Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/ohFmRoxGh-M3IbghbdNgUMgtkcU.roa
File:                     ohFmRoxGh-M3IbghbdNgUMgtkcU.roa (raw, json)
Hash identifier:          LB9UtZGm+S4NOdXoCiFHTbpn/EWBqUMNQHFq68ePe3Q=
Subject key identifier:   A2:11:66:46:8C:46:87:E3:37:21:B8:21:6D:D3:60:50:C8:2D:91:C5
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       62
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/ohFmRoxGh-M3IbghbdNgUMgtkcU.roa
Signing time:             Tue 31 Mar 2026 08:34:09 +0000
ROA not before:           Tue 31 Mar 2026 08:34:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9597
IP address blocks:        118.82.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Mar 31 08:34:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A21166468C4687E33721B8216DD36050C82D91C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:61:bb:e1:f3:8f:ab:9d:6e:0a:28:d2:2d:
                    88:86:e9:ca:91:49:ae:f6:23:f1:83:94:06:91:16:
                    6d:87:63:b6:3d:de:25:10:ff:a0:8f:a9:72:8c:9d:
                    99:a2:dd:30:dd:f1:16:0c:97:17:4a:50:85:33:25:
                    98:fe:69:d6:76:d8:94:49:26:d0:11:62:4b:d9:5a:
                    f5:7b:77:10:61:42:3a:65:2a:df:14:2c:d4:a0:96:
                    6a:e1:34:dd:e0:46:27:4d:bc:27:c0:32:c0:aa:c2:
                    2e:0d:5b:35:dc:05:2c:45:f8:99:db:13:0c:00:73:
                    59:10:db:7b:47:7a:63:1c:7f:ca:a3:0a:30:33:ff:
                    22:b1:65:c4:40:36:56:b7:a3:ec:bc:c6:be:fd:fa:
                    0c:0b:f5:9e:f5:0c:bf:d7:09:82:25:ae:47:c6:3e:
                    c2:15:d9:7c:f9:50:b7:73:c0:fe:fa:79:eb:f2:e1:
                    10:36:7e:bf:23:6a:72:72:ec:9d:1b:fb:ef:37:7e:
                    26:1e:33:35:48:92:ca:e6:02:a2:18:ba:f6:27:d5:
                    8b:17:62:76:49:9c:5f:91:dd:b1:44:65:10:07:cc:
                    ec:b8:19:45:a5:30:e4:5e:7e:c0:1f:2c:27:76:23:
                    04:52:0c:a2:54:86:07:56:8f:c7:d0:c4:c0:9c:5e:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:11:66:46:8C:46:87:E3:37:21:B8:21:6D:D3:60:50:C8:2D:91:C5
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/ohFmRoxGh-M3IbghbdNgUMgtkcU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.82.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         24:18:c1:36:4b:bb:f1:c3:d5:bf:2a:f9:ad:99:38:dd:ed:6b:
         0d:e5:68:09:ed:5d:02:af:42:54:ff:bc:24:5a:22:ae:8a:37:
         3d:77:cf:5a:ce:0d:ba:b9:97:87:c9:21:21:b6:e1:6d:69:ea:
         fe:4c:bc:d9:49:fc:e7:db:37:9b:25:e2:09:4a:5b:89:a5:77:
         4b:28:9e:81:a0:d1:45:4d:c2:a9:13:d7:60:d9:14:d6:c8:ab:
         91:4b:e8:90:a0:5a:7c:f5:dc:4c:65:39:ff:02:b4:0c:01:b7:
         8a:22:65:63:f3:56:0f:d5:1d:c8:51:a8:a9:0e:63:db:1a:88:
         54:10:5c:5d:07:a7:6a:54:5c:4e:43:88:55:7a:83:85:e2:18:
         6d:6e:f1:82:81:32:18:c5:ad:f1:b2:0f:13:72:58:57:80:e6:
         e1:91:b1:90:09:49:1d:ad:b7:85:f9:5b:2d:0f:b3:10:f0:c6:
         e3:2d:2a:bb:30:1f:a9:c5:8c:a4:4a:5b:73:aa:26:c4:76:06:
         3e:65:1a:52:80:8b:86:59:27:4c:51:d7:37:12:b4:53:27:4e:
         e6:a0:13:75:79:e2:86:c1:17:db:43:1c:ee:71:d2:9a:84:c5:
         cc:60:00:3a:64:cf:c5:65:e3:db:a1:18:84:b8:c7:34:69:7d:
         a7:2d:b4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:34:53 2026 by rpki-client