Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/38016/dqNYKSPvOpkFuPvPwhseJhIPwa4.roa
File:                     dqNYKSPvOpkFuPvPwhseJhIPwa4.roa (raw, json)
Hash identifier:          3rVBlJasetyrB7cE8yPKuHkU2hO9TmBeG8b8sNDeio4=
Subject key identifier:   76:A3:58:29:23:EF:3A:99:05:B8:FB:CF:C2:1B:1E:26:12:0F:C1:AE
Certificate issuer:       /CN=F0D9EB386DAB50D136AB964BCF57F4759CB7ED4D
Certificate serial:       02
Authority key identifier: F0:D9:EB:38:6D:AB:50:D1:36:AB:96:4B:CF:57:F4:75:9C:B7:ED:4D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8NnrOG2rUNE2q5ZLz1f0dZy37U0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38016/dqNYKSPvOpkFuPvPwhseJhIPwa4.roa
Signing time:             Sun 23 Aug 2026 22:24:05 +0000
ROA not before:           Sun 23 Aug 2026 22:24:05 +0000
ROA not after:            Mon 23 Aug 2027 22:12:59 +0000
asID:                     9355
IP address blocks:        133.140.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38016/8NnrOG2rUNE2q5ZLz1f0dZy37U0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38016/8NnrOG2rUNE2q5ZLz1f0dZy37U0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8NnrOG2rUNE2q5ZLz1f0dZy37U0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 17:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D9EB386DAB50D136AB964BCF57F4759CB7ED4D
        Validity
            Not Before: Aug 23 22:24:05 2026 GMT
            Not After : Aug 23 22:12:59 2027 GMT
        Subject: CN=76A3582923EF3A9905B8FBCFC21B1E26120FC1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:c5:3e:bb:07:55:2e:42:8e:01:03:79:7f:
                    09:b6:ce:ac:b8:df:a1:94:20:f0:87:4c:73:04:ca:
                    ce:00:8f:2f:08:ed:9a:62:a1:8b:f5:0d:6b:1e:e6:
                    7b:da:6b:8a:b5:7e:43:88:e8:42:ab:75:49:7f:fe:
                    58:ed:94:e0:8b:98:57:62:8a:34:3c:07:c4:79:af:
                    34:91:08:87:5b:9b:74:02:8d:aa:d5:dc:fd:f9:ec:
                    c1:bf:1b:71:c4:e6:e5:cd:a1:95:a1:b9:92:b6:6c:
                    61:89:31:a2:10:46:9b:c1:44:a4:e2:cc:4a:07:e6:
                    cf:57:89:9b:9a:ea:2b:e6:96:90:90:fb:e4:fd:ce:
                    ed:08:f2:eb:ac:ec:8e:70:cc:80:6f:e0:86:4d:a9:
                    0a:1b:16:3e:aa:fb:06:2e:dd:f9:5d:29:d1:be:67:
                    eb:c5:be:a1:94:70:32:75:da:e1:4f:1a:1e:19:ca:
                    f2:2d:b2:6d:47:28:4b:a3:4d:b4:66:5c:ce:f4:13:
                    0a:48:14:c2:69:88:78:30:af:26:1a:e6:56:90:2e:
                    cc:e1:74:97:91:5c:90:57:48:e0:79:13:46:f8:6b:
                    fe:c6:ef:5b:c9:02:95:81:ce:b5:18:c8:d2:c0:0f:
                    24:52:61:69:4b:03:a0:63:e8:1a:2a:71:c0:6e:cd:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A3:58:29:23:EF:3A:99:05:B8:FB:CF:C2:1B:1E:26:12:0F:C1:AE
            X509v3 Authority Key Identifier:
                keyid:F0:D9:EB:38:6D:AB:50:D1:36:AB:96:4B:CF:57:F4:75:9C:B7:ED:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38016/8NnrOG2rUNE2q5ZLz1f0dZy37U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8NnrOG2rUNE2q5ZLz1f0dZy37U0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38016/dqNYKSPvOpkFuPvPwhseJhIPwa4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.140.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:0c:2a:84:6e:42:ed:44:e7:8d:b4:4c:4e:81:5f:1f:00:65:
         c1:5e:76:79:82:68:a2:c8:84:68:8d:39:cc:25:2d:d6:4a:52:
         44:d4:30:6f:a5:d9:aa:fb:74:9a:ac:fc:51:30:87:23:8b:70:
         0f:7a:df:e9:1c:53:2c:f6:b6:34:1c:2c:90:92:31:bf:5c:a6:
         fd:ee:ff:ce:63:5c:b4:ef:3c:36:30:0a:ab:ba:95:20:49:fd:
         dc:17:11:19:4e:51:f3:d2:d4:cc:6f:1d:f4:e2:93:7e:71:c0:
         c5:70:f1:fe:f6:6f:9a:60:4e:7c:b2:ab:bd:1d:12:7d:b4:00:
         94:11:12:d6:78:17:ff:d2:90:55:a0:55:92:58:7b:32:50:72:
         9e:10:9c:a7:5c:32:de:3a:a5:4b:43:6f:be:7f:69:b5:99:2a:
         8c:62:7d:b3:c1:8d:74:c6:53:44:80:f4:6c:a1:c4:a2:b1:ac:
         1d:9e:1c:81:66:b3:cc:90:c6:55:b3:73:69:47:62:fa:8b:b5:
         79:31:fb:16:7e:cf:cb:75:48:9f:83:b4:08:f7:ac:f2:3e:74:
         0b:ad:12:5b:13:d2:9b:49:36:ef:7c:26:76:3f:44:34:89:f2:
         39:91:f7:75:00:a1:5f:9f:66:b6:49:bb:41:8f:c4:9d:6f:ef:
         6d:58:02:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:31 2026 by rpki-client