Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/llQ9_I6LJoWk9GRnRvgVQf54UrM.roa
File:                     llQ9_I6LJoWk9GRnRvgVQf54UrM.roa (raw, json)
Hash identifier:          CPobEEZLxgYAyYKqVSCaJY2460GpjWONu67WnZFX9Mc=
Subject key identifier:   96:54:3D:FC:8E:8B:26:85:A4:F4:64:67:46:F8:15:41:FE:78:52:B3
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0148
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/llQ9_I6LJoWk9GRnRvgVQf54UrM.roa
Signing time:             Tue 31 Mar 2026 07:47:53 +0000
ROA not before:           Tue 31 Mar 2026 07:47:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     140224
IP address blocks:        117.103.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:47:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=96543DFC8E8B2685A4F4646746F81541FE7852B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:10:84:ae:41:71:8e:00:55:b2:4e:9d:3e:
                    ad:6c:32:10:9e:30:47:d4:7c:8f:49:46:24:f2:16:
                    44:a8:c2:b0:97:2e:7e:4c:95:e5:92:27:42:6a:93:
                    ad:26:8c:e2:e2:34:81:61:76:f3:0f:e1:a5:a3:ba:
                    4a:bd:64:e7:9c:84:8b:fd:5c:04:09:f1:58:97:9f:
                    62:91:45:a8:9e:a7:ed:e4:25:57:c6:4e:0f:c6:e8:
                    7e:41:00:d8:f2:e4:da:cb:ed:b3:d8:0a:15:9d:b7:
                    c9:d7:df:3c:2e:5a:c0:2e:fe:a9:d7:96:e1:7a:62:
                    42:2e:80:5d:6f:8e:a5:4e:9a:47:ba:a9:92:73:bc:
                    79:92:ea:59:c1:c8:e6:d0:cc:db:28:e7:93:37:bb:
                    95:1f:a3:5a:23:dc:c5:c1:64:16:1a:33:22:e3:6c:
                    00:50:df:ba:88:72:66:ba:fa:db:d6:0f:dc:7b:45:
                    5b:63:82:f5:ae:4f:b1:8e:1b:6e:28:45:39:b6:ac:
                    29:7e:33:01:11:db:5a:48:cd:20:95:71:3d:d0:1e:
                    f4:81:ac:13:34:ea:12:20:d1:77:f0:9b:bb:e1:93:
                    72:3c:11:94:5b:23:a8:5a:ee:ca:97:73:d7:98:7c:
                    60:c7:00:2b:73:62:fb:92:3f:59:3f:e1:c5:72:49:
                    eb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:54:3D:FC:8E:8B:26:85:A4:F4:64:67:46:F8:15:41:FE:78:52:B3
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/llQ9_I6LJoWk9GRnRvgVQf54UrM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:50:b4:51:e1:e0:ed:02:5a:59:07:be:38:05:db:7a:1c:d4:
         91:50:72:49:bc:47:62:7b:c5:8a:57:13:86:67:70:ee:36:d1:
         ff:bb:ab:e5:ff:bf:b6:4d:31:71:b2:4f:a9:ff:54:09:60:04:
         18:3a:40:29:69:35:bd:ae:83:e5:99:9f:27:ba:47:48:4b:dd:
         e9:ea:b3:03:82:d7:49:26:24:a1:93:dd:53:16:ef:aa:b5:f8:
         ed:9d:bc:cd:65:2d:20:f5:c9:e6:25:b0:60:e3:c9:e9:a4:34:
         a9:a7:3c:8c:20:9d:4a:01:5f:0d:a0:9b:3e:70:3f:e5:82:22:
         21:c4:96:77:68:d2:3c:95:84:22:fc:3d:6b:8e:f2:e7:fe:27:
         69:a0:54:92:f1:a8:ba:b3:6a:2a:7c:32:0a:f7:01:69:72:44:
         a9:81:24:6c:db:af:10:cc:6b:c1:5a:f2:3c:d5:b7:cf:33:40:
         34:da:e5:d5:9d:eb:38:b2:9c:f9:b9:c9:1b:e2:97:76:69:a5:
         68:89:2a:65:9e:c8:3c:81:a3:15:e4:e1:97:ed:f4:b8:5d:15:
         58:5e:7a:82:ef:e8:9a:91:9a:24:1e:23:7f:05:46:9e:60:b7:
         74:d6:c2:69:40:72:d0:31:b5:1c:96:14:9f:b5:bf:20:22:1f:
         71:d5:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:11 2026 by rpki-client