Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/lf9yTkZWPaRDsDbmeNeC3XxlFFA.roa
File:                     lf9yTkZWPaRDsDbmeNeC3XxlFFA.roa (raw, json)
Hash identifier:          xAPp6ozHSPH8+CNpyy0rHEGxrs+Y9UlXqIJxNRnnISw=
Subject key identifier:   95:FF:72:4E:46:56:3D:A4:43:B0:36:E6:78:D7:82:DD:7C:65:14:50
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       80
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/lf9yTkZWPaRDsDbmeNeC3XxlFFA.roa
Signing time:             Tue 31 Mar 2026 07:32:35 +0000
ROA not before:           Tue 31 Mar 2026 07:32:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2907
IP address blocks:        202.209.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Mar 31 07:32:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=95FF724E46563DA443B036E678D782DD7C651450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:dd:0f:4d:ee:93:aa:5c:28:1a:7c:00:a4:
                    04:d6:8d:42:1c:30:f9:0d:de:34:d0:18:aa:4a:49:
                    d9:1e:26:93:23:fb:c9:ef:41:3f:3e:dd:9e:a3:55:
                    23:4c:e1:55:80:66:9a:0e:d0:7f:33:a6:56:ef:90:
                    27:90:da:06:66:d1:c3:e7:be:bd:4d:8c:92:ce:ce:
                    fb:64:80:b4:da:b7:5b:26:85:90:c0:92:8e:c1:d6:
                    47:ce:58:5b:c8:9c:81:96:9e:89:e9:59:e4:0e:b6:
                    7d:83:b3:af:9a:d2:e5:a0:dd:5c:ca:c7:5e:a9:c7:
                    d1:38:c8:ac:6c:ff:69:48:0e:9a:ac:ee:86:13:6a:
                    d8:fb:e9:ec:20:15:b7:46:7d:b4:b7:d4:0b:75:14:
                    f5:37:cf:c0:92:69:c9:de:ec:d6:95:27:ec:99:6b:
                    ad:86:3d:71:ff:ff:ed:64:1c:41:86:87:f0:0d:31:
                    ba:36:d9:09:f5:fe:7d:91:85:ce:2a:18:53:da:d6:
                    26:82:ba:04:6f:44:9d:a4:08:6f:47:84:7c:29:42:
                    19:e8:aa:7f:0c:af:90:7c:41:71:83:cf:11:b3:15:
                    8b:c4:8e:b2:5a:d7:6f:ae:1d:62:1b:06:61:e0:35:
                    35:cb:8c:5c:06:53:03:74:e7:f0:d2:53:96:f0:9a:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FF:72:4E:46:56:3D:A4:43:B0:36:E6:78:D7:82:DD:7C:65:14:50
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/lf9yTkZWPaRDsDbmeNeC3XxlFFA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.209.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:b8:9e:c9:75:8d:3e:20:e4:f7:50:6d:a9:45:c3:7e:b5:41:
         e9:f4:d4:7b:02:15:a1:f5:99:3a:ee:31:e7:28:38:df:6e:96:
         6e:c8:94:26:76:fa:04:cd:fd:b0:97:92:8f:c0:4c:ae:75:1c:
         77:c8:eb:de:f1:a1:45:dc:3d:8c:45:05:5c:1b:24:64:38:d3:
         10:0e:2f:a9:d9:3b:59:97:cd:4c:98:2c:53:a0:03:b0:6e:08:
         f1:9e:e6:c2:72:7e:76:d4:cf:db:6b:6c:d7:df:6b:a9:b0:bd:
         02:d1:ec:c2:89:06:74:59:a8:87:46:02:0b:6e:d6:01:62:ce:
         bb:f3:26:b0:fd:ef:fa:90:8d:be:04:2e:cf:80:f1:47:46:b4:
         6c:14:ff:b6:e5:e5:9f:90:41:4b:e4:f2:4f:2f:9a:25:9d:4a:
         fa:d4:e4:8d:dc:55:75:93:9f:d1:dc:63:bd:4e:cb:f2:4b:9e:
         dc:3a:9f:27:b6:c9:7e:77:16:61:61:ae:fe:d3:05:69:4c:62:
         23:35:f4:e8:4b:6e:97:1a:03:36:ec:73:25:bc:a8:1d:b6:0c:
         8c:9a:05:4f:10:7d:d2:df:f1:cf:5d:b8:4e:30:af:f8:85:da:
         51:19:a4:53:dd:69:65:ed:c7:b1:54:c1:91:df:0f:59:d9:33:
         95:4b:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:40:37 2026 by rpki-client