Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Yj88A5ArUBLvZvAuEpMDKa0rakc.roa
File:                     Yj88A5ArUBLvZvAuEpMDKa0rakc.roa (raw, json)
Hash identifier:          c11nJAwh0F1vBPJRsdoAHdqLhahQIHCEb7Y72KUtJ1E=
Subject key identifier:   62:3F:3C:03:90:2B:50:12:EF:66:F0:2E:12:93:03:29:AD:2B:6A:47
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0154
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Yj88A5ArUBLvZvAuEpMDKa0rakc.roa
Signing time:             Tue 31 Mar 2026 07:48:00 +0000
ROA not before:           Tue 31 Mar 2026 07:48:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     394646
IP address blocks:        61.120.148.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=623F3C03902B5012EF66F02E12930329AD2B6A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:7b:88:d0:81:a7:63:2f:db:ff:77:f7:66:
                    8b:99:ff:45:46:01:45:2c:e2:44:93:47:20:82:10:
                    72:37:6b:cb:7b:5b:59:87:b7:ca:8d:0b:ca:49:fc:
                    d2:0a:60:bd:c9:a0:f5:16:67:eb:81:81:0e:b5:74:
                    66:1d:1a:b2:71:bc:9d:4b:b8:db:98:b5:47:98:45:
                    26:34:97:c3:3a:a8:15:6c:6c:87:e9:58:5b:9c:86:
                    f8:d9:38:d2:b9:51:61:e9:8f:76:55:e7:70:6e:21:
                    0e:04:80:be:1d:40:ab:be:70:ab:83:53:65:1b:65:
                    9c:13:e0:df:4e:8a:2f:62:e1:82:59:16:ef:b7:ea:
                    b7:f3:fe:81:c3:5a:a9:76:84:5e:a9:60:18:cf:64:
                    b9:48:25:ef:f9:4f:28:49:ce:fc:81:29:3a:8a:80:
                    2e:97:84:54:06:c8:85:13:9e:77:b9:a8:92:cb:d2:
                    e5:8b:e7:24:8d:85:b3:ae:1d:8b:31:60:06:43:82:
                    e3:ba:20:7d:f3:03:70:18:85:a5:0e:d8:f1:6e:e3:
                    a4:15:b7:bb:2e:03:14:9e:81:73:4a:f7:d8:65:9d:
                    43:20:d3:ff:70:d9:ea:5e:53:76:6b:f7:e2:45:7c:
                    e8:b3:19:0a:2c:95:e1:92:dd:c9:93:20:2e:3f:ca:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3F:3C:03:90:2B:50:12:EF:66:F0:2E:12:93:03:29:AD:2B:6A:47
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Yj88A5ArUBLvZvAuEpMDKa0rakc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.148.0/25

    Signature Algorithm: sha256WithRSAEncryption
         13:bc:08:cd:3c:69:9b:43:83:73:f0:b7:ae:66:54:8a:e5:47:
         76:f6:04:9b:33:3c:64:84:6f:bc:7b:11:26:73:3a:9a:02:d1:
         c5:d1:11:6e:65:d3:62:2a:ff:4d:25:ca:68:8c:01:19:af:d3:
         c6:2b:a7:18:cc:a7:21:7b:30:46:6a:56:74:a8:f6:5a:98:4d:
         3f:a6:48:67:5f:7d:a3:4b:73:be:a6:ae:ac:5e:f1:f5:40:0a:
         dd:1a:f7:da:7b:56:72:d1:97:b6:f6:92:fb:86:3e:9b:de:26:
         e9:cc:2e:7d:fd:de:01:12:03:78:7b:10:39:09:61:8e:2f:b7:
         16:65:bf:ba:df:3e:a4:b6:a4:a9:f2:3a:e6:05:4c:7f:96:1e:
         52:f6:15:46:c8:f5:c7:1d:fb:fa:1d:6d:a6:c4:16:9e:16:d0:
         22:23:d9:aa:45:66:37:67:34:77:a4:22:46:af:b9:cc:70:01:
         e3:99:9c:2b:30:ba:4d:52:d5:2d:76:f1:92:8b:ce:22:d9:8a:
         b9:2b:a2:d7:7c:54:d9:03:19:f0:81:ea:25:cb:b4:30:dc:65:
         d2:9a:73:7b:7b:07:c5:6e:08:ab:32:cb:f9:ef:fe:b3:ee:66:
         5b:95:db:d2:1d:3d:df:9e:c5:68:f3:ce:62:77:d8:69:f2:04:
         a5:71:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:24 2026 by rpki-client