Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/CDAflxfbuBw9HQodiXR9PLD8keI.roa
File:                     CDAflxfbuBw9HQodiXR9PLD8keI.roa (raw, json)
Hash identifier:          +e18DtJAfGXGNHmZauhHSgEuhpZuR1aUu50KZhbmipE=
Subject key identifier:   08:30:1F:97:17:DB:B8:1C:3D:1D:0A:1D:89:74:7D:3C:B0:FC:91:E2
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01EC
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CDAflxfbuBw9HQodiXR9PLD8keI.roa
Signing time:             Tue 31 Mar 2026 07:39:57 +0000
ROA not before:           Tue 31 Mar 2026 07:39:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        218.41.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=08301F9717DBB81C3D1D0A1D89747D3CB0FC91E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:72:02:5f:ec:90:0a:e9:f6:6e:35:cf:5e:
                    67:c3:c9:5c:f6:69:55:b1:9f:6d:8c:68:3f:ed:04:
                    0c:d4:80:ff:a3:c4:9e:3d:9a:00:ef:b0:b2:03:f5:
                    c4:88:56:b0:c8:c4:50:56:bf:55:8b:23:b5:6b:32:
                    2e:a6:6b:e6:35:13:c0:f8:14:53:00:dc:05:54:7e:
                    9c:fc:41:94:08:db:eb:82:bf:a0:47:22:b3:95:1b:
                    1e:44:14:b7:bb:02:d2:bb:1b:ba:af:d6:28:55:a3:
                    f3:25:40:80:4b:0c:d6:fd:47:4f:09:53:e5:f1:91:
                    02:55:1e:32:19:8e:2c:14:75:dc:b4:24:07:72:dc:
                    ab:91:7b:17:a1:50:97:47:7e:1f:1b:47:ee:8c:11:
                    9a:85:78:34:c9:d7:15:b0:64:0d:ca:58:65:a9:05:
                    0a:ff:a1:39:e4:67:cc:e2:96:a0:63:55:fc:4a:c2:
                    25:1c:ea:00:42:2c:b1:16:44:c7:b3:02:3b:9d:51:
                    28:98:4b:4e:31:76:6e:a8:c7:4e:2e:92:26:3e:fa:
                    e1:6d:6e:8c:0c:b7:ce:54:85:a6:0e:70:bd:0b:13:
                    91:77:8a:80:0b:e2:48:e9:0f:0a:b7:54:37:5a:1d:
                    4b:cd:aa:7f:d9:0a:b0:97:3f:d2:08:21:29:75:0c:
                    85:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:30:1F:97:17:DB:B8:1C:3D:1D:0A:1D:89:74:7D:3C:B0:FC:91:E2
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CDAflxfbuBw9HQodiXR9PLD8keI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.41.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:74:0b:1b:45:8f:bd:06:1f:dd:a7:79:87:a1:6b:c4:dc:5a:
         de:1b:33:b3:97:16:81:30:5f:9f:dc:33:18:a4:35:97:72:78:
         52:2e:76:cd:02:2c:80:fc:05:d2:fe:8c:fe:79:18:5e:65:01:
         8f:06:5b:4a:1e:1e:15:a1:ea:a9:d3:c7:80:be:f1:ea:0c:39:
         a5:bb:4b:e6:3b:5c:75:e4:b1:34:5a:d0:db:30:0a:9e:12:98:
         90:7a:92:53:ce:7a:2d:ad:11:58:c0:d7:d3:d4:f3:8f:6c:4d:
         bf:a1:4c:98:21:33:c7:4d:0c:92:75:63:86:65:c4:a9:0b:4e:
         33:f2:1c:99:23:a8:41:6d:ed:00:dd:ac:15:12:52:2d:09:db:
         3b:d7:c7:11:93:2e:80:1d:71:8b:20:3a:dc:69:63:e8:33:66:
         cc:47:1b:b0:ae:f9:0c:3c:98:dc:eb:af:9b:76:7c:67:07:d3:
         57:b7:c6:47:45:5f:85:b0:f9:5f:6d:ad:ba:77:aa:bf:a2:d7:
         67:e9:7c:3a:4d:74:4e:08:0f:e3:1a:42:75:49:c5:8d:9c:a8:
         12:bc:06:c5:37:47:1e:08:f8:f1:e1:1e:cc:40:4b:1d:48:1d:
         31:f7:75:3d:ff:97:ff:0c:fc:83:0b:81:34:a8:2b:01:ff:28:
         a7:99:7b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:01:46 2026 by rpki-client