Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jvmQ2_wxkxtFDWNrPK8TH347PXI.roa
File:                     jvmQ2_wxkxtFDWNrPK8TH347PXI.roa (raw, json)
Hash identifier:          A/qtgr66RMpUBFDLopCoXandePmmMDGZ7DiiC9OqwrU=
Subject key identifier:   8E:F9:90:DB:FC:31:93:1B:45:0D:63:6B:3C:AF:13:1F:7E:3B:3D:72
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       8D
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jvmQ2_wxkxtFDWNrPK8TH347PXI.roa
Signing time:             Sun 01 Mar 2026 02:16:49 +0000
ROA not before:           Sun 01 Mar 2026 02:16:49 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        158.199.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Mar  1 02:16:49 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=8EF990DBFC31931B450D636B3CAF131F7E3B3D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:52:c7:72:8e:b8:08:8e:a8:a7:7b:b5:ed:
                    a4:b7:9e:a7:a2:b3:d3:31:07:ab:31:ab:c8:67:0d:
                    04:25:6e:1b:4c:37:f1:86:2b:61:69:e9:a4:c5:bb:
                    b5:84:0f:62:29:a3:b7:28:03:b9:60:67:81:54:f1:
                    bb:bb:af:45:2f:f9:1e:63:1c:01:eb:81:c7:7a:3d:
                    56:e6:16:52:c8:5c:04:38:64:7b:de:32:f1:4a:55:
                    b7:86:87:e3:99:3a:fb:d5:39:f0:9d:6f:42:bd:fa:
                    a5:ba:07:2a:30:f2:33:39:d6:30:fb:27:1b:ca:da:
                    0d:8e:82:56:0f:4f:2f:81:39:3e:0d:38:7c:82:a4:
                    fc:9d:20:b6:3e:29:af:09:ab:a2:b3:6e:29:39:a5:
                    86:a6:98:31:53:e5:51:c9:b9:40:ab:e9:36:12:3c:
                    88:f6:62:ba:4b:22:9c:84:3e:58:a6:cd:f5:f5:64:
                    84:04:a1:43:b7:f2:1e:fb:1d:f7:45:e1:ab:55:28:
                    c4:d1:60:8d:5e:04:aa:54:1f:97:67:c2:3d:d7:c8:
                    8a:61:eb:65:55:f5:d9:fb:04:6a:81:1d:d5:53:05:
                    79:54:10:3b:52:9e:35:51:a5:7c:01:38:c1:9d:69:
                    ed:d7:e1:4a:56:19:02:a5:59:f2:a3:60:dc:19:aa:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F9:90:DB:FC:31:93:1B:45:0D:63:6B:3C:AF:13:1F:7E:3B:3D:72
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jvmQ2_wxkxtFDWNrPK8TH347PXI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.199.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:54:6d:78:1d:e6:a5:d4:50:c3:38:31:62:64:c4:70:65:cc:
         16:6b:d9:fb:ce:af:77:80:05:6f:39:8a:f8:61:aa:01:e3:98:
         22:6d:54:54:61:3e:a6:08:df:7d:cd:2e:25:4f:79:02:44:47:
         e6:48:50:1d:33:a8:1f:b2:3b:6d:31:4c:fd:7d:1f:f1:a6:9a:
         54:68:5a:42:ea:00:2e:3c:a9:d0:92:80:f7:48:ab:6d:26:e5:
         6d:a0:6a:a5:52:37:4d:9f:d0:64:dc:85:25:f5:9e:69:10:45:
         15:22:eb:80:93:a4:13:88:ce:d3:b4:f2:2f:b1:f3:d1:b8:bb:
         69:16:11:de:0f:95:fc:3d:49:32:d7:8e:fd:4e:2b:cd:ac:96:
         d0:2d:4d:72:26:55:90:5e:e0:81:05:7f:1c:22:1e:5d:a2:d0:
         1e:6c:03:e3:26:68:5b:08:84:55:2b:fc:f8:e3:ed:a2:a0:b5:
         eb:a1:39:b7:a1:63:00:83:47:9b:d6:e0:cd:d1:0e:1c:95:43:
         7f:33:59:b0:6d:f8:6d:6d:85:7a:0f:8a:e0:c2:a3:07:43:c8:
         e7:28:7b:6a:75:69:f5:c2:68:d0:65:d4:49:ac:96:98:ac:56:
         0e:46:7f:64:a9:10:8d:38:8d:83:db:0e:67:f4:0c:ce:c8:b8:
         63:01:9d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:55 2026 by rpki-client