Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/rMR530GkDg1ni8tnfSAZyZjhMvY.roa
File:                     rMR530GkDg1ni8tnfSAZyZjhMvY.roa (raw, json)
Hash identifier:          bVkjBiOEerIpNp512ks0aleYsJDRFJNHiOUq6uwI0IE=
Subject key identifier:   AC:C4:79:DF:41:A4:0E:0D:67:8B:CB:67:7D:20:19:C9:98:E1:32:F6
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       B3
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/rMR530GkDg1ni8tnfSAZyZjhMvY.roa
Signing time:             Tue 31 Mar 2026 07:52:38 +0000
ROA not before:           Tue 31 Mar 2026 07:52:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        101.97.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Mar 31 07:52:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ACC479DF41A40E0D678BCB677D2019C998E132F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:e3:54:b3:fd:d5:8b:59:bb:93:5e:c2:a9:
                    04:3d:42:69:a1:b8:50:64:82:5a:3a:6c:1b:7a:99:
                    ba:1e:a0:26:8c:e1:b2:2f:03:2b:43:91:40:11:32:
                    0d:7e:12:bc:16:03:5a:88:52:40:29:dc:33:ea:16:
                    4c:95:44:2c:f7:4a:37:61:a1:b0:8d:f0:ba:6e:b6:
                    b1:a7:84:64:e5:ff:ee:2c:93:3d:60:d3:03:f7:63:
                    ec:02:ba:b0:29:f1:89:eb:16:9d:23:75:9f:97:28:
                    66:83:5c:b9:11:f6:35:46:75:c2:86:68:cc:f1:10:
                    33:fd:e5:ec:d4:bb:1c:bd:60:1e:7d:f6:f2:2f:9e:
                    03:0e:93:01:c6:3b:e6:7c:a5:4e:9a:bb:45:ac:d3:
                    09:4b:34:e9:be:25:01:3e:31:db:15:3f:74:f5:f3:
                    0b:9e:df:1c:48:f0:cc:cf:d1:03:13:ca:d9:27:e0:
                    5b:ff:c3:f8:e7:8c:5a:e8:99:d9:1c:ad:2b:53:af:
                    46:fd:05:85:2f:54:91:73:40:db:d9:97:e4:d4:df:
                    c9:3f:4c:e9:09:f5:82:1f:72:a2:35:66:71:3b:bc:
                    9a:aa:78:6f:f7:91:dd:a7:70:19:f0:f7:ee:14:84:
                    26:5d:82:52:79:7d:f7:13:35:84:3e:ae:c8:ec:91:
                    24:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C4:79:DF:41:A4:0E:0D:67:8B:CB:67:7D:20:19:C9:98:E1:32:F6
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/rMR530GkDg1ni8tnfSAZyZjhMvY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.97.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4e:4b:d8:7a:69:d8:f8:ed:33:d7:e1:f5:50:89:6a:9f:46:3a:
         d2:1b:88:49:be:84:fc:6d:6f:d5:7c:1c:f8:e7:91:f5:33:1c:
         98:c3:28:53:bf:60:2a:dd:cc:c7:ca:03:e0:a3:f5:25:23:62:
         6c:68:57:8d:0a:1e:25:9e:41:c7:f6:98:e1:01:39:7b:cb:b6:
         1e:1a:11:25:ed:79:88:d7:0a:11:6d:0e:92:cd:b5:d7:0b:08:
         7f:ee:10:4b:ae:c4:34:d6:3e:93:25:88:ec:88:66:cd:54:c2:
         fc:fd:7a:7a:fa:67:3a:3c:84:98:92:c5:60:2c:a8:b6:7c:c6:
         70:73:13:02:26:4b:b7:92:8c:b9:70:ab:c7:d9:14:35:ac:18:
         e4:cc:f3:fa:f1:f8:00:2b:3a:57:fa:0f:ee:dd:52:31:e9:c6:
         dd:ed:94:e2:a9:c9:cf:93:b1:74:2b:30:cf:4f:85:20:d8:df:
         c5:a6:2a:b6:2a:91:4f:e4:dd:a6:20:93:d5:a5:2f:21:dd:bd:
         13:e3:2c:7a:88:ec:b5:2e:30:e4:c1:a5:2d:fc:27:35:27:da:
         33:65:e2:7b:d3:2d:c6:68:ac:bc:8c:33:74:f4:d5:df:5b:f0:
         1a:a6:f0:78:fc:a6:5d:6c:55:f3:97:db:9f:ab:2c:27:40:70:
         44:01:b1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:23 2026 by rpki-client