Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/J0ifGwpeLAhV0HIgi-zAA2eFFwk.roa
File:                     J0ifGwpeLAhV0HIgi-zAA2eFFwk.roa (raw, json)
Hash identifier:          nLWjf6UlBibEXnvIxLLFD9BVzzog36nolbbwzUmFRiU=
Subject key identifier:   27:48:9F:1B:0A:5E:2C:08:55:D0:72:20:8B:EC:C0:03:67:85:17:09
Certificate issuer:       /CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Certificate serial:       58
Authority key identifier: 4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/J0ifGwpeLAhV0HIgi-zAA2eFFwk.roa
Signing time:             Tue 31 Mar 2026 07:52:17 +0000
ROA not before:           Tue 31 Mar 2026 07:52:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        133.117.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
        Validity
            Not Before: Mar 31 07:52:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=27489F1B0A5E2C0855D072208BECC00367851709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:3f:43:c7:15:c5:fd:a9:c8:f1:9e:50:31:
                    92:83:5f:4c:bf:13:92:89:e1:47:c5:d2:fa:1c:14:
                    9a:42:cc:a1:51:1a:d9:49:d7:8b:a8:4a:94:30:cb:
                    1c:30:e3:80:45:4a:4e:a8:de:63:ee:2a:be:d8:dd:
                    29:49:5b:7a:73:8c:ac:f1:b9:2a:4e:4e:ca:de:ad:
                    fa:ca:9a:62:1a:bd:da:bd:27:ab:f0:56:5d:92:e2:
                    17:09:90:ac:28:a4:ac:1d:13:58:33:e2:d5:6b:9e:
                    cb:ef:f9:a1:60:65:77:39:02:59:b3:a8:9b:17:7d:
                    96:5d:77:82:62:9c:8b:b6:6e:25:1c:d2:17:42:3e:
                    45:a8:fb:f6:e1:4c:69:64:c5:6e:e4:9a:83:99:fc:
                    5c:86:3f:ce:b9:b0:1b:99:d9:25:5c:0a:1e:67:cf:
                    d5:77:4c:5e:43:86:00:36:b7:25:a9:ba:b0:6b:8e:
                    5c:99:9d:8e:13:91:42:6f:33:05:c5:bb:36:19:98:
                    60:38:fd:69:98:68:eb:b0:c5:c2:0c:9e:50:1c:11:
                    9a:d8:33:ae:87:ef:3d:b3:7a:07:4e:b1:0e:6c:40:
                    4d:15:7e:65:1a:c4:ff:81:eb:82:a5:07:ba:c4:f1:
                    8e:c6:05:9a:eb:31:92:41:15:8e:b7:5d:20:1e:65:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:48:9F:1B:0A:5E:2C:08:55:D0:72:20:8B:EC:C0:03:67:85:17:09
            X509v3 Authority Key Identifier:
                keyid:4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/J0ifGwpeLAhV0HIgi-zAA2eFFwk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.117.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:9e:f8:c7:e3:25:ad:77:76:da:32:94:a0:9a:f7:f2:31:97:
         67:34:cb:a1:6c:e9:00:ff:2e:58:8b:ec:91:0f:89:29:57:b5:
         1f:86:06:ff:9f:14:ab:71:56:a9:a9:92:a8:22:2e:a6:b1:12:
         71:d9:38:23:46:bc:05:0e:a8:17:d9:62:d7:8f:79:0b:e7:2c:
         6a:0a:e2:95:a9:4f:e4:4b:b6:2e:1c:f4:4c:66:8f:13:47:c7:
         ba:c5:c5:3f:ec:f0:c2:0a:d3:c9:8b:c6:60:52:1b:50:ef:69:
         42:a0:f8:0d:72:ce:93:67:0f:00:d1:cc:62:96:c3:a5:42:e0:
         96:e9:1c:d5:c7:21:7f:de:53:57:ec:f8:7c:39:81:60:ec:5b:
         b6:68:3f:55:4d:ae:9a:68:cd:8d:11:61:f5:12:e9:aa:f1:83:
         93:8e:3e:a3:9c:27:ed:99:84:4e:6c:ed:2b:26:ce:be:ea:1d:
         a6:50:98:32:e7:63:d6:22:f3:a0:9a:ab:f2:3b:4e:84:76:08:
         17:0e:e1:49:1b:74:1b:05:39:a1:e3:2a:1c:d1:ea:c2:7e:7f:
         e0:82:df:30:d0:16:48:e4:cb:8e:b5:f9:92:ca:b5:e9:00:ba:
         1c:60:5a:7c:1f:df:de:3e:05:60:7d:e3:57:8b:21:01:48:9e:
         7c:d9:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:58 2026 by rpki-client