Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/SP4phNqoxbCkCHm6rfr2kT0JkiY.roa
File:                     SP4phNqoxbCkCHm6rfr2kT0JkiY.roa (raw, json)
Hash identifier:          YDq4b8rJyPcgoyuWnCAMBjroeLFfXMO/VWcGGiLodQg=
Subject key identifier:   48:FE:29:84:DA:A8:C5:B0:A4:08:79:BA:AD:FA:F6:91:3D:09:92:26
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       014E
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/SP4phNqoxbCkCHm6rfr2kT0JkiY.roa
Signing time:             Tue 31 Mar 2026 07:47:56 +0000
ROA not before:           Tue 31 Mar 2026 07:47:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     20940
IP address blocks:        117.104.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:47:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=48FE2984DAA8C5B0A40879BAADFAF6913D099226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e7:d8:89:24:0c:09:18:2c:ec:5d:f0:11:d3:
                    e6:bb:f1:ea:86:db:2b:a1:6e:ea:24:14:e3:44:0a:
                    e4:55:6a:f8:a4:ba:79:85:78:84:c6:d4:3e:0f:41:
                    11:d1:02:b7:6c:48:67:0b:ef:9a:66:36:2a:15:cc:
                    1a:aa:fb:33:dd:5f:36:d1:57:23:dd:91:bf:fc:ad:
                    e9:ab:60:a3:3e:2c:57:c9:55:d9:5e:59:1d:17:1f:
                    d1:4d:68:d2:e8:39:51:00:75:e2:c7:dd:91:74:49:
                    74:a7:e4:35:9c:72:21:7f:ad:53:fa:f9:84:c8:b1:
                    69:13:bd:21:2e:cf:ed:a1:c9:6a:b2:20:86:92:de:
                    67:c3:5f:94:90:c8:07:d3:fd:dd:e7:40:97:c9:0f:
                    c6:4b:32:d3:d1:69:48:ac:ae:d8:f8:63:74:19:6f:
                    35:ad:3f:27:b4:28:9d:9b:be:ca:f6:04:e3:a8:1c:
                    02:16:e1:01:b1:fd:9f:aa:ae:79:45:ac:96:62:29:
                    db:46:29:91:38:52:79:43:00:72:e1:d3:06:91:c3:
                    e1:ef:8e:af:da:59:c3:19:18:73:56:e0:b2:5e:79:
                    ee:37:5d:70:87:03:73:a9:85:2e:d8:05:0d:d3:c3:
                    88:0b:08:26:01:2f:52:cb:f2:d5:54:ac:79:c9:06:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FE:29:84:DA:A8:C5:B0:A4:08:79:BA:AD:FA:F6:91:3D:09:92:26
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/SP4phNqoxbCkCHm6rfr2kT0JkiY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.104.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:2e:d0:15:0a:aa:3d:5c:4f:ce:56:22:40:ef:95:1a:a5:8d:
         82:c5:22:1c:f7:6d:b7:cf:1e:85:d5:54:f7:53:88:99:e6:3c:
         0f:1b:0f:d9:52:23:d6:1a:d3:20:da:35:cc:5b:5d:7d:7b:8d:
         79:05:0a:d1:b7:f7:19:98:3a:2a:ec:15:47:ca:ad:d7:b0:f1:
         1d:c6:ac:ae:10:c0:b8:73:9f:5f:90:61:97:0c:94:74:2b:06:
         05:25:bb:7a:0a:31:fe:99:08:eb:7b:7c:48:55:db:4c:93:28:
         1b:e8:6b:48:02:3c:0c:9d:fa:68:0c:07:c7:f9:c5:d5:b2:9f:
         d6:01:75:66:af:b1:16:c3:bf:5e:2b:2f:1c:25:be:5b:05:7d:
         59:fe:d0:c8:44:a0:06:5b:92:c5:43:27:1b:73:1e:38:52:d0:
         3a:70:9a:a6:9a:14:74:91:28:0d:f0:a7:7c:b7:ae:67:16:ca:
         48:f6:38:d8:66:0c:54:0b:a4:89:bd:0a:aa:b5:d8:a7:ac:85:
         cf:b9:e4:28:de:47:e2:8f:42:bd:6d:1f:8e:47:74:9f:c8:c5:
         17:d9:d3:14:4e:1e:79:f4:01:48:cc:7a:1c:c8:3e:58:e0:98:
         6e:97:3b:c4:5d:05:81:a0:2a:54:35:6c:5c:76:b5:51:90:ee:
         82:29:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:19 2026 by rpki-client