Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LOgdC3gqZOI4XE69Q-MrSrGy8O0.roa
File:                     LOgdC3gqZOI4XE69Q-MrSrGy8O0.roa (raw, json)
Hash identifier:          DhSY1G3qsW4xxEAoLQgoVggVCnZSIMa/K3Yf6/awtG4=
Subject key identifier:   2C:E8:1D:0B:78:2A:64:E2:38:5C:4E:BD:43:E3:2B:4A:B1:B2:F0:ED
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0130
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LOgdC3gqZOI4XE69Q-MrSrGy8O0.roa
Signing time:             Tue 31 Mar 2026 07:47:42 +0000
ROA not before:           Tue 31 Mar 2026 07:47:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24319
IP address blocks:        124.40.52.208/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:47:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2CE81D0B782A64E2385C4EBD43E32B4AB1B2F0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:24:ce:0d:97:66:85:5a:de:75:b4:78:d4:
                    45:07:60:4e:75:16:c2:ad:1c:3e:07:5f:2b:5a:d5:
                    6e:32:64:b5:58:39:40:15:5d:8d:ed:4e:0c:2e:3f:
                    5a:f4:dd:ac:9e:bd:2d:f6:cd:ca:db:a4:c6:fb:80:
                    e1:1f:ce:b2:aa:1f:4f:af:1c:9f:49:a9:81:9e:4a:
                    18:2d:35:82:e2:e6:0a:b4:80:b2:c4:66:26:f8:12:
                    c8:5c:a7:1a:e7:af:81:7a:34:90:21:44:f2:46:fc:
                    b0:f8:00:64:11:e0:1e:04:45:fd:56:30:38:ce:0a:
                    aa:0b:42:d3:01:9a:49:24:2d:e0:4e:14:c5:4c:bd:
                    c5:4b:b1:ed:d3:05:f6:9c:61:f9:b6:6c:ab:19:64:
                    4a:e2:4b:9d:50:a4:13:77:18:f6:55:bd:08:67:89:
                    0c:d1:ea:a8:65:44:e6:56:45:d4:62:4f:eb:5a:a7:
                    90:29:c9:ed:7c:04:a4:ae:94:73:e7:00:b9:1e:b0:
                    ec:fa:6e:1c:45:6c:8f:38:28:4b:ab:27:a3:35:16:
                    ce:59:2b:da:d3:c3:63:ab:be:e2:ef:a4:5f:67:45:
                    90:78:ea:92:d2:29:bd:97:b4:0e:0a:eb:0b:21:ec:
                    07:32:90:36:67:4f:12:4d:c1:ae:c7:1f:10:73:62:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E8:1D:0B:78:2A:64:E2:38:5C:4E:BD:43:E3:2B:4A:B1:B2:F0:ED
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LOgdC3gqZOI4XE69Q-MrSrGy8O0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.52.208/28

    Signature Algorithm: sha256WithRSAEncryption
         30:b8:75:8f:0b:48:3a:48:9a:c0:d4:d3:25:a4:a1:a4:56:3a:
         68:0a:ec:db:47:ae:2e:82:0f:b5:d2:33:59:2f:8f:1f:f8:22:
         5f:0f:e8:69:07:5e:90:99:ca:19:28:10:49:66:37:83:55:f9:
         65:37:88:40:b4:6e:2a:a1:3c:86:3c:61:df:d0:d2:76:b0:2a:
         1f:d5:1b:b2:b8:38:fc:7c:aa:ec:a8:33:04:3c:37:02:39:2a:
         cf:8e:43:5f:02:1d:36:71:e0:f8:68:fe:41:13:af:99:e9:3e:
         d8:54:d4:c0:72:9a:eb:27:39:78:be:d9:6b:17:93:89:4b:18:
         3b:9c:85:66:3d:5b:68:56:a6:ec:4d:11:38:cc:8a:30:e4:6f:
         43:de:04:2b:f7:61:25:75:49:fc:1d:85:a3:04:fd:09:f2:56:
         ed:e7:0a:9e:3e:e6:d8:5c:40:d8:ef:7d:b9:fe:ab:ca:bf:a3:
         4b:b2:16:d6:49:8a:e9:5d:45:11:be:6f:17:36:3c:6e:db:22:
         17:c9:5b:7f:b4:e8:0b:dd:66:5b:d9:da:bd:76:50:ea:7b:8b:
         2c:d6:99:16:49:b7:3c:25:a5:05:f9:e5:8b:0d:1d:e0:9c:e0:
         5f:a4:7e:b0:75:c2:e5:98:ec:d1:d0:06:56:33:1a:05:18:54:
         16:ec:64:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:29 2026 by rpki-client