Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/_kTmxjdmliDD-pSeddt0Aq85LXk.roa
File:                     _kTmxjdmliDD-pSeddt0Aq85LXk.roa (raw, json)
Hash identifier:          E1T9a+z92EySTxlwGMaimDfUP47ea2Vd/v8/yi8v6j0=
Subject key identifier:   FE:44:E6:C6:37:66:96:20:C3:FA:94:9E:75:DB:74:02:AF:39:2D:79
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       6E
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/_kTmxjdmliDD-pSeddt0Aq85LXk.roa
Signing time:             Tue 31 Mar 2026 07:49:30 +0000
ROA not before:           Tue 31 Mar 2026 07:49:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        114.129.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Mar 31 07:49:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FE44E6C637669620C3FA949E75DB7402AF392D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4c:f1:f8:77:fa:32:15:24:48:10:aa:78:78:
                    5d:08:28:e1:0a:f4:53:00:c3:a2:c1:0f:5e:d0:34:
                    67:98:bd:0a:75:f5:35:1a:64:e1:73:91:92:5c:2f:
                    18:b2:85:ce:df:0c:33:c5:ef:89:56:af:a4:77:9f:
                    a2:57:0a:d9:5b:c2:6b:68:f9:20:f0:20:1c:5c:6b:
                    5a:92:c6:98:46:bd:23:4a:9a:14:85:8f:56:84:0e:
                    a0:59:40:9a:e8:59:7e:16:28:2b:e1:c9:9d:af:24:
                    78:0a:65:e4:90:24:3e:f2:77:57:cc:a7:37:85:a4:
                    67:23:ce:f0:3e:e2:9e:ba:7a:c1:1a:d4:ed:b6:0e:
                    7e:de:ea:5c:bc:1c:67:4c:31:0e:d9:cd:1e:b0:fb:
                    cc:e5:97:14:4b:ff:24:1d:24:fa:22:d2:2e:d8:93:
                    2d:46:c4:a9:9e:58:06:eb:90:7d:82:0d:81:30:eb:
                    00:9c:91:e6:a8:2e:b6:35:71:49:52:52:4d:eb:e8:
                    36:69:0d:80:72:da:59:db:bf:30:eb:99:8e:a5:56:
                    36:da:92:01:ca:56:62:e4:e6:e1:92:6f:ab:1e:c0:
                    7b:1f:4f:7a:e0:90:41:d1:1c:a4:76:97:73:f5:cb:
                    3d:0f:8f:a3:98:72:5b:ad:ec:79:ab:82:21:e3:1a:
                    03:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:44:E6:C6:37:66:96:20:C3:FA:94:9E:75:DB:74:02:AF:39:2D:79
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/_kTmxjdmliDD-pSeddt0Aq85LXk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.129.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:b1:54:c3:d7:7d:b0:ca:f0:46:3a:b2:d7:3f:78:1e:cc:8c:
         c2:d0:bc:70:41:52:3d:c8:83:4e:b0:85:d7:dd:79:c9:b4:69:
         30:9d:56:85:4c:af:6f:17:a5:80:4d:ee:b3:cd:c6:40:bb:ce:
         5a:ba:4e:13:02:15:a7:6d:42:83:ab:dc:a1:ec:15:4d:d3:71:
         c2:9d:c8:e4:db:05:e9:01:9d:f7:cd:8a:f4:57:be:5a:b8:02:
         7c:d6:63:0c:98:a8:91:6d:03:1c:ec:09:4b:a6:11:e5:07:33:
         47:46:ab:da:8a:7f:4c:3a:2e:b8:31:9b:56:2c:fb:89:f1:fc:
         8a:dc:15:52:55:d1:3b:6f:dd:9f:d8:38:f0:ac:03:30:19:f7:
         a7:ca:5e:dd:0a:78:2f:93:f7:4d:48:23:37:4c:80:7b:7b:b2:
         aa:8a:c1:49:98:bd:98:ad:58:97:fc:86:3f:c5:d5:16:dc:8d:
         df:2b:fb:6b:34:7f:cd:bd:46:bc:db:17:21:e5:db:bb:09:b4:
         89:2a:8a:8a:d1:57:16:9a:97:b0:a2:cc:16:b1:cc:6b:d7:71:
         f1:7a:0c:61:49:9a:9f:5a:ae:e9:c9:7b:86:8c:31:ce:ae:ec:
         f2:ab:40:c9:be:29:76:bf:3d:96:de:21:f8:1d:25:2c:7c:14:
         f1:16:49:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:33 2026 by rpki-client