Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/_CmB4kZ2bCM1M05q8nbFpO-ZNlk.roa
File:                     _CmB4kZ2bCM1M05q8nbFpO-ZNlk.roa (raw, json)
Hash identifier:          97bZAfWbiSI/8ziMEGBRfz+akxwo33Znl6XnVEFUXl4=
Subject key identifier:   FC:29:81:E2:46:76:6C:23:35:33:4E:6A:F2:76:C5:A4:EF:99:36:59
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01F9
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/_CmB4kZ2bCM1M05q8nbFpO-ZNlk.roa
Signing time:             Tue 31 Mar 2026 07:40:04 +0000
ROA not before:           Tue 31 Mar 2026 07:40:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        116.82.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:40:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FC2981E246766C2335334E6AF276C5A4EF993659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:70:cc:c6:e3:e3:ab:04:8b:5d:ef:74:b1:
                    f8:d5:34:c1:f0:8e:01:2b:f2:e8:0a:f8:c9:9e:97:
                    6c:63:27:77:82:81:e1:f2:af:4c:39:02:f5:07:b3:
                    a3:89:41:f0:33:da:9f:d0:82:e4:75:36:ed:fb:18:
                    3c:0e:a0:22:2d:08:20:d0:ae:0a:fb:0c:f4:a3:40:
                    27:af:6b:f8:68:29:26:07:77:16:e3:73:af:83:ab:
                    94:6a:cd:78:94:c5:fb:d8:29:89:5d:ff:0f:1e:d9:
                    10:d3:21:4c:ee:c0:a0:44:bd:23:da:f1:a6:b7:44:
                    ff:ee:c9:ef:5f:a8:ad:14:07:fb:45:95:0a:20:07:
                    85:f8:a1:31:42:f4:86:d5:6b:e9:c0:e2:83:ba:b2:
                    54:e2:d8:8c:c2:34:3e:bb:87:8b:2d:bb:07:c1:d7:
                    2a:2d:b2:e2:aa:4e:a1:8c:f5:09:b6:a8:a4:35:8a:
                    92:42:ff:6b:f8:00:8b:07:b3:5d:01:38:cb:7b:28:
                    d4:ba:d2:12:f1:d8:59:96:a5:ab:17:e1:fe:8d:bb:
                    cd:8f:9b:9e:16:17:c9:25:6f:24:c5:e3:65:b7:53:
                    a4:e7:b7:cf:b0:0e:f2:36:be:54:01:fd:23:a5:f0:
                    c9:3d:84:6b:9e:97:d5:94:68:87:b8:a5:08:37:1d:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:29:81:E2:46:76:6C:23:35:33:4E:6A:F2:76:C5:A4:EF:99:36:59
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/_CmB4kZ2bCM1M05q8nbFpO-ZNlk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:b4:bd:2f:5d:8f:14:89:0c:f9:ed:25:7a:2f:2b:7f:89:e3:
         a5:95:05:25:6e:e3:ea:03:b2:4e:23:67:d7:48:9a:72:b2:97:
         21:ed:09:d0:f3:bd:3f:10:25:9c:5b:bf:60:2d:b9:0c:50:ae:
         ec:aa:fa:9a:9e:63:cc:40:8c:08:46:cf:8b:9c:05:25:15:67:
         f2:73:a5:92:dd:6b:17:90:2c:63:70:59:20:33:af:62:59:7a:
         a3:25:c5:f2:65:38:77:92:a4:a5:9e:56:16:bf:c8:d9:e6:44:
         3f:43:51:c8:83:6f:9d:ad:10:c7:dd:20:0c:c7:6f:5c:c9:38:
         25:d2:f2:91:9b:3b:1b:fd:5f:24:f0:56:31:95:fa:2a:2d:34:
         ae:22:ae:a4:9a:c1:d8:5d:20:c5:1b:f4:5b:b0:ee:87:0d:6a:
         a9:39:4b:e5:e5:fd:d9:24:86:c3:c4:a5:e0:ff:4d:dc:5e:8e:
         b2:f4:29:1d:fa:3e:b7:af:37:a9:27:c3:76:d5:96:69:93:e6:
         36:53:be:f8:e4:4c:d5:52:f0:eb:63:d9:5b:0c:89:37:b9:e6:
         4f:de:a1:80:6a:df:9d:0e:05:19:fb:32:bc:e0:fd:ed:2f:62:
         c4:ae:93:15:73:7c:b3:eb:b0:1d:1f:5b:47:f2:0c:c6:00:75:
         68:01:c6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:54 2026 by rpki-client