Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/2B-Bhglk81ga3juz51LxOESlDH8.roa
File:                     2B-Bhglk81ga3juz51LxOESlDH8.roa (raw, json)
Hash identifier:          ztU/WxwXMMFXUQucB89xb8SU8JUcu3r5t8zA4/jz5pA=
Subject key identifier:   D8:1F:81:86:09:64:F3:58:1A:DE:3B:B3:E7:52:F1:38:44:A5:0C:7F
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       61
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/2B-Bhglk81ga3juz51LxOESlDH8.roa
Signing time:             Tue 31 Mar 2026 08:34:09 +0000
ROA not before:           Tue 31 Mar 2026 08:34:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9597
IP address blocks:        117.20.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Mar 31 08:34:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D81F81860964F3581ADE3BB3E752F13844A50C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3b:ed:42:23:2d:b5:de:f4:a1:22:ac:7c:3a:
                    58:80:87:f2:03:97:ed:b5:93:65:29:36:3a:f6:9b:
                    6c:5d:5e:98:5e:ae:73:64:87:28:99:22:36:43:62:
                    15:c3:50:4e:1c:79:c3:b3:d9:a6:7b:7e:0a:92:fa:
                    2c:09:a2:26:00:57:de:6e:eb:5d:45:db:0a:4c:7e:
                    2d:4f:98:83:d2:9e:0d:cb:9f:07:83:60:15:8f:b9:
                    3b:ed:c9:27:15:eb:32:5f:4e:b9:7a:d5:d1:df:c5:
                    f7:92:4b:ec:7d:2b:03:e5:cb:c1:8d:b2:39:94:c9:
                    fd:d1:e9:5c:6f:df:a9:8c:41:88:09:5a:77:03:0a:
                    8d:d3:85:82:81:5b:f1:b4:d5:c0:df:9c:a8:8a:a2:
                    c9:b1:75:87:7a:65:d1:74:98:5f:54:b0:51:2f:66:
                    ce:fa:be:77:8f:84:09:ee:55:8a:cf:c6:75:47:4a:
                    fb:30:a4:4b:36:10:26:f7:d7:32:f2:8e:c6:ec:5b:
                    d6:c3:bf:46:22:5b:99:35:a8:03:a6:31:db:fd:9d:
                    b9:9b:00:da:69:67:ff:92:b3:a7:f5:4a:0a:3c:64:
                    e4:26:28:a9:1a:b0:bf:82:67:30:f8:6f:b1:6e:04:
                    b8:f5:3d:5b:b6:f4:24:e9:fe:f6:29:6c:5a:cf:b3:
                    f0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1F:81:86:09:64:F3:58:1A:DE:3B:B3:E7:52:F1:38:44:A5:0C:7F
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/2B-Bhglk81ga3juz51LxOESlDH8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.20.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:41:09:67:44:0d:58:8e:66:e1:fa:3e:1c:0b:9c:48:94:7f:
         5f:39:da:05:3a:99:67:84:eb:5c:b5:46:12:e0:19:d6:01:14:
         6a:4c:5b:0d:98:f8:54:f0:9d:1f:51:91:35:53:54:fe:97:9f:
         80:68:a0:76:b9:9c:6f:4b:55:97:dd:c7:d2:f0:18:88:76:de:
         c6:f5:8b:1e:6c:f2:b9:e7:e5:15:57:62:87:14:2a:63:1a:2f:
         c0:85:e4:0a:f3:02:8c:9b:5c:11:f9:58:ea:fc:fb:fa:5c:7c:
         68:40:29:09:be:9f:12:fa:1e:4f:24:f9:63:90:a8:a4:64:4b:
         b0:72:6c:8b:6e:4b:6d:8b:26:3d:f5:14:a3:f8:b7:da:84:fd:
         c3:c5:f8:7f:04:21:20:a6:f3:a2:56:37:40:70:2e:3a:28:91:
         95:ab:5f:3d:27:5d:97:f7:99:fb:56:1c:06:8b:2b:50:36:9b:
         56:8e:16:08:fe:09:3f:1b:1e:3d:1e:23:69:6f:9b:1a:a2:86:
         50:74:81:2e:da:9d:4a:63:40:a3:3a:f3:74:d3:17:02:9e:9d:
         47:46:b8:ea:8d:98:ad:5d:78:fa:b6:bb:c4:be:72:c1:71:ae:
         b8:8d:3a:4d:03:e1:8f:6f:45:99:e6:5f:93:28:80:44:68:43:
         7f:7f:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:34:53 2026 by rpki-client