Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20274/sFLhAb3Aqspns3cSvSopbWBM_UE.roa
File:                     sFLhAb3Aqspns3cSvSopbWBM_UE.roa (raw, json)
Hash identifier:          QLyU1y7gALYVlwDAbJ6lZFpcm5emLzwEpWh3FQzVfi0=
Subject key identifier:   B0:52:E1:01:BD:C0:AA:CA:67:B3:77:12:BD:2A:29:6D:60:4C:FD:41
Certificate issuer:       /CN=C4385E1388714415ECB55403CF617E1683ABB5D6
Certificate serial:       0F
Authority key identifier: C4:38:5E:13:88:71:44:15:EC:B5:54:03:CF:61:7E:16:83:AB:B5:D6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xDheE4hxRBXstVQDz2F-FoOrtdY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/sFLhAb3Aqspns3cSvSopbWBM_UE.roa
Signing time:             Tue 31 Mar 2026 08:46:30 +0000
ROA not before:           Tue 31 Mar 2026 08:46:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     152872
IP address blocks:        165.99.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xDheE4hxRBXstVQDz2F-FoOrtdY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4385E1388714415ECB55403CF617E1683ABB5D6
        Validity
            Not Before: Mar 31 08:46:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B052E101BDC0AACA67B37712BD2A296D604CFD41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:18:7c:fe:20:28:90:4e:4d:e8:64:03:ae:
                    94:06:0c:5a:9b:6a:47:24:ec:9f:04:82:2a:25:43:
                    17:c6:01:2d:03:c0:c3:5f:22:e8:0b:e9:48:bb:20:
                    f0:1c:82:ab:92:33:59:59:63:cc:cb:ea:96:c1:a8:
                    8d:2d:ab:e2:83:54:95:0b:9b:14:11:33:1c:65:28:
                    21:ed:c4:d7:0b:a3:42:a8:f9:5f:db:8e:ad:52:9c:
                    27:a6:41:cb:38:a7:e2:d5:4f:91:5f:01:73:80:5a:
                    9d:84:bc:c4:85:6a:90:bd:03:f1:d1:6a:56:14:11:
                    ed:64:3a:80:e1:84:4f:15:e6:f5:2b:d1:d6:67:22:
                    27:9d:54:bc:d2:f7:e7:ba:df:80:fa:0e:72:02:ac:
                    ce:9d:3e:01:cb:81:9b:22:7c:2a:1b:14:0e:45:9d:
                    c2:2a:70:ef:f8:af:2b:92:3b:d0:0d:a6:de:17:e3:
                    32:5d:e4:e7:46:ec:59:8c:3a:b3:bb:ce:8d:5c:f2:
                    98:b0:f1:48:f2:5e:20:76:88:08:a8:21:c7:f7:e2:
                    03:76:f8:9f:f2:32:29:39:4b:19:6c:81:70:61:a3:
                    de:a2:57:c5:22:2f:6a:c6:42:55:de:83:20:8f:32:
                    a8:23:24:d0:d3:6a:c3:3b:f9:c8:c4:79:af:b4:3c:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:52:E1:01:BD:C0:AA:CA:67:B3:77:12:BD:2A:29:6D:60:4C:FD:41
            X509v3 Authority Key Identifier:
                keyid:C4:38:5E:13:88:71:44:15:EC:B5:54:03:CF:61:7E:16:83:AB:B5:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xDheE4hxRBXstVQDz2F-FoOrtdY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/sFLhAb3Aqspns3cSvSopbWBM_UE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:fd:56:37:a0:1d:88:23:4b:e7:c1:fc:2f:4d:e5:e0:fc:
         6a:43:d3:4e:66:bb:54:bf:42:01:61:aa:a3:e6:a7:fc:77:d2:
         25:43:aa:09:63:21:d9:bf:fb:9f:b8:1a:9d:b4:8b:9d:16:40:
         e8:5e:ab:cb:2e:50:de:07:74:5d:91:ed:ea:52:9f:71:39:29:
         63:e7:15:a1:fa:2d:07:fc:be:6f:df:2c:75:27:c0:9d:73:b0:
         42:e1:29:35:9f:3f:d7:64:88:02:fc:23:4e:5d:67:b2:33:18:
         51:4d:6d:3a:9a:42:a8:5b:c5:7d:1f:c3:78:f9:ab:68:2f:f8:
         0d:7a:cd:92:ae:4b:fe:b0:83:f5:e5:ff:bd:5d:02:35:46:55:
         21:cf:d0:2e:39:9c:f3:f5:ad:45:f6:e8:2c:1b:96:4a:66:e4:
         24:59:37:f3:ca:11:7b:45:17:31:20:95:7a:db:58:a7:57:c3:
         86:30:97:4b:b0:b3:96:3d:30:38:d5:63:27:64:fd:62:29:3e:
         3d:1c:b0:f2:0e:a3:9f:34:14:97:de:7c:1f:0d:d6:06:82:59:
         f9:f9:29:9a:c0:25:1d:c2:56:a2:af:5a:59:d7:cd:ed:e7:c6:
         a7:8c:5d:fa:f1:8f:81:54:69:72:21:01:8e:be:ba:0c:31:dc:
         57:fb:2d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:05 2026 by rpki-client