Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/B_puED1ZWPDCybYE5MnpHRwb9C8.roa
File:                     B_puED1ZWPDCybYE5MnpHRwb9C8.roa (raw, json)
Hash identifier:          TYTbMtOWWv6+N/sSVjpVCBzoluBc/jVTt4ouyLkNp4I=
Subject key identifier:   07:FA:6E:10:3D:59:58:F0:C2:C9:B6:04:E4:C9:E9:1D:1C:1B:F4:2F
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01E0
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/B_puED1ZWPDCybYE5MnpHRwb9C8.roa
Signing time:             Tue 31 Mar 2026 07:39:52 +0000
ROA not before:           Tue 31 Mar 2026 07:39:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        210.139.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=07FA6E103D5958F0C2C9B604E4C9E91D1C1BF42F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:80:76:24:9a:53:b2:62:ce:d5:c5:74:54:
                    f9:34:79:fa:0a:00:df:a6:cb:93:54:2b:2d:f2:4a:
                    82:81:ce:3d:13:bd:63:78:4a:a3:ec:c3:8b:66:f3:
                    d0:80:31:72:82:7f:8f:e7:62:0e:e7:b8:47:23:75:
                    5e:1e:81:51:d5:36:13:72:a6:12:ee:a0:c7:d9:b7:
                    06:17:a9:18:cd:02:d4:66:3f:f5:04:46:f3:87:72:
                    33:e3:84:78:b2:a8:44:0e:c1:32:90:c5:38:68:d4:
                    a0:02:ac:b2:77:bb:dd:d3:a8:c7:b3:52:5e:e4:01:
                    86:7b:1c:bd:e7:a3:f2:c4:dd:3a:55:cf:b8:d5:f2:
                    01:ef:35:59:57:85:bc:dc:94:e7:d9:aa:fb:92:ff:
                    2c:9c:a4:4b:3d:99:7d:70:2a:de:2d:f8:a7:7c:9a:
                    c1:87:ca:bc:de:49:7d:e2:3f:56:a4:c2:18:f8:57:
                    eb:e4:79:b0:fa:40:5a:0e:70:7c:71:14:a2:bf:e5:
                    9c:7d:99:f9:05:0e:ec:a1:09:0a:bf:7d:7b:36:49:
                    3d:75:5f:a9:f8:97:ce:d4:40:00:e8:f1:b1:da:94:
                    7c:92:19:32:83:c3:e1:f0:4a:a8:e0:10:15:57:ca:
                    a7:37:59:34:02:56:fb:4a:8f:18:c9:4c:06:7a:39:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FA:6E:10:3D:59:58:F0:C2:C9:B6:04:E4:C9:E9:1D:1C:1B:F4:2F
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/B_puED1ZWPDCybYE5MnpHRwb9C8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.139.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         58:69:92:3d:7f:70:2c:f4:d8:16:bb:a0:ae:68:58:54:a8:94:
         c4:df:83:6f:22:94:a5:ff:d5:12:2c:1e:94:5c:52:e2:6f:35:
         8c:35:6e:36:c8:46:9b:3a:6c:b9:bb:9a:3e:65:d4:5f:c0:3d:
         f6:5a:5b:d0:2d:b4:90:8a:4c:9a:dd:4b:1c:97:f7:e0:2b:e8:
         4e:fc:dd:c2:ba:a4:ce:36:40:c4:a0:6b:32:8c:3c:1c:b8:ae:
         77:b7:75:ba:d7:5e:bf:03:18:4f:22:32:07:2e:7b:17:aa:7e:
         13:8a:2c:23:19:06:96:b6:9b:c3:ab:34:d6:46:ab:73:93:1e:
         3a:8a:27:09:37:ac:cd:ca:b7:6b:80:50:82:28:de:72:1c:f4:
         9e:00:b4:5b:c2:ce:db:1c:65:51:4f:4c:e2:ff:1c:e3:ac:76:
         43:87:68:dc:05:58:29:45:47:0d:e3:ad:58:e9:6f:41:80:b9:
         c0:ac:d6:f5:25:0f:07:4a:58:3d:cd:40:07:86:be:42:9a:96:
         02:0a:22:54:81:f3:84:bf:98:0a:9e:b3:38:cf:ab:63:4c:fd:
         b0:4d:61:d3:da:33:89:5c:69:62:a1:f3:0f:fd:c5:df:d8:3b:
         cc:a3:d4:d2:22:20:d7:2f:bd:e0:66:1f:88:71:7f:16:af:7f:
         46:76:32:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:45 2026 by rpki-client