Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/0j0daBP0db5ZVJQSr-r7nTn_IyM.roa
File:                     0j0daBP0db5ZVJQSr-r7nTn_IyM.roa (raw, json)
Hash identifier:          5XmtiPmb2bEP/6SJkI0woBYr319gAKqGcD28niNEI7g=
Subject key identifier:   D2:3D:1D:68:13:F4:75:BE:59:54:94:12:AF:EA:FB:9D:39:FF:23:23
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       C1
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/0j0daBP0db5ZVJQSr-r7nTn_IyM.roa
Signing time:             Tue 31 Mar 2026 07:39:39 +0000
ROA not before:           Tue 31 Mar 2026 07:39:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        164.70.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Mar 31 07:39:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D23D1D6813F475BE59549412AFEAFB9D39FF2323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:8f:fd:83:25:4a:6a:5a:cc:18:5d:d4:9e:
                    c9:82:d5:1b:64:97:d8:a0:fa:29:1f:99:57:0b:ce:
                    11:2a:a4:31:2e:c9:5d:91:c1:a0:8d:74:07:98:5f:
                    07:5c:3c:90:6c:14:57:ca:fa:af:28:4e:98:2c:11:
                    0d:f5:2f:13:a6:b3:b3:f3:be:ab:b7:91:a5:dc:4d:
                    8f:2e:5d:c4:e3:c8:e0:05:c6:d1:ef:e2:ae:6a:8c:
                    da:8c:2d:00:8b:bd:12:e6:6d:6b:12:ed:0d:d4:5b:
                    8e:3c:85:03:9d:88:a5:4a:48:88:00:68:9d:95:82:
                    03:98:5b:bb:c3:ef:51:50:26:f7:06:9e:da:e2:92:
                    ef:df:70:ea:78:bf:63:77:7e:12:34:2a:ea:31:a7:
                    bc:83:48:e3:46:e2:d8:05:02:2e:23:85:3a:2d:69:
                    74:22:b0:cf:8c:73:e4:2b:5a:08:3b:60:16:5d:f0:
                    04:68:dd:a2:45:e0:92:37:89:f9:47:d2:d8:61:7e:
                    90:22:5a:a0:49:d2:80:53:9e:ef:63:79:46:65:10:
                    34:77:c6:0b:1f:41:49:d6:bb:2d:0d:8a:d5:1f:99:
                    d7:90:d4:0e:0e:04:56:7d:45:fa:1d:b5:08:20:8b:
                    d3:e1:22:2e:d6:9b:0c:29:6e:d2:50:7d:8e:0b:8e:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3D:1D:68:13:F4:75:BE:59:54:94:12:AF:EA:FB:9D:39:FF:23:23
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/0j0daBP0db5ZVJQSr-r7nTn_IyM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.70.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         58:ba:b4:20:72:d3:08:8c:d9:5e:72:65:36:ca:1e:1b:5b:ed:
         ec:67:3b:3c:63:55:58:72:ee:b1:d9:3e:cc:ce:ae:10:f0:e7:
         5c:f1:81:8b:53:c8:db:b5:85:e9:12:50:54:79:6f:e9:c7:2b:
         20:91:c7:a4:c3:ff:36:c4:8c:46:f1:10:f7:e7:1f:26:4a:b7:
         48:c9:e2:c3:ab:10:0b:7f:4e:54:67:86:8a:c6:ea:48:20:29:
         b9:1b:32:33:a6:73:11:14:82:0c:5b:6d:36:86:e4:40:b3:9a:
         2d:f4:19:04:82:b6:e5:26:fb:ca:4b:28:61:d4:11:da:f6:ba:
         1b:61:2c:3e:a5:df:dc:7a:71:d7:74:24:74:cb:e6:07:a4:d9:
         78:dc:87:39:ad:07:fa:9d:a8:a3:ee:9b:72:20:8d:e0:08:4d:
         f4:75:31:52:b3:98:84:f7:f5:a3:b1:d8:fb:56:0d:6e:35:d6:
         c5:07:7d:8f:0e:4d:80:ba:ae:95:3c:7d:2a:e8:67:1f:bb:5c:
         de:4c:70:34:6d:f3:23:50:c5:84:8a:fe:f2:72:56:ab:5d:e3:
         e6:ca:19:5e:2e:fc:17:27:9e:41:87:a6:10:76:7b:02:09:e8:
         fc:31:3b:9e:55:98:3d:b1:67:2d:e0:3f:df:f8:c0:6c:b0:4f:
         03:53:52:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:01 2026 by rpki-client