Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/1_vutZI3i5XL1rUg-zWpMcY38MY.roa
File:                     1_vutZI3i5XL1rUg-zWpMcY38MY.roa (raw, json)
Hash identifier:          +NH5de3+Y04hFTLZ2nQJM+l/yYHwAqRZTCQZ54zKc4U=
Subject key identifier:   D7:FB:EE:B5:92:37:8B:95:CB:D6:B5:20:FB:35:A9:31:C6:37:F0:C6
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       8D
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/1_vutZI3i5XL1rUg-zWpMcY38MY.roa
Signing time:             Tue 31 Mar 2026 07:29:10 +0000
ROA not before:           Tue 31 Mar 2026 07:29:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131078
IP address blocks:        202.255.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Mar 31 07:29:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D7FBEEB592378B95CBD6B520FB35A931C637F0C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:35:ac:1a:50:de:2e:22:c7:fd:12:3d:a9:
                    2c:72:32:f1:23:79:46:ec:1f:d0:a3:09:b0:5e:ce:
                    a6:a5:fe:da:39:4e:4f:2a:bc:37:ea:14:98:15:9d:
                    a7:f2:f2:61:ed:ca:c5:a9:3b:1f:11:95:da:96:d4:
                    9b:16:b4:9c:cd:34:af:b3:3c:c1:b5:2b:61:90:29:
                    4c:ec:bd:a7:06:f4:b0:a4:e8:24:3d:45:07:6b:cd:
                    1a:f3:52:9c:c0:cc:7f:ac:ca:14:ba:2d:16:64:f8:
                    5f:c5:82:c2:59:44:01:5b:09:1f:42:71:86:db:08:
                    47:d8:e0:02:60:2f:2a:ca:fd:46:22:e7:d5:85:09:
                    6c:ca:47:b1:3f:24:a7:c0:90:4e:e7:ad:18:00:c9:
                    31:15:31:58:c8:3f:4b:6f:67:8d:47:26:9f:d4:74:
                    c3:fe:c2:d5:0c:dc:c8:bc:9d:96:74:24:60:02:45:
                    c0:ae:60:72:4d:16:6d:4d:34:cb:97:91:07:c3:ce:
                    2d:98:ae:30:84:92:ba:60:ff:ea:84:b8:2e:eb:de:
                    7e:d3:f7:e1:a3:97:c6:f7:77:8c:fb:95:7f:b9:3e:
                    b3:bb:1e:63:a8:2a:18:c1:f6:d6:1a:b8:63:bf:17:
                    28:9f:66:00:76:58:78:59:7a:47:98:0a:5c:46:f1:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FB:EE:B5:92:37:8B:95:CB:D6:B5:20:FB:35:A9:31:C6:37:F0:C6
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/1_vutZI3i5XL1rUg-zWpMcY38MY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:53:2b:fd:a4:a8:f2:9d:1f:41:17:3c:32:cc:bc:92:2c:0f:
         ed:88:ef:3e:77:60:71:e4:9e:77:2e:65:36:69:ed:b6:eb:f6:
         9e:fa:bd:23:1f:1f:f9:3d:ed:0b:5d:f1:ae:e5:f2:f0:1f:23:
         37:7b:9e:5a:88:c8:58:21:d4:19:b1:e5:9a:c3:2e:59:8f:ec:
         b2:a8:ec:61:5a:44:ca:4d:ab:5e:65:f6:38:be:d0:65:65:9f:
         a0:9b:76:c0:12:59:e4:5e:ae:b6:26:b7:59:69:2c:2f:f5:cf:
         e1:a3:be:2d:c9:26:4b:49:c2:59:4b:db:4a:12:39:7d:8b:90:
         6d:62:50:5d:87:a2:0e:6d:d7:fa:6b:d9:e6:96:c1:3c:a2:02:
         8c:ee:9c:29:c9:0e:7a:f4:c2:7a:4b:4e:98:bc:2e:ec:05:e6:
         be:fb:c3:ca:a6:83:8c:2a:af:bb:06:a2:6c:54:fb:b7:5a:f9:
         06:7d:2a:c5:ff:26:09:83:81:9e:8e:be:0e:a3:4a:fb:e7:12:
         f6:fa:2c:c5:4e:7a:6c:89:90:02:6c:98:60:1e:63:60:50:9d:
         f8:d4:e5:25:de:e0:5a:7e:2d:d2:86:47:f9:80:d1:c1:09:aa:
         3e:86:c0:4d:a7:be:14:57:0b:75:77:a0:54:5a:99:ab:04:9e:
         f1:f0:ea:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:57 2026 by rpki-client