Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/8QaxYL8WdVtSpuVkaVoRV0CGaWw.roa
File:                     8QaxYL8WdVtSpuVkaVoRV0CGaWw.roa (raw, json)
Hash identifier:          IMdUJf4ArvSiGP4md2d41a+/CnQ4YLFLRC2eQWQAf58=
Subject key identifier:   F1:06:B1:60:BF:16:75:5B:52:A6:E5:64:69:5A:11:57:40:86:69:6C
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01E1
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/8QaxYL8WdVtSpuVkaVoRV0CGaWw.roa
Signing time:             Tue 31 Mar 2026 07:39:52 +0000
ROA not before:           Tue 31 Mar 2026 07:39:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        120.74.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F106B160BF16755B52A6E564695A11574086696C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:53:50:0f:49:1b:8d:06:a1:76:e0:45:11:
                    df:07:27:21:99:b7:14:c1:76:f7:2e:59:19:f3:25:
                    17:9f:33:72:9f:cc:1b:cd:8a:8a:eb:4a:ac:d1:a3:
                    52:51:ce:a5:ea:42:8e:47:dc:c9:73:d6:d4:0a:73:
                    42:fe:e3:4c:ab:c0:50:05:2b:13:60:9d:a4:1c:4b:
                    e9:fe:e4:82:82:f7:a6:1b:94:bf:b6:be:f1:d9:7f:
                    e6:7c:ca:54:3d:7b:60:5f:32:39:5c:fa:e4:2f:e1:
                    ea:d7:6d:4e:ef:17:cd:5d:a6:ba:3d:b5:fc:06:29:
                    65:01:84:8e:e0:e2:3a:f7:fc:4e:dc:8b:d0:a3:10:
                    a2:02:be:9d:77:c5:75:d9:43:76:cb:17:2b:d9:72:
                    6a:0b:7e:b9:b3:45:a9:0a:7c:7f:9e:8b:cc:02:1d:
                    2a:30:18:cd:df:1a:d9:34:c1:e7:ef:0f:bc:22:bf:
                    aa:aa:55:34:d3:f4:f3:0e:40:e2:6f:6e:79:79:1a:
                    68:16:e8:20:d9:c5:75:9b:25:24:14:41:97:f4:eb:
                    32:ef:ff:57:f8:38:06:be:c0:01:8f:63:ef:a4:63:
                    81:6f:c0:34:dd:d2:15:8b:0c:47:98:e3:60:65:11:
                    a0:00:3b:bb:85:f5:69:67:36:01:4f:3f:90:f3:6c:
                    97:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:06:B1:60:BF:16:75:5B:52:A6:E5:64:69:5A:11:57:40:86:69:6C
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/8QaxYL8WdVtSpuVkaVoRV0CGaWw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.74.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2c:5e:58:15:64:53:08:a0:c7:96:6f:cb:e7:36:0c:75:2a:fc:
         40:c2:35:92:b1:39:47:32:2f:3e:6e:da:83:a2:39:98:85:f3:
         2b:3d:de:3d:af:7d:56:8f:16:25:fd:b5:20:3f:75:8e:01:2c:
         b3:a7:83:7c:84:7e:6e:61:3a:25:2d:b2:d8:d2:92:da:54:06:
         b7:dc:47:3c:4d:dc:f2:6e:78:55:11:64:08:b8:a3:8e:8c:cf:
         6f:f5:d7:bd:c7:89:e7:8c:9e:0a:8a:46:58:e0:6d:a3:51:c8:
         c0:70:1a:f8:43:95:5f:93:a0:e5:d1:21:3f:75:34:03:3b:dc:
         86:21:fe:ff:2a:80:5b:03:5f:16:0b:4a:83:7a:9d:02:91:8f:
         cb:21:85:08:62:f5:aa:98:7c:55:35:d3:60:1f:86:1d:29:09:
         b2:2b:96:ca:63:76:d9:00:c7:a9:ed:d5:a4:5e:e8:28:ad:4a:
         fd:c2:9b:1b:9b:b8:1b:d3:29:07:84:b4:e9:bc:42:83:0b:b4:
         2d:83:5c:d2:2e:77:1b:26:50:f7:bb:ae:ae:b4:58:11:1a:a3:
         8a:c5:dc:31:0f:81:e7:d7:d7:52:cd:a0:a0:6b:23:10:b9:3c:
         44:49:6d:65:7c:04:76:af:5b:b3:73:cd:24:d7:0c:a9:cb:48:
         3a:34:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:25 2026 by rpki-client