Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tsnWSfH8QVdPwD3jR1Lvxj2KVPE.roa
File:                     tsnWSfH8QVdPwD3jR1Lvxj2KVPE.roa (raw, json)
Hash identifier:          JFpNLNcuB1yl+sb0G4Ji9xW6UOmmkaAk12cZlf5AHHk=
Subject key identifier:   B6:C9:D6:49:F1:FC:41:57:4F:C0:3D:E3:47:52:EF:C6:3D:8A:54:F1
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0138
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tsnWSfH8QVdPwD3jR1Lvxj2KVPE.roa
Signing time:             Tue 31 Mar 2026 07:47:45 +0000
ROA not before:           Tue 31 Mar 2026 07:47:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     3949
IP address blocks:        153.254.80.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:47:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B6C9D649F1FC41574FC03DE34752EFC63D8A54F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:61:c4:89:12:45:b9:90:74:1f:4c:6b:55:
                    4b:8f:1e:43:5c:e7:af:7c:43:fd:53:a4:1f:e1:09:
                    c1:54:ee:cc:4c:9d:48:81:2c:6a:90:33:a7:25:ea:
                    1a:3e:ad:e8:69:9f:f9:8f:5e:10:3e:59:47:98:d1:
                    5e:d0:58:7a:6c:2b:a6:ac:35:2b:08:7d:30:3c:31:
                    a6:01:5f:66:55:ad:a2:cc:c5:17:b1:d3:2b:33:77:
                    71:12:f4:5a:17:e7:a7:14:3a:cd:19:5d:fd:54:15:
                    81:00:78:70:9b:ba:c3:ed:d5:45:00:5a:cb:55:87:
                    ec:5b:93:e6:04:e1:c8:1d:60:c5:fa:21:b2:82:ac:
                    81:2f:fb:c4:1b:3e:d9:0c:10:15:e1:46:45:96:e2:
                    5b:3d:c4:5b:6e:67:06:f8:01:e1:94:61:40:3f:67:
                    47:dc:45:a9:71:86:83:73:e3:f7:fe:1a:8a:43:9c:
                    89:14:0a:2a:98:fe:8b:a6:10:3b:7c:9c:9c:9d:74:
                    29:ae:eb:f4:d6:1f:9a:c6:8a:9f:20:3e:6d:58:12:
                    5c:8a:a2:71:1c:8f:97:24:1d:11:f1:80:08:05:81:
                    86:9e:0d:ce:10:cc:9c:cf:4a:39:c3:45:e3:3a:0c:
                    55:1d:e7:59:5f:0a:a9:58:72:0a:79:30:68:d4:29:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C9:D6:49:F1:FC:41:57:4F:C0:3D:E3:47:52:EF:C6:3D:8A:54:F1
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tsnWSfH8QVdPwD3jR1Lvxj2KVPE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.80.64/26

    Signature Algorithm: sha256WithRSAEncryption
         a8:cd:eb:08:73:85:31:95:30:e5:a0:9c:d4:10:ca:4f:e8:79:
         31:4e:f1:e3:f4:91:62:9a:a5:e2:3c:0b:d2:ae:c6:a1:ec:92:
         6c:ff:4c:12:c9:0d:91:4b:0a:b3:82:8e:f2:4c:3e:94:71:42:
         0c:4d:70:ce:6c:10:56:60:71:20:ff:28:53:07:3a:7a:a8:c8:
         73:48:b8:c7:9d:31:b3:94:4e:7c:71:0d:cd:f2:0f:1d:cd:1b:
         bc:53:6f:de:e8:1f:13:a4:03:69:3a:1f:2f:b9:6a:cb:d8:6f:
         ce:d3:e8:a2:02:76:f9:8f:34:68:7f:01:1f:5c:3f:25:60:08:
         e3:0b:db:e4:ae:23:16:69:14:26:6e:a2:76:a6:35:62:df:9b:
         91:46:e0:12:d8:fd:70:3e:69:36:a0:81:0b:6d:e2:7f:bc:f9:
         f1:e4:81:03:3a:13:6c:8d:61:2e:cb:18:5e:97:84:6b:5d:d3:
         65:26:cb:4a:fc:64:a1:ff:d6:0d:4f:9e:42:46:ab:ac:15:56:
         31:71:e3:fe:93:72:2b:01:25:1f:57:3b:ea:38:13:e7:98:23:
         86:b6:92:91:fc:3a:f7:79:d7:12:8a:8d:65:56:b5:7d:d7:f1:
         c6:ac:e9:72:fc:56:14:cd:1a:22:53:46:90:cd:6a:19:a1:3a:
         fc:8a:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:28:41 2026 by rpki-client