Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/423/KUEU2nIXem5G2Wjw-T7u1Y9AF9o.roa
File:                     KUEU2nIXem5G2Wjw-T7u1Y9AF9o.roa (raw, json)
Hash identifier:          lzb6q+C6j0LUaafr6xApiljGjIKOU9lAtqVW60UCVgk=
Subject key identifier:   29:41:14:DA:72:17:7A:6E:46:D9:68:F0:F9:3E:EE:D5:8F:40:17:DA
Certificate issuer:       /CN=E4230C86AAFAEDA049EF7D676F631139BD461148
Certificate serial:       0D
Authority key identifier: E4:23:0C:86:AA:FA:ED:A0:49:EF:7D:67:6F:63:11:39:BD:46:11:48
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5CMMhqr67aBJ731nb2MROb1GEUg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/KUEU2nIXem5G2Wjw-T7u1Y9AF9o.roa
Signing time:             Tue 31 Mar 2026 08:46:42 +0000
ROA not before:           Tue 31 Mar 2026 08:46:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9999
IP address blocks:        165.100.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/5CMMhqr67aBJ731nb2MROb1GEUg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/5CMMhqr67aBJ731nb2MROb1GEUg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5CMMhqr67aBJ731nb2MROb1GEUg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4230C86AAFAEDA049EF7D676F631139BD461148
        Validity
            Not Before: Mar 31 08:46:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=294114DA72177A6E46D968F0F93EEED58F4017DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f6:ef:fa:3b:a9:23:83:2b:37:12:85:8f:56:
                    92:09:64:e1:98:96:f3:66:67:90:db:e6:64:a1:7c:
                    21:30:24:ca:62:e8:a5:22:06:29:f7:d8:29:13:3b:
                    b6:39:7c:36:a2:9e:07:70:53:10:dd:59:2f:7d:96:
                    6f:50:bc:05:53:a3:38:2f:30:c9:10:c2:41:20:4f:
                    a5:0c:dd:06:93:26:16:e8:b6:b3:02:e0:fb:74:aa:
                    4b:c6:45:71:41:c6:dd:d6:40:1b:a2:23:73:d1:e3:
                    59:3a:12:14:d7:b8:37:20:64:b9:4d:3f:ae:c4:01:
                    69:59:f3:16:62:b4:93:d8:84:aa:38:97:17:76:05:
                    5f:6d:d5:f5:47:81:93:79:1c:c4:77:a6:85:ed:5d:
                    41:05:47:be:a8:02:cb:8c:90:dc:be:c5:e5:03:65:
                    ea:f5:6a:d4:04:31:33:14:8c:46:37:12:09:c0:45:
                    35:c6:c7:2f:df:dd:69:41:87:07:0c:b3:72:dc:3c:
                    74:6d:f3:ed:0a:81:e8:74:a0:2b:72:e0:4a:34:3f:
                    6b:97:d9:b7:4a:94:59:e7:8b:98:3e:05:ae:05:4e:
                    95:a5:34:70:61:8d:c2:9d:3f:04:3e:d4:cc:1b:4b:
                    9d:e1:a4:81:ae:67:a8:4c:1a:85:9f:9c:94:80:01:
                    d1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:41:14:DA:72:17:7A:6E:46:D9:68:F0:F9:3E:EE:D5:8F:40:17:DA
            X509v3 Authority Key Identifier:
                keyid:E4:23:0C:86:AA:FA:ED:A0:49:EF:7D:67:6F:63:11:39:BD:46:11:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/5CMMhqr67aBJ731nb2MROb1GEUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5CMMhqr67aBJ731nb2MROb1GEUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/KUEU2nIXem5G2Wjw-T7u1Y9AF9o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.100.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:1c:0c:96:2e:8e:bd:6d:9c:6a:a1:b3:af:82:03:81:df:
         16:67:89:ac:a5:1e:fa:7e:ea:72:c1:da:bb:15:cd:d3:37:17:
         35:40:d2:57:45:ca:bd:ba:b8:03:a2:a4:be:40:87:c7:35:50:
         14:75:2c:7d:29:f9:01:57:44:dd:c0:49:e0:65:4a:61:58:e7:
         14:7a:e4:25:d8:c9:96:5c:7a:42:5a:0a:94:a7:98:37:8d:1c:
         95:a5:d2:33:48:70:49:9c:16:1f:55:05:2f:2e:4e:07:4f:03:
         92:7f:58:5c:72:bc:42:61:91:c5:4e:6f:fe:88:8f:a0:86:7d:
         00:ab:18:be:01:0a:9a:d0:3a:c7:1a:3a:40:0f:b4:76:37:79:
         35:8e:cd:a3:ab:d7:84:be:55:a5:d1:0c:23:6d:af:50:6a:8c:
         8d:64:67:24:ef:3e:b2:b0:db:62:fe:62:59:7c:e1:7c:f3:a4:
         78:89:77:84:db:a2:f7:50:cd:e4:81:60:72:dd:30:b4:35:7f:
         86:46:c2:38:b7:c7:42:6f:e5:f0:2d:60:b0:26:22:fc:f7:03:
         27:39:a4:c2:40:b1:6d:81:a5:42:5e:2c:3e:b0:40:11:9b:4e:
         27:d6:75:a6:de:33:07:9a:dd:f1:76:2f:bd:13:8c:b5:5e:4b:
         9a:e4:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:47 2026 by rpki-client