Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/npFhrUbGVIykZ68pkuV0hpa0M0E.roa
File:                     npFhrUbGVIykZ68pkuV0hpa0M0E.roa (raw, json)
Hash identifier:          A+FWPV2UZA4M3q4ZPUjPtICF/Dj96GoPizVGVlOjZNo=
Subject key identifier:   9E:91:61:AD:46:C6:54:8C:A4:67:AF:29:92:E5:74:86:96:B4:33:41
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       CA
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/npFhrUbGVIykZ68pkuV0hpa0M0E.roa
Signing time:             Tue 31 Mar 2026 07:27:22 +0000
ROA not before:           Tue 31 Mar 2026 07:27:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131976
IP address blocks:        113.192.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Mar 31 07:27:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9E9161AD46C6548CA467AF2992E5748696B43341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:bf:e7:6f:0b:95:ce:0d:33:83:0b:97:a3:
                    6c:13:15:72:a9:db:13:67:54:f8:4d:29:c8:6b:cd:
                    22:bb:62:36:8f:9d:77:51:2f:16:1b:17:27:82:74:
                    e0:bf:9f:81:9d:e0:55:bb:58:90:f6:fe:53:67:61:
                    7f:df:7c:47:f1:b1:19:79:0d:7f:5e:f4:c4:90:b2:
                    a5:a1:b7:65:2f:fe:1d:49:11:2d:1a:ff:27:fd:3c:
                    13:5a:f6:12:d3:b1:89:8b:36:fb:7f:07:e8:4b:15:
                    c9:4d:c4:01:13:2c:b4:3a:ea:8a:7b:fb:ef:e7:b5:
                    04:a6:55:c0:1e:7e:aa:89:4b:84:ee:a7:5d:64:7a:
                    eb:d9:2b:2f:d5:da:80:dd:3a:85:59:fa:ae:f6:00:
                    0b:23:55:63:1e:cb:a1:05:59:c0:77:f8:1a:aa:e0:
                    79:95:3d:0f:97:7d:3e:fb:e7:7d:d5:fc:99:5a:0e:
                    56:e9:12:31:89:ae:3d:c2:e4:3f:9b:34:2c:a0:6d:
                    1e:e7:b7:a0:4c:70:dd:a1:0d:2d:d8:38:d1:45:45:
                    01:03:33:c6:03:f9:8f:cb:0e:8e:79:82:1d:ff:a5:
                    89:9c:87:fb:45:e0:f8:b0:91:57:14:1b:f6:9f:8a:
                    ce:ca:54:9e:34:eb:bf:88:5b:f7:a2:01:2d:59:a6:
                    ee:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:91:61:AD:46:C6:54:8C:A4:67:AF:29:92:E5:74:86:96:B4:33:41
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/npFhrUbGVIykZ68pkuV0hpa0M0E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b0:01:6b:1c:29:a3:af:b5:2a:94:ec:1a:5f:ee:b3:e5:4a:
         9f:c7:d1:ec:b8:97:ba:4d:c4:77:42:a2:a9:4f:e2:48:4c:27:
         62:4d:75:9a:c5:89:79:13:42:e5:6c:95:a9:c3:42:7d:4b:49:
         18:c0:86:00:f1:d8:de:14:d4:1f:e4:2f:9b:33:71:f9:8e:66:
         57:57:b1:6b:7f:a5:1f:e7:b1:48:a6:75:2d:d5:06:9c:8a:50:
         c1:bd:7e:c1:b7:e4:1e:fb:41:92:bd:d9:74:ac:4b:f3:b5:ce:
         5c:a4:a0:a9:18:9c:07:37:0e:ce:b8:b3:1c:a1:16:b3:d8:4c:
         47:4f:38:8d:81:9f:37:fc:91:81:52:d0:18:bc:55:3b:d1:48:
         36:01:2a:cf:e1:89:fc:ac:02:26:43:08:ec:aa:64:01:27:c1:
         a1:d3:99:00:22:ae:05:18:3a:30:dd:c3:2a:1f:59:c9:a2:e4:
         48:22:57:44:89:59:b3:b5:b8:4f:21:b4:71:6c:ed:7a:ef:af:
         09:e2:77:88:d0:b2:57:91:76:77:e9:3a:ed:d8:8a:0b:97:d6:
         ff:8f:17:76:90:4d:fc:19:eb:7c:16:0f:d0:56:a9:45:ed:34:
         54:fb:e6:f6:94:c1:24:bc:0d:68:81:9d:83:0d:4c:b3:e5:30:
         46:8c:c9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:03:02 2026 by rpki-client