Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/sCdqwxq75Zxy8OzMOGlddTsKn2k.roa
File:                     sCdqwxq75Zxy8OzMOGlddTsKn2k.roa (raw, json)
Hash identifier:          NeAlQe7Genecl5F3enfzKBsP+48jrlEpK7h1camQC0c=
Subject key identifier:   B0:27:6A:C3:1A:BB:E5:9C:72:F0:EC:CC:38:69:5D:75:3B:0A:9F:69
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       014D
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/sCdqwxq75Zxy8OzMOGlddTsKn2k.roa
Signing time:             Tue 31 Mar 2026 07:47:56 +0000
ROA not before:           Tue 31 Mar 2026 07:47:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55901
IP address blocks:        117.104.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:47:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B0276AC31ABBE59C72F0ECCC38695D753B0A9F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:64:13:8b:2e:56:51:03:c9:9e:91:70:3c:
                    bb:e5:29:6d:90:79:40:67:60:6e:45:84:75:d0:0d:
                    ba:5f:8a:94:eb:b7:74:c7:f7:93:a6:cd:b1:d8:64:
                    1b:5b:26:08:96:7c:6d:14:50:f0:7b:0a:7f:e6:71:
                    37:d0:fd:3b:67:00:79:c4:22:d4:0d:d5:75:9f:02:
                    df:4d:7f:90:5c:54:2b:78:1e:8a:8f:96:3e:a7:21:
                    98:a9:20:a4:e5:47:d0:39:4a:22:03:66:a3:b7:ae:
                    f8:bf:5c:0c:0a:a3:e9:bd:f8:4b:e3:99:54:29:d3:
                    d1:b9:0b:8b:8d:9d:31:33:df:db:1a:7d:b6:87:48:
                    c5:42:33:ae:46:ab:9d:ca:05:a5:d4:c8:52:eb:7e:
                    82:1f:35:ac:a4:0d:f3:39:46:d9:9a:95:e6:35:95:
                    70:26:1a:89:01:b8:e5:53:9b:70:ce:9d:c7:d4:93:
                    ee:a0:24:1d:b5:a3:c9:8e:a2:da:51:94:03:19:a6:
                    b4:2b:7b:ed:dc:33:10:47:de:46:a8:f6:c5:40:f5:
                    26:77:d0:d0:8e:5a:81:fc:19:1a:3c:a7:c7:a9:48:
                    b7:6c:b5:ef:9d:70:c5:a4:93:43:2a:52:0b:c3:43:
                    d7:c5:db:75:50:07:63:1a:e5:aa:8d:8a:c8:ea:d1:
                    38:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:27:6A:C3:1A:BB:E5:9C:72:F0:EC:CC:38:69:5D:75:3B:0A:9F:69
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/sCdqwxq75Zxy8OzMOGlddTsKn2k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.104.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b8:b7:70:b6:2a:63:ac:b1:d1:d5:ee:07:bc:cb:12:ac:39:
         bc:6b:97:f3:24:62:95:6c:a3:5a:88:ec:d5:be:de:52:01:52:
         00:46:89:81:8d:65:f3:13:9b:0b:fa:a2:f5:50:92:6a:1c:c2:
         1f:44:af:55:44:df:56:11:fd:4b:d6:53:e0:3a:f5:cb:81:33:
         2f:61:48:50:88:f1:a8:d2:39:d0:3e:77:e9:43:27:4e:48:1a:
         7d:9c:72:24:f7:bb:04:83:00:d4:1d:d6:0e:cf:35:e5:51:42:
         e1:79:ee:cf:82:17:ac:bb:41:41:ee:bf:14:c9:5e:1e:b5:62:
         65:84:e9:55:1f:0f:4a:42:85:4a:3b:5e:b3:c7:1d:73:b3:78:
         e0:1b:6c:aa:a9:47:22:ec:d9:8e:1d:64:67:4f:4c:5b:2f:d1:
         8e:ec:d8:5d:a0:a1:23:38:6d:82:36:35:5a:7e:52:f1:ac:4a:
         af:ef:0f:73:a2:b0:b7:0a:5d:ec:39:3a:32:a7:1b:15:63:03:
         fe:dd:18:c9:16:db:c3:b1:39:08:29:69:ff:7f:c8:ee:18:dd:
         c5:3b:5f:8d:84:38:4b:b4:4b:1d:f3:7b:f6:3f:08:8f:f9:80:
         7a:c1:e8:d0:52:b2:84:5d:14:ab:42:4d:8e:b6:26:39:ab:ca:
         37:66:5a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:03 2026 by rpki-client