Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20084/8Qn6EW8rSVbwI9YL5DrtSomP0d8.roa
File:                     8Qn6EW8rSVbwI9YL5DrtSomP0d8.roa (raw, json)
Hash identifier:          SuI3hm0FzNBQVsyQ0UqFLwVGPF/ofUBNvhtpGj2G21k=
Subject key identifier:   F1:09:FA:11:6F:2B:49:56:F0:23:D6:0B:E4:3A:ED:4A:89:8F:D1:DF
Certificate issuer:       /CN=381CEBD5718139418E2BA504374D52816234E9EB
Certificate serial:       2B
Authority key identifier: 38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/8Qn6EW8rSVbwI9YL5DrtSomP0d8.roa
Signing time:             Sun 01 Mar 2026 01:35:40 +0000
ROA not before:           Sun 01 Mar 2026 01:35:40 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     131943
IP address blocks:        133.226.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381CEBD5718139418E2BA504374D52816234E9EB
        Validity
            Not Before: Mar  1 01:35:40 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F109FA116F2B4956F023D60BE43AED4A898FD1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:23:19:de:2d:48:43:86:1d:55:d7:26:39:
                    89:50:c2:f2:a6:f0:a1:5f:0a:07:11:b5:59:aa:1f:
                    20:d6:c1:38:a0:cd:27:2f:a5:b9:fe:e9:9b:82:8b:
                    36:04:d6:00:c7:30:62:a6:b1:ea:ce:83:93:61:30:
                    dc:4e:e1:78:96:5a:91:76:04:5e:dc:be:89:3b:bb:
                    d3:00:99:2f:91:36:6d:0c:54:73:f1:6d:e2:2f:62:
                    a4:f3:a1:c2:b8:de:47:05:c0:bb:4d:d7:3a:c0:4a:
                    51:98:38:e0:ae:c4:c3:78:c6:81:b7:96:7d:0f:c7:
                    e4:3d:6c:b3:08:4c:37:22:dc:1b:15:e3:3b:28:45:
                    b6:32:14:bc:38:fe:3a:44:d0:37:68:28:34:85:fc:
                    92:c3:96:14:23:26:b8:4a:c0:39:49:7a:d8:87:e2:
                    4c:2a:4f:f4:42:87:6a:e4:00:8c:91:5c:22:7c:af:
                    0f:97:ce:7b:ba:6e:67:85:08:99:e1:52:40:2e:e8:
                    0d:5c:81:27:59:f3:40:2d:82:c7:b6:40:0d:a7:c0:
                    a8:c4:82:b6:24:8a:41:70:16:04:0a:33:8b:63:b9:
                    a8:68:bc:01:aa:9b:18:0d:c5:87:94:fd:73:02:ab:
                    29:f8:40:d7:b9:ef:31:97:7c:e3:08:07:19:56:52:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:09:FA:11:6F:2B:49:56:F0:23:D6:0B:E4:3A:ED:4A:89:8F:D1:DF
            X509v3 Authority Key Identifier:
                keyid:38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/8Qn6EW8rSVbwI9YL5DrtSomP0d8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.226.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:dd:7c:ce:ee:f4:3f:f7:b2:b8:20:83:b3:c5:e3:e9:af:10:
         16:eb:29:5c:79:4e:aa:40:f9:79:cc:2f:a2:27:cb:8d:68:e8:
         42:d5:f9:93:69:09:06:c1:d6:91:d0:69:e8:c0:19:8f:da:31:
         85:3a:f5:96:72:70:8c:83:ce:c5:19:73:75:18:f9:e1:5f:cb:
         91:32:be:07:ac:b1:ff:e7:be:dd:e6:40:93:c8:73:e3:fb:17:
         6f:0c:9c:1a:62:fb:4d:aa:5f:3e:0a:d0:0b:e7:8b:88:38:67:
         e8:1c:55:da:cf:b7:4c:10:27:fc:4d:0a:a6:ef:7b:44:3a:52:
         25:dd:33:b5:16:79:2a:d3:56:b2:e1:f1:b4:f1:a0:e0:52:96:
         e5:84:9d:a3:90:12:ec:d6:bd:aa:e9:bd:ca:ea:c5:d6:0c:52:
         d2:c1:59:97:e5:a5:95:41:d2:ef:e0:dc:00:32:42:07:10:ee:
         19:45:c4:54:8e:fe:86:c1:03:54:e2:2a:3e:6e:b8:bf:af:ea:
         23:24:06:82:42:01:d3:7a:d5:0b:8c:0a:df:22:b2:19:ca:ef:
         c5:e7:4b:e4:e0:b8:84:ed:8d:4c:4a:92:63:89:c5:ca:33:8a:
         77:24:44:f0:56:0c:87:24:d6:46:5f:3f:22:ea:84:0f:97:e5:
         78:0d:62:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:21:40 2026 by rpki-client