Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/MiIzX1egGt9t35JqnqXlLTA0ft0.roa
File:                     MiIzX1egGt9t35JqnqXlLTA0ft0.roa (raw, json)
Hash identifier:          SWoamNIW7K/Uw02+D3YECZ/iFDqQ/L+a+pyT2vvvYqs=
Subject key identifier:   32:22:33:5F:57:A0:1A:DF:6D:DF:92:6A:9E:A5:E5:2D:30:34:7E:DD
Certificate issuer:       /CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10
Certificate serial:       3A
Authority key identifier: 49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/MiIzX1egGt9t35JqnqXlLTA0ft0.roa
Signing time:             Tue 31 Mar 2026 07:51:02 +0000
ROA not before:           Tue 31 Mar 2026 07:51:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9357
IP address blocks:        133.250.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10
        Validity
            Not Before: Mar 31 07:51:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3222335F57A01ADF6DDF926A9EA5E52D30347EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:52:b7:bb:c8:36:ff:32:53:c9:01:f3:bb:
                    b9:50:b0:8c:cd:78:5c:d6:8f:16:4f:b0:d7:aa:a5:
                    a7:ca:a6:48:b4:a5:b9:c1:0d:c2:d2:e3:3c:e6:0e:
                    a6:4d:2b:e3:2e:03:a0:59:34:fe:82:8b:1e:26:51:
                    9a:d4:02:b3:ee:6c:76:43:d7:a6:e5:3f:e7:b1:23:
                    a4:a4:b3:b5:0b:c1:a2:09:8e:83:5c:bf:71:f8:b5:
                    df:5f:d7:b0:1b:6b:34:4f:5f:4b:e7:8b:80:f5:3a:
                    79:fe:71:00:1b:1c:b9:53:97:34:25:79:51:ef:82:
                    c1:36:8f:ef:66:9d:18:0a:f7:57:4a:bc:1a:bf:4e:
                    09:4e:8a:d6:ad:7e:92:40:8a:56:bc:a9:f3:ab:df:
                    f2:7d:48:ef:0c:ca:6a:af:b9:96:82:12:ca:ff:e8:
                    e9:7f:ea:ec:9d:b8:2e:42:8d:a5:ce:1f:5d:8d:bc:
                    4b:70:df:81:46:62:68:cc:ba:cc:b7:89:c6:2d:64:
                    9f:1f:9c:36:08:2f:92:d7:5e:ba:79:9a:70:8b:a7:
                    9a:05:a9:0b:2a:55:ba:e0:1d:5b:7c:ae:f8:ff:27:
                    05:fc:81:1a:e6:d5:79:5f:c8:a3:33:af:14:3f:62:
                    77:0c:ff:4a:53:21:ca:66:9d:57:c9:6a:d9:ea:77:
                    36:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:22:33:5F:57:A0:1A:DF:6D:DF:92:6A:9E:A5:E5:2D:30:34:7E:DD
            X509v3 Authority Key Identifier:
                keyid:49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/MiIzX1egGt9t35JqnqXlLTA0ft0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.250.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         88:93:77:4a:a2:56:e9:ad:5b:d6:7e:13:00:23:48:b2:5f:f3:
         5a:dd:fd:26:fe:93:cc:80:cf:ff:8b:8f:f3:49:43:ce:53:6f:
         f2:03:14:9c:fc:46:ea:e5:ea:e2:3e:84:ad:7b:cc:7c:ae:ce:
         c3:a7:ff:0e:87:b6:80:e1:f4:93:69:f3:12:3d:57:53:0b:13:
         e2:f1:73:02:55:7d:3c:ae:27:d4:e5:7a:c7:46:e5:77:60:22:
         2e:83:fb:f7:ef:2c:a3:c0:25:9e:9f:08:9b:b8:5d:c9:67:e2:
         67:d1:01:e3:40:95:d1:a4:94:15:42:dd:b6:ce:a0:e2:e7:97:
         5e:dd:e3:f8:c6:d8:9e:ce:29:d0:cd:37:4d:c0:01:ba:8f:4a:
         c7:77:72:19:3d:50:d5:25:d0:85:07:c3:5e:8d:15:1c:3a:a5:
         9a:78:4f:e2:7c:7d:63:fa:f2:1a:3f:40:9c:c3:e1:58:60:8f:
         98:ae:81:64:de:08:04:bf:50:9a:2b:c7:31:12:1d:9e:e1:52:
         6d:18:e3:ef:cb:fd:98:05:c1:52:51:ce:ab:98:58:82:6c:fa:
         de:2c:14:fa:9f:1e:bf:87:6f:10:fa:c9:4c:21:7e:89:00:7a:
         75:70:27:a2:5d:79:e6:75:09:e7:9b:89:ea:bd:e0:fc:62:40:
         e0:d6:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:52:41 2026 by rpki-client