Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/D-8DnXUSpjuUH8d9oL1JauxKD44.roa
File:                     D-8DnXUSpjuUH8d9oL1JauxKD44.roa (raw, json)
Hash identifier:          DCe2XVpJRLZ4sR0Ss/oCKktprJsIrhTe9oDmYbMLmrc=
Subject key identifier:   0F:EF:03:9D:75:12:A6:3B:94:1F:C7:7D:A0:BD:49:6A:EC:4A:0F:8E
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       6A
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/D-8DnXUSpjuUH8d9oL1JauxKD44.roa
Signing time:             Tue 31 Mar 2026 08:34:12 +0000
ROA not before:           Tue 31 Mar 2026 08:34:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9597
IP address blocks:        202.74.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Mar 31 08:34:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0FEF039D7512A63B941FC77DA0BD496AEC4A0F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:6a:d6:ed:0f:b5:d1:88:21:7a:2e:32:68:
                    02:41:5c:23:dc:84:44:e6:79:74:a1:32:6f:d4:ac:
                    0d:7a:8f:29:55:ac:91:2c:46:ca:a1:1b:36:3d:26:
                    8a:c4:f5:90:cb:99:9f:01:12:dc:9a:bc:e0:e0:e8:
                    26:ce:96:04:f2:03:39:48:36:92:9e:37:a7:5e:91:
                    a9:23:11:4f:1e:80:45:82:56:3a:31:57:bc:43:d7:
                    78:5d:d1:07:79:e4:8a:ec:35:98:33:e5:7c:2c:79:
                    8a:97:81:a3:30:9b:1f:83:6f:99:48:59:8c:4d:f6:
                    47:d0:b0:56:62:a6:42:fb:88:df:84:e7:36:73:4c:
                    d6:49:06:83:58:07:de:2f:16:08:b0:b9:0b:83:ad:
                    f5:8e:ae:d1:3a:f3:45:f5:21:66:a9:bb:08:e4:67:
                    32:16:bb:86:e6:55:3f:f8:3b:3f:f2:8c:89:e4:1c:
                    b2:c3:58:14:7b:3b:a8:85:47:74:3d:38:b2:23:05:
                    42:e9:a9:88:2a:82:f0:27:eb:be:5c:0f:df:53:ab:
                    15:12:5f:54:16:4f:c4:ac:88:50:c3:ed:8b:07:f1:
                    d1:a3:57:9f:82:5d:82:ae:ae:94:41:af:99:6e:17:
                    c2:a9:51:39:ac:8e:81:f8:16:37:e6:7f:f5:f0:86:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EF:03:9D:75:12:A6:3B:94:1F:C7:7D:A0:BD:49:6A:EC:4A:0F:8E
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/D-8DnXUSpjuUH8d9oL1JauxKD44.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:b2:ce:cc:0c:f2:27:f1:b4:b3:cb:21:4c:46:64:29:de:df:
         c9:76:37:61:53:56:5a:72:e0:f5:11:b2:86:e1:33:e6:84:c6:
         9a:ca:5c:7c:52:f9:6f:2f:98:98:96:62:4e:4b:d1:77:9c:a3:
         09:b1:a2:e5:84:d4:f9:0e:09:6b:a1:59:4c:3e:a3:a9:b0:6c:
         21:7b:ab:8b:29:ca:41:84:b4:b4:d3:97:25:0b:f2:f7:3f:6f:
         d5:db:42:fa:c6:95:ff:6f:73:ac:37:af:89:88:50:73:40:a8:
         88:37:6e:9f:46:f1:85:73:6c:ac:5d:4b:41:d2:33:19:f0:7e:
         34:46:e0:d6:07:20:87:68:eb:54:52:66:70:63:98:5b:72:07:
         17:c4:b5:16:3e:3a:f1:8c:cd:6b:61:f6:dc:70:ed:b1:f7:3a:
         a3:ee:4c:05:08:6e:db:c6:de:b7:77:99:24:64:83:32:aa:ff:
         74:44:67:b5:e5:29:cd:b8:97:eb:5c:ae:f6:3a:03:5a:a0:93:
         d8:ac:92:b9:07:b9:ce:5b:e3:0c:89:f0:c1:14:7f:a6:af:ac:
         48:60:ed:a4:65:de:6b:79:19:3e:8b:a5:5d:f5:89:35:b7:9b:
         30:d2:84:bf:d9:02:c0:31:b3:46:a4:39:e7:29:42:2e:8d:26:
         97:29:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:35:00 2026 by rpki-client