Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20102/AflsB81rivbLDn9ElHOHGET8M0w.roa
File:                     AflsB81rivbLDn9ElHOHGET8M0w.roa (raw, json)
Hash identifier:          4eCDNhpSmFJllaAQ/t1FdLlnzAp33xXqVrlszSX4GEc=
Subject key identifier:   01:F9:6C:07:CD:6B:8A:F6:CB:0E:7F:44:94:73:87:18:44:FC:33:4C
Certificate issuer:       /CN=130822A9A3D33ABAB61537ADC374286710BA0C77
Certificate serial:       24
Authority key identifier: 13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/AflsB81rivbLDn9ElHOHGET8M0w.roa
Signing time:             Tue 31 Mar 2026 08:41:05 +0000
ROA not before:           Tue 31 Mar 2026 08:41:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131952
IP address blocks:        144.91.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130822A9A3D33ABAB61537ADC374286710BA0C77
        Validity
            Not Before: Mar 31 08:41:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=01F96C07CD6B8AF6CB0E7F449473871844FC334C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:f3:e4:1e:98:08:0e:9f:12:63:7e:b5:bc:
                    c2:be:d6:f9:ce:c0:a9:49:08:a9:d3:98:d4:30:09:
                    78:7f:36:7c:74:84:14:e9:e4:88:61:11:ff:63:e7:
                    d1:76:85:e1:9a:31:20:c0:28:57:2f:3b:33:b5:4a:
                    5d:0f:3f:40:97:ed:cd:33:2b:94:17:3a:bc:8f:f5:
                    73:3c:93:f4:97:47:8b:e1:c6:67:41:f4:1f:99:2a:
                    2b:d3:08:04:bf:e5:34:5e:60:02:12:d9:5b:44:e7:
                    93:c1:d4:ee:68:e1:26:f0:f6:da:93:55:65:47:d6:
                    72:28:87:55:b5:bf:49:1d:99:3f:d5:5b:f0:79:bc:
                    fd:db:2d:1d:71:bf:1e:9d:ad:10:d4:3d:27:7f:81:
                    9f:7d:50:6f:64:b2:c5:59:98:d3:d9:59:00:9b:f0:
                    92:7b:c7:c8:d3:4a:b2:f7:fe:e5:3f:d4:b7:79:d8:
                    a6:b1:12:21:9e:be:9b:60:e4:fa:95:8f:f2:7f:ff:
                    01:8a:08:ac:3f:a1:28:be:36:46:c1:57:32:6b:02:
                    57:6f:17:c9:ac:19:7d:cf:ef:e9:1a:41:19:22:8b:
                    1b:04:48:d3:49:24:a2:c7:ee:9f:44:37:78:ad:48:
                    cc:58:ec:e6:7c:e1:e9:8d:be:94:94:6e:92:e8:4d:
                    ac:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F9:6C:07:CD:6B:8A:F6:CB:0E:7F:44:94:73:87:18:44:FC:33:4C
            X509v3 Authority Key Identifier:
                keyid:13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/AflsB81rivbLDn9ElHOHGET8M0w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.91.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:f9:97:9f:26:74:d6:4e:59:ae:60:d7:e9:f1:10:c0:9c:e3:
         f8:4c:d3:07:ce:19:92:64:e7:a7:2d:c9:8a:b9:17:9d:f7:3f:
         f0:e1:4e:dc:97:c7:26:b0:6c:dd:dd:27:af:d9:8d:43:c2:a1:
         7c:db:0d:f4:fe:e5:0d:a4:56:a2:74:23:68:89:fe:6b:27:1c:
         51:d6:80:ae:d2:52:76:4b:1f:a9:18:38:01:6c:cc:fb:4c:71:
         b7:ba:c2:6b:88:5d:a0:25:ff:d9:99:18:af:10:d8:74:3a:d6:
         07:2f:4f:fc:4c:f6:89:bc:1f:ce:30:16:86:59:b0:39:de:58:
         bc:c1:98:1f:8a:68:d8:db:0a:ee:11:c9:b3:1d:d4:02:44:76:
         a7:ed:70:a9:fc:f9:83:c6:a2:57:85:55:61:c3:34:f4:c1:cf:
         42:f1:80:f6:63:80:47:a1:51:ca:b3:99:0f:d5:84:81:71:7f:
         c4:5d:a3:5c:79:d8:d4:e5:b8:18:00:6b:9f:1e:f4:99:e0:ce:
         19:54:ff:0e:86:c8:21:33:af:1e:a5:a3:14:73:08:ab:3d:ff:
         44:93:8c:42:1e:6d:c4:10:af:2c:37:87:3f:11:d2:c0:e7:33:
         e6:2e:fe:9f:e4:7e:d9:4c:15:43:6b:d8:31:39:f0:6c:09:a9:
         bb:e8:8f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:56 2026 by rpki-client