Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/mr1mR46DYl5rzobqbAHvavU7cIA.roa
File:                     mr1mR46DYl5rzobqbAHvavU7cIA.roa (raw, json)
Hash identifier:          V+5mfCDwx7BMrxrnDNiL/yU19Pha6CRTwrBiEeOF8cc=
Subject key identifier:   9A:BD:66:47:8E:83:62:5E:6B:CE:86:EA:6C:01:EF:6A:F5:3B:70:80
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       ED
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/mr1mR46DYl5rzobqbAHvavU7cIA.roa
Signing time:             Tue 31 Mar 2026 07:51:18 +0000
ROA not before:           Tue 31 Mar 2026 07:51:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9351
IP address blocks:        202.59.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar 31 07:51:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9ABD66478E83625E6BCE86EA6C01EF6AF53B7080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:a7:c8:47:a6:a8:da:db:a7:16:b8:d5:ec:
                    11:23:cb:0b:cc:10:44:79:91:d8:a1:74:79:3d:a0:
                    59:99:f1:0c:1f:d7:32:d1:a9:60:da:66:f1:79:16:
                    34:74:ed:f4:24:0a:15:d5:f1:ae:64:4e:48:50:b9:
                    ee:02:10:f5:f8:00:80:63:19:92:74:39:50:08:65:
                    61:2e:ac:ce:96:d1:a0:a5:f3:d9:5c:76:ab:99:07:
                    5a:c9:f9:ec:98:0e:6d:6f:15:c5:26:a9:37:4b:c9:
                    2b:fc:6a:85:a4:8f:f3:14:06:a4:63:c6:d4:54:f0:
                    16:5b:ae:1f:8d:ab:8b:ed:ba:29:9a:ce:73:5f:a3:
                    b2:37:3a:9c:f6:02:ba:3d:19:f5:78:b6:2e:4a:44:
                    7b:e3:c7:63:2d:b1:41:d7:5e:99:a6:87:a1:34:d5:
                    fa:4f:4f:15:8e:41:73:48:05:f6:a7:71:61:1c:4b:
                    e2:ef:cb:c2:8e:a6:a1:f6:0a:e1:00:b8:16:57:0a:
                    46:c9:9e:62:81:f0:73:3e:f9:61:f3:0e:99:18:15:
                    10:da:e8:ce:0a:fc:14:19:0b:b6:66:ce:a3:5d:ec:
                    ac:c2:c8:65:2a:83:e6:0e:74:33:3d:01:1f:43:f2:
                    5d:fa:40:af:48:30:30:64:c7:53:28:ea:e5:b5:d3:
                    57:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BD:66:47:8E:83:62:5E:6B:CE:86:EA:6C:01:EF:6A:F5:3B:70:80
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/mr1mR46DYl5rzobqbAHvavU7cIA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.59.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:9b:af:16:ef:4d:1a:be:38:f3:27:50:72:b5:d4:ad:5e:4f:
         63:a1:4d:f5:e3:3e:d8:f3:98:4e:14:7c:00:67:21:99:9f:32:
         02:2a:78:fa:81:16:b3:32:5f:23:8b:df:82:8e:00:f6:4e:e6:
         dd:d0:cc:dc:79:74:d6:58:82:ba:3b:c5:8c:d3:69:26:46:4d:
         34:4b:14:f0:81:8d:e5:2f:78:cb:a0:47:16:64:27:e1:c9:80:
         47:37:6f:75:d3:7e:f6:a0:a0:09:05:2e:a3:be:ed:6b:24:56:
         69:25:b0:3a:74:eb:b2:b8:b5:86:28:60:bd:fa:2a:a9:c3:42:
         14:3c:4f:1f:f2:ca:72:00:a9:1e:cb:16:2b:67:03:82:20:d0:
         61:2b:5a:f1:0b:be:d4:e6:c6:30:67:46:86:8e:d9:f8:34:21:
         b6:53:32:e0:82:74:ef:27:fb:aa:50:b7:c2:d5:57:8d:3b:af:
         92:21:e4:fc:d0:78:bb:98:16:08:db:d1:21:b2:b5:5c:6a:2f:
         0b:1a:39:b3:d3:59:c0:b8:09:c6:67:7c:06:22:31:27:e6:02:
         e1:be:0a:63:d0:39:ef:04:02:43:08:3c:c7:25:c0:37:f2:f2:
         6f:5d:d3:0f:d8:0a:f8:c3:cb:e1:9f:4d:5b:de:2e:df:39:27:
         86:48:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:13 2026 by rpki-client