Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Slb0YTnMjgFzR1Yf7ZQ8r5ys9Bg.roa
File:                     Slb0YTnMjgFzR1Yf7ZQ8r5ys9Bg.roa (raw, json)
Hash identifier:          AChIjpIvD5yoLt2t/inHYBT+uDfY4K9WrhwEkcqjQSM=
Subject key identifier:   4A:56:F4:61:39:CC:8E:01:73:47:56:1F:ED:94:3C:AF:9C:AC:F4:18
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01DE
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Slb0YTnMjgFzR1Yf7ZQ8r5ys9Bg.roa
Signing time:             Tue 31 Mar 2026 07:39:51 +0000
ROA not before:           Tue 31 Mar 2026 07:39:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        58.87.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4A56F46139CC8E017347561FED943CAF9CACF418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8b:a2:87:89:fd:3f:f8:13:68:0c:89:08:d5:
                    46:1e:8c:85:41:4b:6f:38:d1:2e:35:1d:29:c2:af:
                    bb:13:b6:af:8b:2d:0e:b2:44:84:47:7f:a7:0b:db:
                    2f:e2:37:57:b7:ca:2a:1d:b3:24:91:e4:5a:1c:e0:
                    b6:8a:a3:3b:28:bc:a7:5c:c5:6c:ee:c2:ae:7a:2d:
                    9f:2d:38:31:cc:a4:0a:a5:a1:b6:59:2d:03:8d:0b:
                    a9:37:c1:08:15:b0:14:5a:71:18:09:d7:17:13:be:
                    90:aa:92:e1:fc:d2:f7:56:bd:a2:2d:b0:5d:a5:82:
                    ad:50:ce:9f:cc:e3:ec:a3:70:09:e6:c8:92:6a:c0:
                    09:5c:d2:e6:e2:c8:b7:c9:d8:88:d2:64:8c:c4:15:
                    7b:c8:f6:f5:42:e0:e5:a0:da:bb:0f:e7:c3:5f:02:
                    56:26:06:46:08:07:ad:ec:21:b8:a6:7f:66:d4:04:
                    7c:84:25:8a:9b:90:d4:5e:dd:fd:8e:8e:22:17:50:
                    03:be:9a:2e:19:c3:63:67:37:9f:a2:b0:99:cc:2b:
                    d5:aa:46:2b:16:77:60:f5:5b:4a:8a:03:1b:07:04:
                    e5:3b:e7:04:cb:16:66:86:4b:d9:5e:72:03:d7:63:
                    9f:0c:62:62:fc:4e:12:11:0a:17:2d:b8:0d:04:83:
                    6f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:56:F4:61:39:CC:8E:01:73:47:56:1F:ED:94:3C:AF:9C:AC:F4:18
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Slb0YTnMjgFzR1Yf7ZQ8r5ys9Bg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.87.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bc:74:4e:95:de:98:30:24:9b:ed:8f:20:19:65:98:28:7a:fa:
         07:51:c8:a3:84:3a:16:12:d5:2d:ca:c6:82:03:35:1a:82:b4:
         ad:d1:95:a0:8e:41:77:c6:1c:c3:20:b9:6d:d4:42:f6:26:a9:
         62:0b:1f:26:29:dd:52:52:82:15:00:2b:88:8f:05:57:6d:45:
         ea:ce:6d:73:87:a1:27:e2:29:b1:e6:04:5b:ba:7f:79:10:43:
         ca:7f:bc:7d:b9:17:66:3d:0c:16:bd:00:47:bb:e0:65:54:43:
         42:4e:42:e7:2f:6a:d2:fc:00:5a:8b:1e:94:a4:6b:bd:04:fb:
         85:2d:e4:ba:0b:c6:16:81:ee:58:11:e9:ea:86:b3:3d:89:df:
         0c:cc:58:34:d5:e9:82:b4:97:17:0e:c5:d3:39:06:99:50:55:
         41:75:9f:a8:b4:55:07:4d:6a:95:22:36:31:06:24:3c:d3:d6:
         67:8c:a4:61:21:c3:3b:f0:44:ab:27:e7:85:8d:8b:23:ee:f7:
         94:1f:fc:e8:24:e1:13:e3:ca:62:fa:df:85:8d:2b:05:68:44:
         7b:04:52:48:f9:f0:c3:16:73:79:91:a7:d1:db:fd:28:9f:ee:
         78:aa:ee:b9:f5:2a:e3:02:ee:74:37:fd:ec:fd:36:ea:14:7b:
         4e:47:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:25 2026 by rpki-client