Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/s-oVYxbtLrIkg7XuXEJnM5OOo3Y.roa
File:                     s-oVYxbtLrIkg7XuXEJnM5OOo3Y.roa (raw, json)
Hash identifier:          mOnxcD9fTUokxFn2wJnNSvjA9+cEjhS5Q+SOeK0l6ik=
Subject key identifier:   B3:EA:15:63:16:ED:2E:B2:24:83:B5:EE:5C:42:67:33:93:8E:A3:76
Certificate issuer:       /CN=C3941FA221377E9A206102B848EBB972A8709DD5
Certificate serial:       74
Authority key identifier: C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/s-oVYxbtLrIkg7XuXEJnM5OOo3Y.roa
Signing time:             Tue 31 Mar 2026 07:29:36 +0000
ROA not before:           Tue 31 Mar 2026 07:29:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55392
IP address blocks:        14.1.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3941FA221377E9A206102B848EBB972A8709DD5
        Validity
            Not Before: Mar 31 07:29:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B3EA156316ED2EB22483B5EE5C426733938EA376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:9a:3a:02:a6:f1:7c:e2:c1:d6:6c:5e:9b:
                    55:bf:94:81:d4:6b:92:2b:44:3b:ad:4f:b6:4c:0a:
                    0e:51:0a:12:30:d8:75:9c:ca:b8:d1:18:3b:c9:5f:
                    af:08:b7:47:7b:b4:36:05:39:da:bb:8d:83:67:60:
                    82:d2:40:ff:74:d3:eb:0f:02:87:64:f3:cc:c1:6d:
                    77:97:44:79:f4:1b:50:6c:17:b9:a2:01:c3:1c:b0:
                    b3:27:96:b7:14:16:61:f7:69:a2:3d:f4:45:a5:69:
                    43:1c:52:43:ce:83:17:af:34:3a:cc:e6:1e:78:67:
                    5a:13:81:f6:b3:6a:8f:19:83:da:99:47:e7:70:6f:
                    3e:d5:86:07:4a:03:e6:ca:23:c3:12:73:aa:3b:b6:
                    ac:59:d1:99:f4:89:0a:01:d3:21:ce:66:0f:e4:94:
                    44:1d:57:8c:4e:ae:8d:33:0b:a3:ff:bb:0f:4d:77:
                    16:2c:d3:4a:9f:17:89:b7:13:3d:89:1e:30:c3:9b:
                    64:2b:ab:c1:22:4e:f4:04:92:45:7b:54:ad:15:30:
                    7b:ef:7d:52:ae:9e:8e:3d:99:13:5f:8d:fb:be:da:
                    17:c1:53:42:ec:c5:4c:62:05:fb:7e:de:7a:79:40:
                    c7:b3:43:00:f7:2c:f3:5a:99:48:44:84:49:f5:0e:
                    ca:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EA:15:63:16:ED:2E:B2:24:83:B5:EE:5C:42:67:33:93:8E:A3:76
            X509v3 Authority Key Identifier:
                keyid:C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/s-oVYxbtLrIkg7XuXEJnM5OOo3Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.1.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:a3:9b:19:84:b9:5e:40:19:a6:f2:cb:dc:f1:89:ff:82:6f:
         a0:2a:ae:35:a4:f4:f6:b8:83:5f:60:59:62:0e:cd:b1:d8:64:
         e3:74:54:bb:0c:79:b6:99:41:9e:f9:ae:af:fa:c0:64:b1:ec:
         5e:8b:de:55:46:9b:87:61:c6:91:51:75:6f:00:de:2a:69:3a:
         96:13:e1:8e:3b:8a:f6:21:2c:de:f8:96:87:d0:ed:27:9b:67:
         a6:28:97:75:97:54:4e:99:47:f2:8c:93:3d:80:c4:18:39:02:
         fd:5c:b5:43:c6:4f:3e:9a:e3:5e:63:73:10:62:80:1b:27:5a:
         92:34:2c:d3:24:97:1d:b6:8d:dd:6c:09:64:22:47:8c:d8:3e:
         f0:fa:07:dd:01:f6:20:77:76:84:2f:75:d7:d1:21:05:83:81:
         2c:bc:99:5a:4b:63:a3:da:cd:1d:22:28:2c:65:c2:f5:4d:c0:
         c1:cd:3f:8a:1f:64:cc:ad:df:09:aa:21:e7:b5:12:53:c6:07:
         81:89:76:28:26:e4:d6:02:61:0a:e2:32:c5:2d:07:be:db:39:
         c9:69:d9:48:09:bd:b4:bb:ae:9c:0f:3a:56:44:e2:26:39:7e:
         09:69:52:cf:f4:3a:08:ae:2e:ad:5c:03:8a:a7:d7:0e:b5:60:
         8d:3b:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:36 2026 by rpki-client