Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/A59duEdksovHf63nucHFOiez8lY.roa
File:                     A59duEdksovHf63nucHFOiez8lY.roa (raw, json)
Hash identifier:          /PiEd/BQdwd9R6CwKfNxC8D4dJg8w6kMKXiQfqMHpKQ=
Subject key identifier:   03:9F:5D:B8:47:64:B2:8B:C7:7F:AD:E7:B9:C1:C5:3A:27:B3:F2:56
Certificate issuer:       /CN=FB8C78D2025F365E0B6EBA41C8B2351D8116C2A5
Certificate serial:       2D
Authority key identifier: FB:8C:78:D2:02:5F:36:5E:0B:6E:BA:41:C8:B2:35:1D:81:16:C2:A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/A59duEdksovHf63nucHFOiez8lY.roa
Signing time:             Tue 31 Mar 2026 08:35:55 +0000
ROA not before:           Tue 31 Mar 2026 08:35:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23783
IP address blocks:        193.116.32.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB8C78D2025F365E0B6EBA41C8B2351D8116C2A5
        Validity
            Not Before: Mar 31 08:35:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=039F5DB84764B28BC77FADE7B9C1C53A27B3F256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:6a:53:a5:08:f6:0d:70:d9:79:2b:67:9d:
                    06:a3:14:2a:41:a2:3a:0b:9b:47:e1:d9:8a:bc:34:
                    10:b0:8d:0c:dd:fb:c7:00:e4:d7:31:91:84:e8:53:
                    fc:5a:62:f8:63:e4:86:30:1b:b3:37:8e:9d:db:19:
                    c2:97:6c:32:ec:89:4c:d4:5a:ee:e2:86:1e:4a:b5:
                    80:5d:d4:93:bf:4b:92:74:c1:9b:ce:7a:e6:09:27:
                    d7:9c:aa:9f:06:53:2c:14:39:67:f7:47:ea:8a:09:
                    1e:8e:50:59:8d:29:e8:1e:89:7e:7e:02:c8:5f:46:
                    15:08:37:4c:75:5e:58:6a:b2:a8:10:be:e4:6b:85:
                    68:a3:89:33:20:c1:4e:ca:8f:44:f5:f3:83:84:a9:
                    21:9b:78:01:bb:8f:25:5e:5e:ba:b8:ff:07:64:d8:
                    56:17:45:b5:65:9c:19:7f:ff:48:78:c0:57:55:d8:
                    f1:13:ee:cf:0a:e4:84:d7:2d:2c:8f:4b:72:4c:81:
                    01:2a:4a:3c:2f:33:ab:d0:df:96:00:d5:5f:e1:9e:
                    4d:97:22:f6:b0:66:4a:c1:28:3f:c2:77:4b:d0:ab:
                    04:9c:7d:b1:a0:c0:73:19:9a:37:07:c3:bd:75:32:
                    58:80:92:ba:50:29:2b:0c:49:11:35:82:ef:8f:7a:
                    8b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9F:5D:B8:47:64:B2:8B:C7:7F:AD:E7:B9:C1:C5:3A:27:B3:F2:56
            X509v3 Authority Key Identifier:
                keyid:FB:8C:78:D2:02:5F:36:5E:0B:6E:BA:41:C8:B2:35:1D:81:16:C2:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/A59duEdksovHf63nucHFOiez8lY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.116.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:4c:50:16:f7:53:a8:40:4c:af:fc:08:fd:49:4d:3d:f2:60:
         ac:7a:90:6d:66:34:c6:c2:bd:37:8d:8f:d5:03:73:c4:f0:7f:
         d9:fd:30:af:00:bb:84:8b:55:88:0e:fb:11:87:aa:41:99:36:
         a6:c3:0c:d0:1c:d3:a2:4c:0f:5e:f0:28:67:96:44:33:51:2a:
         62:13:70:32:c9:3c:5c:dd:53:c5:cb:1c:c2:a3:83:64:46:db:
         82:06:1f:95:57:a4:94:74:a2:94:ac:54:ef:b6:f2:ac:12:48:
         f9:b7:fe:e4:16:ab:80:91:25:b7:2e:9a:94:a8:7c:84:cb:e0:
         71:a0:13:4e:ee:f8:40:7e:8f:7e:5d:a6:9d:30:e7:c8:fc:f2:
         92:53:c8:00:fc:fc:12:5e:9e:a0:28:7d:62:b2:b6:2b:c4:32:
         18:22:0f:32:51:ea:97:81:6f:f0:96:8b:1e:df:91:50:e4:1a:
         4b:54:b7:f6:43:5e:cc:3d:37:da:7c:37:14:f1:64:54:48:6a:
         40:5d:c5:a4:a7:db:fe:2a:b9:ac:0f:da:03:00:d3:45:4e:7d:
         7f:08:65:44:1e:71:16:68:57:5a:c7:8c:c1:0f:60:31:34:56:
         9b:ab:93:f2:7e:25:03:be:27:6a:15:48:08:be:31:56:e5:2a:
         a8:14:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:25 2026 by rpki-client