Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/Rs2XtDmurrU8m2v55k4bGHh7hbY.roa
File:                     Rs2XtDmurrU8m2v55k4bGHh7hbY.roa (raw, json)
Hash identifier:          mXGRzbZl7w+u7+f/3q2SIzveLazSUQDhCsqdaZZWduc=
Subject key identifier:   46:CD:97:B4:39:AE:AE:B5:3C:9B:6B:F9:E6:4E:1B:18:78:7B:85:B6
Certificate issuer:       /CN=D6E9A21E81CA12EB8455ADEC46610477EA5F4F4C
Certificate serial:       3E
Authority key identifier: D6:E9:A2:1E:81:CA:12:EB:84:55:AD:EC:46:61:04:77:EA:5F:4F:4C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/Rs2XtDmurrU8m2v55k4bGHh7hbY.roa
Signing time:             Tue 31 Mar 2026 08:16:28 +0000
ROA not before:           Tue 31 Mar 2026 08:16:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7672
IP address blocks:        216.8.0.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E9A21E81CA12EB8455ADEC46610477EA5F4F4C
        Validity
            Not Before: Mar 31 08:16:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=46CD97B439AEAEB53C9B6BF9E64E1B18787B85B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:a6:a6:52:46:81:0f:c6:a0:fb:c4:fa:ef:
                    5e:4d:0e:3a:a9:99:d3:45:cd:1c:cd:6b:44:e6:36:
                    50:b1:10:29:e4:30:6c:ac:63:d8:b5:d0:26:3a:30:
                    a1:c7:9d:76:33:12:c1:73:e4:5d:58:9f:b4:d3:10:
                    d2:c5:ae:4f:31:8b:d1:44:1a:9f:8f:d3:4c:36:f7:
                    88:4a:85:90:0f:d0:e1:37:a0:b4:9b:da:95:63:ad:
                    ef:e4:1b:69:e1:61:17:3e:93:ec:18:87:b6:a0:66:
                    52:4d:6d:f7:58:03:49:ef:e5:80:43:04:10:5d:c5:
                    39:ef:78:c5:b0:01:fd:dc:e4:98:45:3f:28:2e:83:
                    ad:d6:4d:f6:9a:b6:78:40:00:41:58:f5:64:c2:9d:
                    ea:0b:4f:1d:34:ab:b8:eb:cd:7d:71:1f:fa:3b:43:
                    2c:8b:c5:83:38:bf:1e:c9:b3:fc:1f:5d:7e:fc:81:
                    5a:0c:be:8b:34:6e:9d:4b:a8:19:37:d8:87:81:73:
                    f0:0e:29:87:d6:ec:11:5f:18:00:98:0a:38:95:ee:
                    8e:29:94:b2:56:c7:64:55:7b:a2:ea:86:d6:f2:c2:
                    04:c9:e6:2d:f1:7d:70:38:92:1f:f3:36:01:2e:72:
                    24:b8:ab:65:a4:91:83:8d:ca:79:2a:35:38:09:5f:
                    d6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CD:97:B4:39:AE:AE:B5:3C:9B:6B:F9:E6:4E:1B:18:78:7B:85:B6
            X509v3 Authority Key Identifier:
                keyid:D6:E9:A2:1E:81:CA:12:EB:84:55:AD:EC:46:61:04:77:EA:5F:4F:4C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/Rs2XtDmurrU8m2v55k4bGHh7hbY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9b:db:03:c3:73:17:25:b8:73:8b:ea:80:79:49:6e:e1:e1:7b:
         f5:a8:2c:e0:ba:94:40:7d:55:e1:9d:c7:55:76:6d:cd:3f:be:
         28:d7:56:09:ec:7f:a0:78:d6:bc:32:52:3f:8b:77:7d:12:ca:
         f6:9f:85:36:b2:fa:72:a6:73:57:43:2e:51:83:6e:d0:ba:4f:
         b0:29:fa:32:35:d5:05:31:e2:d9:9b:60:57:2b:b6:c4:88:57:
         9f:64:01:0c:63:da:92:e7:9e:a2:37:0d:70:09:74:a4:63:4d:
         e2:e6:ed:72:4a:b1:7c:70:1a:8e:dc:ea:18:c2:cd:4f:36:c6:
         7c:9c:11:7e:98:5b:c8:ca:ce:6e:13:4c:73:16:69:32:23:00:
         46:7d:1d:5d:59:83:01:a1:36:67:b0:d3:0b:d7:a7:20:49:a4:
         b3:02:bd:7c:a3:83:db:5e:24:50:80:97:09:37:57:dc:93:82:
         b3:12:19:35:a6:eb:38:0d:43:5c:cc:6c:bb:57:e9:10:fd:25:
         f1:ea:97:a3:70:d0:ef:49:d6:7c:f5:dc:f3:e7:4c:58:e4:fa:
         76:e3:66:7a:0b:39:57:a9:0f:a3:fa:af:4a:cb:00:aa:15:76:
         7c:22:93:6a:f6:04:c3:1d:84:20:33:f6:42:a0:f3:bd:a7:ec:
         1d:0e:ad:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:51 2026 by rpki-client