Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20282/hZ2Aypk4Rsdu5kX7KoxwF11vKIA.roa
File:                     hZ2Aypk4Rsdu5kX7KoxwF11vKIA.roa (raw, json)
Hash identifier:          Y9mUmJ1YQWMPclsv63qOZfZJPoHW1EgQXIUt1Z8jeqU=
Subject key identifier:   85:9D:80:CA:99:38:46:C7:6E:E6:45:FB:2A:8C:70:17:5D:6F:28:80
Certificate issuer:       /CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648
Certificate serial:       07
Authority key identifier: 3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/hZ2Aypk4Rsdu5kX7KoxwF11vKIA.roa
Signing time:             Fri 20 Feb 2026 01:15:26 +0000
ROA not before:           Fri 20 Feb 2026 01:15:26 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     152875
IP address blocks:        138.252.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648
        Validity
            Not Before: Feb 20 01:15:26 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=859D80CA993846C76EE645FB2A8C70175D6F2880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:f4:b4:c3:0c:ab:8c:fc:d3:65:b4:e7:2e:
                    ec:62:f8:80:f2:f9:89:da:bb:cd:7b:e4:a1:06:d2:
                    b7:f5:c4:c7:14:b2:a3:bf:28:1a:75:1c:20:aa:40:
                    74:6d:ad:49:3b:7f:e8:e0:98:9a:c0:e5:3b:db:12:
                    8f:ef:ee:43:bb:31:93:9b:27:91:29:c0:c5:bc:b9:
                    4c:ab:20:37:bb:7a:f6:bc:88:ab:02:df:73:20:7d:
                    50:c6:c1:01:5c:14:cd:fd:af:d9:ec:54:a9:ac:2c:
                    89:2d:2f:0d:5c:64:98:74:3e:b1:74:cb:4b:ba:0e:
                    61:eb:48:5c:9b:23:aa:38:86:7e:58:3a:01:3b:54:
                    42:8b:14:4e:68:e1:e2:7e:ae:86:39:3d:e5:d3:9e:
                    e6:7c:ff:f9:3e:0d:5e:f9:fd:0a:26:c9:7b:ef:34:
                    bd:9a:1b:12:43:d7:7b:4e:4b:77:25:8d:b4:f1:ed:
                    08:38:ee:70:da:d4:38:16:87:e9:85:01:8d:16:fd:
                    d1:1a:d5:f3:0f:1f:bd:e3:63:b9:1d:aa:6f:f2:d5:
                    5f:78:ee:0b:eb:c0:fc:52:67:5a:ff:92:2a:95:10:
                    d4:33:47:dc:87:76:7f:e2:b0:cd:27:14:e0:d1:0f:
                    af:f1:8d:a4:b5:f4:1c:53:97:22:26:84:73:c8:20:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9D:80:CA:99:38:46:C7:6E:E6:45:FB:2A:8C:70:17:5D:6F:28:80
            X509v3 Authority Key Identifier:
                keyid:3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/hZ2Aypk4Rsdu5kX7KoxwF11vKIA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:70:35:32:0d:35:f6:55:4e:51:e8:72:93:6a:c3:9b:91:12:
         a5:87:e4:84:24:7a:d7:32:b1:df:f5:4d:7a:be:54:7a:02:57:
         91:0b:7c:b1:8d:24:84:f7:7f:14:6e:f6:1e:f4:b6:53:2a:5b:
         64:2e:ea:c3:2e:da:f8:82:ba:24:98:0d:42:91:3a:57:26:78:
         f8:8b:82:0f:0f:62:6d:5e:f1:b4:38:d7:70:cd:49:f9:a4:09:
         33:b0:b1:20:bd:86:2e:bf:f9:48:2f:b3:3c:da:fb:7d:1f:b7:
         6f:87:57:c7:d5:22:02:52:ea:79:c4:58:3e:b2:f0:30:a7:f0:
         ab:09:b3:af:b5:99:44:b8:98:19:bd:58:0a:a7:9e:8d:d2:16:
         e9:b1:e8:2e:01:a4:c8:3e:c2:d6:4f:01:06:ab:2c:1e:67:53:
         be:6b:13:9c:74:76:f3:b1:ff:9d:5d:e1:30:b2:5d:2f:6d:04:
         08:3b:11:80:43:b3:91:5c:26:50:91:f8:26:a2:8b:cd:2d:6d:
         ae:80:1a:27:10:b0:2b:9f:2b:a3:2e:7a:65:50:f6:07:ff:24:
         bf:56:62:25:8d:6d:a1:51:84:ce:0a:4d:6e:2a:f8:11:70:9f:
         48:03:8b:f7:d8:c3:ce:7a:7d:9e:01:37:e0:6d:f0:ae:66:14:
         a9:ae:ec:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:13 2026 by rpki-client