Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/gmoaD3PGTZxmFddGo6uiP_7FNAI.roa
File:                     gmoaD3PGTZxmFddGo6uiP_7FNAI.roa (raw, json)
Hash identifier:          hH5S/wgSQ9hlY3iNsRCigbi7GYYurA15IjcntgWpGQk=
Subject key identifier:   82:6A:1A:0F:73:C6:4D:9C:66:15:D7:46:A3:AB:A2:3F:FE:C5:34:02
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       F3
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/gmoaD3PGTZxmFddGo6uiP_7FNAI.roa
Signing time:             Tue 31 Mar 2026 07:51:20 +0000
ROA not before:           Tue 31 Mar 2026 07:51:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9351
IP address blocks:        218.228.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar 31 07:51:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=826A1A0F73C64D9C6615D746A3ABA23FFEC53402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:ec:ab:06:84:96:d2:82:c0:38:20:fb:b9:
                    cd:a4:26:e8:9b:e0:cb:c9:a3:52:7d:48:1d:60:88:
                    32:81:53:2b:46:a4:51:4d:e9:62:25:9d:c5:9a:6b:
                    15:48:34:06:5d:e6:77:36:ed:81:58:06:b0:54:eb:
                    23:3a:07:52:2d:a0:f7:23:eb:da:d2:49:3e:e2:a3:
                    13:14:87:92:94:ac:b1:ab:b8:1f:fd:66:02:8d:28:
                    5e:f1:94:41:36:fa:20:a3:e5:ba:76:a6:3f:a9:49:
                    e3:0a:73:b3:25:c2:11:5d:42:3d:0b:27:fe:16:39:
                    1a:88:4c:c9:25:d0:50:bf:60:59:fa:1b:cd:44:ae:
                    29:c3:85:16:fb:fe:4c:eb:64:74:3b:6c:bb:9e:de:
                    17:aa:d4:17:44:37:99:fd:f9:a4:92:a9:42:5b:70:
                    91:5d:b2:c1:02:9c:1e:99:42:ba:23:74:4f:f0:a7:
                    12:b2:fa:bc:24:cd:72:3c:2d:c5:9b:a2:54:28:70:
                    92:eb:1b:e4:87:12:01:b4:73:b9:50:9b:2b:f6:f2:
                    cc:45:39:cd:22:50:0b:75:02:07:86:a5:9a:cb:56:
                    93:ab:39:40:41:2a:d5:03:cf:49:af:5c:03:b4:32:
                    d8:0d:0c:b8:3a:c3:bf:e3:79:c0:af:84:51:66:cc:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6A:1A:0F:73:C6:4D:9C:66:15:D7:46:A3:AB:A2:3F:FE:C5:34:02
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/gmoaD3PGTZxmFddGo6uiP_7FNAI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.228.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:23:44:58:12:b2:ba:78:28:94:db:c6:5b:16:04:9d:06:0e:
         8a:9c:76:77:dc:ad:e8:85:88:ee:90:c9:17:a6:76:9c:3a:f1:
         d7:2a:79:05:b2:88:0d:ae:48:2f:20:ec:f3:79:14:77:01:08:
         ae:92:93:9f:17:4d:71:ca:7a:f7:2b:5f:45:36:d7:8c:75:72:
         af:e4:60:42:1f:84:c4:a1:0a:e1:cb:2c:0f:6d:b5:42:e0:95:
         0a:0d:8c:10:29:81:3b:33:5b:38:08:f1:3c:32:83:13:7b:5c:
         99:27:cb:a9:3a:bd:68:c3:5b:88:1d:72:66:a5:18:90:63:22:
         f4:b4:91:31:02:39:55:a0:76:a1:b8:f1:23:c5:ac:01:06:85:
         78:89:86:5e:5b:26:d6:13:1c:b6:18:8c:12:7f:2b:a4:ec:b6:
         d6:fd:f2:32:4a:7b:5c:14:74:cf:47:fe:6e:36:0b:0f:ec:b2:
         e1:05:16:ae:77:3a:6b:c2:ed:34:66:c0:33:97:e7:2d:ef:99:
         ae:e0:d1:ec:1f:3f:12:a9:a5:db:71:a9:23:31:85:c3:14:9d:
         e2:1a:7d:22:12:34:a3:85:cf:52:fc:46:dd:7d:22:f8:66:53:
         dc:cb:50:07:ef:21:53:30:55:08:24:22:25:10:04:76:3c:8e:
         20:15:aa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:34 2026 by rpki-client