Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/SvPSGqrirRzPmCmnL2ewD1CON8I.roa
File:                     SvPSGqrirRzPmCmnL2ewD1CON8I.roa (raw, json)
Hash identifier:          OS2IoSEqNTp/RF6nvqX8GJzPkNUXfAd9kfkVxINfOOQ=
Subject key identifier:   4A:F3:D2:1A:AA:E2:AD:1C:CF:98:29:A7:2F:67:B0:0F:50:8E:37:C2
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       2F
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/SvPSGqrirRzPmCmnL2ewD1CON8I.roa
Signing time:             Tue 31 Mar 2026 08:42:23 +0000
ROA not before:           Tue 31 Mar 2026 08:42:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        211.2.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Mar 31 08:42:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4AF3D21AAAE2AD1CCF9829A72F67B00F508E37C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:aa:e2:5c:1c:5d:79:12:e7:95:49:f2:68:
                    0e:82:94:00:39:a9:2f:32:56:3f:c2:6f:d3:27:c4:
                    48:fc:f3:a3:34:26:9b:77:7a:ad:e1:9d:43:3e:c1:
                    11:45:77:9d:23:ce:a0:04:79:38:44:42:7b:79:e6:
                    46:18:83:f7:4e:ae:2d:56:47:60:2e:6e:27:79:db:
                    4a:8a:59:c4:8c:e9:9d:03:1b:01:ac:bf:85:da:8c:
                    b2:52:47:b9:52:d0:8e:f0:c3:f2:5f:ff:82:a3:4a:
                    a3:3d:b4:08:aa:0f:db:3c:23:87:6a:ba:b9:11:c6:
                    03:c8:2d:8d:9f:b9:81:94:ad:e5:06:6a:a6:63:96:
                    b3:ab:6e:86:07:7e:38:6e:25:d5:98:2d:76:93:53:
                    f4:2f:00:e5:2a:30:c7:5e:72:b5:d8:38:d9:1d:9a:
                    d1:3e:cd:fd:ea:1f:8d:b8:fc:d9:70:62:e0:35:5a:
                    a6:e9:d7:ce:32:c8:ff:da:d5:b7:ca:6a:df:45:a3:
                    4a:8a:25:7d:47:b8:11:6e:b3:6b:cf:31:91:64:88:
                    99:ff:7c:3e:f6:c0:a1:04:a4:93:59:5d:1c:c1:9d:
                    0b:29:87:49:d5:37:72:5d:27:3c:bb:a9:59:88:3a:
                    22:6d:f7:e8:0b:26:27:21:6e:63:fa:8a:ab:39:9a:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F3:D2:1A:AA:E2:AD:1C:CF:98:29:A7:2F:67:B0:0F:50:8E:37:C2
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/SvPSGqrirRzPmCmnL2ewD1CON8I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.2.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9a:58:50:27:62:19:70:5e:c6:26:22:77:01:49:f8:95:f4:e0:
         75:96:dc:b3:81:09:ce:8f:27:68:62:41:3e:3a:1d:89:53:d6:
         48:81:fd:88:59:e7:ac:d6:ab:fc:c3:6c:b2:92:84:05:22:b1:
         ab:67:9f:b0:6a:ca:b8:dc:97:bf:1b:00:18:01:d2:64:73:f3:
         d4:f8:d7:02:bb:56:df:ff:0c:0d:67:2f:d2:cd:78:a6:b9:62:
         64:00:40:d0:6e:f6:a1:79:fa:e5:53:fe:a5:32:40:01:85:da:
         93:a5:37:a8:85:34:8f:d2:02:7e:10:08:a0:9a:38:cd:9a:cb:
         35:6f:e2:e1:b4:85:45:bb:3c:3a:46:33:81:c9:50:d9:6d:82:
         0c:00:67:eb:fc:f3:88:6a:f2:e8:1b:0d:9e:f4:3e:5e:9c:99:
         a7:af:62:32:d9:4f:06:d9:02:25:95:8a:24:9c:a6:e1:76:87:
         a4:8b:99:d2:d0:36:2a:f6:bf:7d:2b:db:42:e6:cb:ab:f1:00:
         94:f2:ba:76:3d:27:8a:ef:94:db:a9:3d:8f:58:a7:61:ec:3a:
         ad:d4:1f:03:4e:c4:75:21:79:86:0d:cb:88:5d:95:07:9f:34:
         7f:8b:3a:24:20:2c:f2:cd:ea:e4:51:8d:1c:72:9a:0b:e9:23:
         89:1f:40:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:27:18 2026 by rpki-client