Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/L3cbU8WZ2KYLd6Y18CfBnQsWDaI.roa
File:                     L3cbU8WZ2KYLd6Y18CfBnQsWDaI.roa (raw, json)
Hash identifier:          Yl5AHs1jduHWK/hu88p68fa6PiUbB4Y7AZFktUQgcz4=
Subject key identifier:   2F:77:1B:53:C5:99:D8:A6:0B:77:A6:35:F0:27:C1:9D:0B:16:0D:A2
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0204
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/L3cbU8WZ2KYLd6Y18CfBnQsWDaI.roa
Signing time:             Tue 31 Mar 2026 07:40:13 +0000
ROA not before:           Tue 31 Mar 2026 07:40:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        116.91.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:40:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2F771B53C599D8A60B77A635F027C19D0B160DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:49:a8:f5:9d:bf:ac:95:0a:e1:19:f5:8f:
                    ab:3e:19:db:d3:b6:f6:8c:d8:c3:6c:6d:b8:96:6b:
                    63:9a:9c:6a:30:e1:84:85:ad:b2:6a:04:27:b4:ec:
                    01:e9:f0:77:9e:d8:61:3a:ce:df:bf:3d:2d:a5:6f:
                    c1:a0:1d:46:17:d5:3f:90:b6:b9:b0:03:2c:42:2f:
                    44:33:2d:5f:30:21:e8:62:b1:ab:52:ad:f7:32:46:
                    86:c2:14:a8:1b:a6:bd:8e:c4:dc:ba:85:9c:44:4a:
                    01:ad:42:f4:83:4a:67:c9:5c:a0:e8:32:e6:6b:d7:
                    58:1f:7e:c8:cd:cf:11:df:a5:cc:f8:1a:37:f1:de:
                    e0:89:1b:d5:ea:ec:1f:63:7f:55:6a:1b:32:39:b6:
                    5b:69:5f:b4:d6:b1:02:b2:af:ef:f4:eb:71:b9:a3:
                    b8:b0:65:dc:57:8d:ab:bb:28:8b:84:5c:72:b1:d8:
                    1e:dd:96:54:45:9c:77:ca:ce:75:44:b6:93:ec:a7:
                    89:9b:41:f3:f3:86:3b:9c:c6:14:ae:6e:ae:74:97:
                    a2:97:c3:09:03:7a:b3:2e:55:38:b1:76:ee:65:f4:
                    17:bb:23:27:66:5b:8a:4e:8b:b3:8a:03:2b:03:72:
                    cc:cf:e1:45:4c:77:4f:de:32:6d:65:8a:2f:4e:91:
                    41:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:77:1B:53:C5:99:D8:A6:0B:77:A6:35:F0:27:C1:9D:0B:16:0D:A2
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/L3cbU8WZ2KYLd6Y18CfBnQsWDaI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.91.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bd:81:a6:8e:83:7a:b2:4a:6a:21:01:5b:ad:09:00:d3:e0:47:
         7e:c1:f9:17:82:3f:90:64:09:d6:04:95:51:4c:92:29:2e:e7:
         8f:b0:90:b8:bb:0b:ed:49:6a:b4:77:3c:d7:a0:2b:53:a6:30:
         05:42:20:b6:6c:50:51:0a:01:f9:9b:09:71:23:91:a0:ed:07:
         c8:c9:13:bb:af:b8:44:e3:ae:60:c2:59:57:fe:a9:c0:6a:8a:
         e6:26:71:b0:c8:e7:09:93:0a:ff:48:33:bd:34:ca:cc:c8:d6:
         cb:e7:e4:aa:14:1f:7a:d2:08:c8:35:3f:2a:39:af:18:b0:56:
         2c:bc:df:31:89:bf:ce:44:c2:e4:cf:7a:4b:0a:6e:0d:0d:cc:
         3b:90:01:59:b4:04:df:b1:1d:fb:26:07:9d:23:1f:db:e9:f0:
         04:67:cd:0b:20:5e:19:19:47:cf:45:11:7f:1d:72:69:af:26:
         67:ca:85:d2:f9:5b:a1:3d:6e:3b:de:81:17:8d:5a:8d:3b:1f:
         52:8b:a5:72:14:9e:bb:78:76:52:77:36:4e:13:c1:f2:9a:bc:
         50:c1:e9:20:cd:71:ca:37:09:6c:a9:a6:a1:e2:a7:6c:a0:c4:
         33:d5:59:0c:c7:8c:cf:c9:e3:7d:ce:9a:fa:3b:2f:7a:c6:47:
         c0:5a:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:42 2026 by rpki-client