Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/vsgqEHhVY2-8185LNiMSuPyV5nQ.roa
File:                     vsgqEHhVY2-8185LNiMSuPyV5nQ.roa (raw, json)
Hash identifier:          MIIn4L8cAGGhvNGTeVSgxmv/mMe4AsM/SeEw5jBoLvI=
Subject key identifier:   BE:C8:2A:10:78:55:63:6F:BC:D7:CE:4B:36:23:12:B8:FC:95:E6:74
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       6F
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/vsgqEHhVY2-8185LNiMSuPyV5nQ.roa
Signing time:             Sun 01 Mar 2026 01:34:32 +0000
ROA not before:           Sun 01 Mar 2026 01:34:32 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        112.140.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Mar  1 01:34:32 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=BEC82A107855636FBCD7CE4B362312B8FC95E674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:40:4a:45:e3:b8:96:cc:5d:ca:aa:fa:4f:
                    47:9b:e8:f2:04:7a:a1:e7:11:46:69:2c:57:e2:43:
                    3d:53:b0:de:49:7c:42:64:f4:10:cc:b5:86:01:89:
                    ae:7c:67:70:af:a5:42:e0:46:d7:48:bc:9b:51:5e:
                    25:ba:46:53:91:9a:1e:a1:a9:c1:a0:ec:02:54:df:
                    37:d7:64:77:57:6b:ba:72:2f:d1:f2:d2:34:3f:0e:
                    9b:da:38:20:a1:ff:03:cf:7c:72:15:c3:04:d6:b8:
                    6e:28:4e:05:37:5a:60:09:9c:b1:9d:ba:d3:99:57:
                    a2:19:41:6e:b5:f9:0a:b8:df:b0:bf:86:29:83:06:
                    57:23:a8:d1:c2:85:5f:61:61:e2:37:13:30:2a:4b:
                    d5:d3:bf:5a:09:03:e0:ef:1b:ae:2c:25:b3:47:57:
                    04:18:88:6f:e2:06:78:84:5e:78:37:95:a5:91:57:
                    46:e6:66:8c:a8:ac:a8:54:e8:dc:64:fc:84:b0:3c:
                    0e:a3:29:08:e6:5f:3f:10:52:30:fd:ac:bf:10:98:
                    d9:31:0a:ce:e3:ab:8c:77:7e:02:32:f4:91:02:d0:
                    2e:0a:a9:85:02:78:16:60:4f:5c:e1:35:f1:82:e3:
                    2c:16:a2:25:65:70:43:a5:3a:bd:a1:8b:47:10:13:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C8:2A:10:78:55:63:6F:BC:D7:CE:4B:36:23:12:B8:FC:95:E6:74
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/vsgqEHhVY2-8185LNiMSuPyV5nQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:a1:b6:b4:50:93:f5:7d:63:9d:f8:e8:5a:dd:eb:d2:ef:34:
         86:36:97:72:26:55:a8:2f:20:a9:20:b7:c5:79:6d:db:33:c4:
         49:05:fe:cd:be:f7:f6:6e:96:03:70:8f:f4:10:26:78:4c:11:
         36:1f:ab:b2:62:35:bf:00:3f:40:ea:17:31:1c:3d:ea:e1:e6:
         a4:6e:6e:00:0d:fc:f6:7a:63:7f:bb:53:cb:68:79:ef:70:25:
         66:47:72:76:60:3f:b0:81:a9:f7:36:24:18:be:eb:71:41:ff:
         40:35:5d:a2:e6:d2:a5:45:bd:0e:8e:0d:94:6c:93:0e:52:b6:
         07:5f:25:68:a3:a7:0d:b8:62:67:ca:15:a0:79:4f:c8:cd:a7:
         7a:8d:fb:56:31:f0:1d:52:85:4d:2a:27:22:13:d1:37:4a:a9:
         65:c4:3c:44:a6:e3:04:e2:31:7d:23:5f:41:e5:29:12:e4:2f:
         e8:22:3a:0a:8e:66:f6:33:71:89:db:1f:4b:99:14:bc:4e:16:
         a5:2d:7a:21:38:16:b6:97:c9:c8:0f:2a:8d:6f:e6:83:d1:bb:
         66:45:4c:91:08:8f:31:d1:fb:9d:d9:28:e4:e8:18:34:d8:f9:
         60:b2:dc:2f:f9:b0:5c:4b:7f:ce:6a:c8:ac:0f:db:c1:3d:c7:
         95:c1:b1:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:28:53 2026 by rpki-client