Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/C9Qx__kBKfz9h5OoZJUJAKSPNAc.roa
File:                     C9Qx__kBKfz9h5OoZJUJAKSPNAc.roa (raw, json)
Hash identifier:          DJC/e0T+9eXIeyp7vdcPYbD7e+7ls04Cl6sD8ezU4AI=
Subject key identifier:   0B:D4:31:FF:F9:01:29:FC:FD:87:93:A8:64:95:09:00:A4:8F:34:07
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       017E
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/C9Qx__kBKfz9h5OoZJUJAKSPNAc.roa
Signing time:             Tue 31 Mar 2026 07:48:21 +0000
ROA not before:           Tue 31 Mar 2026 07:48:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18186
IP address blocks:        117.103.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0BD431FFF90129FCFD8793A864950900A48F3407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:9d:ed:14:30:4f:87:00:70:a2:53:fe:a3:
                    3c:48:2f:b4:3b:e7:ee:ba:7e:42:6a:2b:ca:5c:15:
                    01:0c:da:bc:9a:e9:7b:88:47:56:56:c4:a0:9c:41:
                    60:cc:bb:f5:e2:1d:91:1a:a4:53:53:8c:8f:7c:d8:
                    d9:51:87:09:4a:c5:f4:af:00:99:ba:b4:e5:4b:2f:
                    e9:5d:5f:12:bf:ae:eb:10:8a:69:cd:63:c7:85:78:
                    1e:0c:e7:e3:51:60:3d:29:1d:4e:c4:84:53:1b:8e:
                    03:29:53:7e:c7:18:4a:01:1e:3b:4b:41:a7:09:41:
                    36:bb:c9:60:42:85:a4:e4:1c:c1:65:7a:81:f3:ef:
                    2d:cc:bf:be:ca:7f:ec:85:aa:9c:89:b0:52:70:87:
                    d4:07:9b:ca:b4:18:69:81:db:96:b8:cd:94:38:d2:
                    6a:87:2d:f7:d0:1f:a4:12:44:52:d5:dd:ca:33:06:
                    57:df:da:1a:ce:7d:10:f1:8b:d2:23:61:7c:41:66:
                    7a:bc:c6:46:7b:90:f4:42:58:13:9f:7f:0e:df:51:
                    04:20:ac:43:89:4e:07:f7:1a:f3:6b:61:90:82:9c:
                    84:3f:49:f4:4d:72:fd:97:71:ca:07:31:2e:91:88:
                    03:c6:33:55:4e:ba:e8:6c:38:bd:c7:ad:7c:1f:4c:
                    be:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:31:FF:F9:01:29:FC:FD:87:93:A8:64:95:09:00:A4:8F:34:07
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/C9Qx__kBKfz9h5OoZJUJAKSPNAc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:21:7a:b9:8d:56:44:6f:8e:9f:fe:91:cc:aa:5f:51:8a:
         65:3a:97:d9:98:b3:77:7c:0b:a6:1b:ec:68:f5:93:8f:68:4b:
         3c:71:c6:26:a8:fe:48:48:fe:01:7a:94:1a:7b:ba:76:d3:90:
         47:95:79:83:5b:2a:ee:96:f6:af:5f:8f:eb:b6:52:cd:a5:3e:
         22:e7:e7:ab:ac:c7:d8:fe:d7:be:c8:10:c9:5a:9a:c2:a5:02:
         34:8a:90:24:46:4e:30:6c:12:9b:7b:68:88:44:29:6b:2a:89:
         36:7d:d4:eb:be:43:7a:b0:b7:68:e1:fc:1a:36:55:40:ed:6d:
         17:9c:09:49:53:f7:83:2b:25:04:e4:d2:e4:96:6f:c6:6e:99:
         a9:d8:26:3c:cc:a9:a6:0e:e8:e4:97:3a:75:18:53:2e:6f:b5:
         16:27:5e:b4:33:19:42:4e:d6:c9:80:55:a9:80:e2:c7:82:8a:
         2d:38:5d:34:e6:40:9f:58:62:56:b9:89:fc:6e:df:bb:82:b2:
         44:c7:7e:4e:02:08:01:b1:f3:41:df:bc:21:df:b1:e9:05:37:
         b4:1e:58:6e:14:c1:c2:42:bf:a6:94:2a:7f:4a:88:14:62:58:
         bf:68:36:0a:ee:1e:b7:fc:35:e0:c5:6a:87:47:58:bd:16:ba:
         12:6b:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:10 2026 by rpki-client