Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/brNDkBgfTGfEIO8yVB28hZNtAw8.roa
File:                     brNDkBgfTGfEIO8yVB28hZNtAw8.roa (raw, json)
Hash identifier:          6CU7IUxHWE03DMOf73vXyZg/RlYs3adLSj2Vo/V3GWo=
Subject key identifier:   6E:B3:43:90:18:1F:4C:67:C4:20:EF:32:54:1D:BC:85:93:6D:03:0F
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       5E
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/brNDkBgfTGfEIO8yVB28hZNtAw8.roa
Signing time:             Tue 31 Mar 2026 07:51:47 +0000
ROA not before:           Tue 31 Mar 2026 07:51:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     138384
IP address blocks:        211.7.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Mar 31 07:51:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6EB34390181F4C67C420EF32541DBC85936D030F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:91:5c:32:b0:1a:f7:3a:27:d1:73:b4:19:99:
                    6d:69:84:b2:77:03:5f:75:5f:97:67:59:ad:a8:53:
                    69:72:4b:14:9e:32:02:25:75:40:f2:bd:49:ba:7d:
                    10:a9:e5:fc:f3:21:5e:fb:06:6d:3c:b6:79:f1:50:
                    15:1c:06:f9:c4:aa:2a:64:ce:5a:c8:5c:1b:9b:e4:
                    22:f3:44:c2:a9:ff:9f:19:8b:3c:4a:6a:ff:20:76:
                    ff:05:ab:f4:c7:c2:54:cc:0e:f8:05:05:ab:0c:08:
                    be:83:5c:67:13:f6:55:76:34:04:83:c9:6e:00:09:
                    d3:e2:3b:1f:aa:ec:1b:ce:49:11:cf:34:76:78:80:
                    d0:6f:5b:9c:cd:92:28:4d:25:af:36:6a:71:9c:e1:
                    96:42:a4:69:44:f5:69:22:c7:2c:8b:2b:49:c0:da:
                    ef:e6:dc:df:58:5f:3e:10:9a:d8:45:a0:e0:9a:b7:
                    2f:cc:0e:1b:11:39:5a:08:4e:fc:62:2a:a2:9b:87:
                    df:e9:09:05:59:f9:68:fa:e5:19:aa:68:4e:54:12:
                    db:9c:8a:c1:e1:67:f4:8a:62:d1:93:c4:0a:70:e3:
                    b6:f3:9d:20:e1:d7:98:fa:a8:9e:c7:19:04:2d:0f:
                    d2:9b:49:a8:02:aa:f2:35:74:75:94:85:ff:3f:52:
                    ae:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B3:43:90:18:1F:4C:67:C4:20:EF:32:54:1D:BC:85:93:6D:03:0F
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/brNDkBgfTGfEIO8yVB28hZNtAw8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:2e:ca:00:98:0e:c3:2b:29:7e:ff:51:95:f7:4f:b4:cb:a4:
         f3:84:66:6e:7b:5b:08:9d:b9:07:a4:b1:15:26:c3:06:51:be:
         9a:a1:98:22:be:b4:b4:ca:3b:c6:0b:cc:4f:dd:35:57:4f:39:
         89:81:bc:86:d7:ee:25:12:96:95:17:be:f1:d5:c6:f8:ed:0d:
         8d:52:62:62:24:02:5c:32:9b:9c:11:5e:f7:2c:2a:59:b8:11:
         5b:6f:dc:14:16:6e:e7:bd:5c:40:16:75:49:f4:ca:88:65:f6:
         a2:ea:c1:67:33:01:0c:9a:00:0f:87:6b:6f:0c:01:26:07:3c:
         3c:f3:a1:fb:b9:36:29:9c:29:f9:da:bd:d8:c6:8b:1b:b2:e2:
         47:e5:6e:15:76:19:ff:c9:fc:8c:ae:0f:ee:9c:65:4d:95:17:
         ed:f0:9c:9d:26:ee:1c:31:e5:cc:f7:72:9d:e1:80:24:21:6a:
         4e:f0:0b:09:59:c6:f9:20:a7:8d:00:c5:32:db:0f:10:a5:28:
         4c:a0:b6:01:1b:3c:bd:1a:2f:71:ac:69:03:d3:17:55:f6:cc:
         7a:04:dd:83:ac:1c:4e:51:53:a4:4f:9b:e0:17:7d:b2:ca:f4:
         38:0c:7c:7b:14:da:05:2c:18:ec:a6:cf:8d:b4:9b:1d:da:76:
         66:85:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:14:43 2026 by rpki-client