Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/nqiGUT1cTLp-ymW4FiHWdrkmZjs.roa
File:                     nqiGUT1cTLp-ymW4FiHWdrkmZjs.roa (raw, json)
Hash identifier:          OhSHWcXEZXKVwe6W/ZqwWAQm8/qgkZF2veCpUx/0tSc=
Subject key identifier:   9E:A8:86:51:3D:5C:4C:BA:7E:CA:65:B8:16:21:D6:76:B9:26:66:3B
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       013D
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/nqiGUT1cTLp-ymW4FiHWdrkmZjs.roa
Signing time:             Tue 31 Mar 2026 07:36:48 +0000
ROA not before:           Tue 31 Mar 2026 07:36:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        36.53.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Mar 31 07:36:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9EA886513D5C4CBA7ECA65B81621D676B926663B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:96:ce:31:33:97:63:5e:b7:4c:9e:42:ae:
                    b8:c6:81:7b:4a:0a:a3:fb:42:64:59:fd:3b:77:9b:
                    3e:1a:ca:2f:cd:6c:21:d5:dc:12:06:94:a6:61:c0:
                    4f:7e:1d:95:7f:65:b3:4d:41:18:98:3a:4d:df:95:
                    56:b1:d4:49:24:38:7b:9a:f2:6a:90:59:47:31:1b:
                    5a:32:ee:99:b0:ab:da:0a:f1:c0:e4:2a:01:0a:e3:
                    32:d0:ae:d8:32:f9:09:83:28:8e:e7:b6:9a:66:03:
                    17:1f:12:f2:2f:61:3d:96:62:25:a9:dd:25:91:ae:
                    c4:d2:4d:f6:93:b2:57:9b:3f:51:8e:01:d2:1c:36:
                    18:f5:aa:6e:dd:34:dd:0a:a7:f1:fc:1f:c1:75:15:
                    bb:d0:c7:6d:bb:77:51:b2:bb:f9:04:7b:63:07:e2:
                    40:ee:55:29:ff:4f:80:45:3c:cf:61:0d:29:12:fb:
                    bc:3d:57:d5:64:12:d3:ce:92:a9:c9:d2:ac:90:21:
                    35:08:db:13:47:4f:1c:89:77:db:0f:25:96:1f:4d:
                    1e:49:df:ac:5b:91:27:d8:75:50:31:80:c5:f9:32:
                    fd:e8:1a:9f:1c:df:d8:ed:bb:55:e1:59:24:d4:9a:
                    47:9c:61:24:36:64:c0:d7:79:b8:3b:0e:d7:c0:b1:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A8:86:51:3D:5C:4C:BA:7E:CA:65:B8:16:21:D6:76:B9:26:66:3B
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/nqiGUT1cTLp-ymW4FiHWdrkmZjs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.53.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         64:1f:d3:6e:36:59:40:1d:ef:e2:0e:7d:5a:9f:94:d1:0d:d9:
         61:53:c6:0b:f5:ac:ae:67:78:eb:83:28:d9:71:27:04:a8:e0:
         2b:7f:50:01:6e:4b:74:b8:88:ba:42:15:39:27:fd:95:f4:e3:
         a3:d6:e1:6f:81:ad:9b:ca:1e:dd:12:14:cf:37:15:15:be:c1:
         72:24:9d:aa:a2:04:40:3e:7f:50:db:e9:62:fc:b4:e7:db:e3:
         4e:23:39:65:ad:d9:fd:4c:00:95:80:6b:b5:a4:66:a5:05:f2:
         6f:08:60:48:c8:34:07:b5:90:ff:75:41:5e:c5:83:91:64:dc:
         24:04:f3:71:66:7f:6b:4a:fb:61:a5:1b:f0:5a:0f:7a:fa:05:
         31:0a:1e:70:c1:9c:9f:f3:b8:f2:4e:4b:33:21:25:a2:d8:ce:
         ee:11:5d:b5:ad:60:4c:61:a4:95:f0:49:01:24:1e:77:5b:01:
         af:17:cc:3b:54:d6:ae:76:b0:56:0d:75:e4:61:04:d4:6d:5f:
         58:ad:5a:8c:57:c4:f3:3c:67:b1:8e:65:3a:ae:e7:58:36:0d:
         dd:dd:9c:9d:50:7e:ce:a7:d2:29:51:a2:15:66:00:9e:23:24:
         f9:26:5e:08:b8:19:54:20:3c:20:d8:b5:2e:20:03:d1:d0:17:
         be:d5:9d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:17 2026 by rpki-client