Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/CJtFQKKIwW6KgJiiX-2vcb4jk_A.roa
File:                     CJtFQKKIwW6KgJiiX-2vcb4jk_A.roa (raw, json)
Hash identifier:          tjPEx6uPnIv64nt8yAL/S0WtZENCLRtmIV1rfajcYuw=
Subject key identifier:   08:9B:45:40:A2:88:C1:6E:8A:80:98:A2:5F:ED:AF:71:BE:23:93:F0
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       34
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/CJtFQKKIwW6KgJiiX-2vcb4jk_A.roa
Signing time:             Tue 31 Mar 2026 08:42:31 +0000
ROA not before:           Tue 31 Mar 2026 08:42:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17529
IP address blocks:        61.213.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Mar 31 08:42:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=089B4540A288C16E8A8098A25FEDAF71BE2393F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:63:cd:71:44:22:2f:fb:00:78:75:69:6d:4a:
                    de:9d:9a:97:8a:36:46:50:46:47:36:84:fc:7a:8f:
                    f9:b9:f5:0f:6e:db:c3:de:5b:3b:8a:71:ba:87:6e:
                    2c:a2:80:87:66:4c:ab:30:b8:4c:5f:3f:29:25:e2:
                    53:03:11:c7:13:cd:60:47:86:e4:5f:fb:26:ab:e7:
                    8a:86:20:bb:87:33:4a:4a:34:ac:99:52:ea:4b:95:
                    70:62:04:94:3f:3b:90:ea:4d:1a:2b:65:fb:e0:61:
                    fd:a8:85:c2:79:92:5f:5c:ff:bc:f0:33:90:30:fb:
                    ac:a6:2b:cc:d4:16:40:62:b1:88:36:63:41:91:35:
                    b0:d2:87:4d:b8:57:4f:73:bf:58:2d:ba:6f:87:5c:
                    61:48:66:b6:52:4b:c3:db:3d:24:36:e7:b2:97:fd:
                    34:82:2b:7e:5c:d0:07:40:8a:e4:91:22:55:97:6e:
                    5c:16:b1:a5:98:9c:31:4c:b1:6a:34:fb:ae:cf:ed:
                    5b:93:26:0e:95:cd:0f:e7:3d:a7:47:3e:5f:ae:a5:
                    a6:57:d0:b5:1f:43:01:9b:a5:d9:5c:b4:dc:3b:da:
                    fa:60:bf:3a:11:fa:98:d5:57:90:d5:fc:4b:f0:e4:
                    2a:34:09:4f:58:e0:91:a8:f3:7c:4c:10:a1:f4:78:
                    c7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9B:45:40:A2:88:C1:6E:8A:80:98:A2:5F:ED:AF:71:BE:23:93:F0
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/CJtFQKKIwW6KgJiiX-2vcb4jk_A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:2d:c4:df:75:3f:27:2d:01:bf:dc:11:9a:ed:29:88:ad:4d:
         bd:bc:0e:f6:24:4c:97:72:72:62:aa:4a:6e:db:95:b0:d2:de:
         26:99:1a:db:6b:92:3d:ee:3b:4c:2e:ea:9c:56:30:1a:7a:4e:
         67:2a:f2:8d:96:eb:16:cc:16:5b:f8:0e:69:e9:1e:5d:06:88:
         23:22:75:77:93:59:01:19:41:6d:1f:46:ff:52:db:d8:43:dc:
         27:bf:9e:4a:60:65:a0:08:66:80:d2:ac:40:5c:68:a0:d5:9b:
         03:b7:3c:7a:ff:b9:35:cd:d4:86:ab:04:2a:ca:c9:72:2a:22:
         c6:aa:5f:3a:d8:a7:db:af:03:a3:62:fa:6d:72:fa:1c:a3:4a:
         62:9b:95:e7:59:2f:e4:aa:d7:62:09:4b:2c:0f:7f:c3:6b:46:
         1b:59:25:1e:aa:2d:0b:f3:8a:21:f2:66:59:ab:d3:c3:6f:6b:
         19:96:89:f1:91:f2:f0:36:30:4d:8c:c8:ae:a0:66:e2:83:c1:
         97:40:ed:64:48:38:44:d0:a4:67:36:11:52:8e:19:da:59:c4:
         ba:1e:85:09:2a:5f:b3:3a:08:b7:92:4d:a0:4f:59:f7:4c:21:
         bf:a3:b5:90:3f:18:55:be:85:9b:32:76:91:86:49:48:d8:e7:
         99:db:68:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:39 2026 by rpki-client