7:
         02:f6:d2:83:81:23:3e:5d:36:ee:92:80:47:28:db:68:27:8b:
         6a:c8:09:9c:58:e9:cf:91:bd:d6:f0:dc:4b:65:cc:58:28:80:
         64:64:39:47:eb:d8:aa:10:6c:1b:5f:2c:5b:ef:a9:c9:e8:48:
         67:7c:d5:f0:7e:91:bc:11:c7:d2:59:18:52:77:b9:8e:8c:e4:
         52:c4:61:ad:89:0b:ec:f7:ac:ef:e0:ae:a4:66:68:43:93:f5:
         5d:39:f9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:53 2026 by rpki-client