Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/aqB4lGW_AYg_RlDWfkg--pRmVVg.roa
File:                     aqB4lGW_AYg_RlDWfkg--pRmVVg.roa (raw, json)
Hash identifier:          DjC2p9IlxgqH2I+JOeBoT7eja5YBiuOe/i2xNV5KL5Y=
Subject key identifier:   6A:A0:78:94:65:BF:01:88:3F:46:50:D6:7E:48:3E:FA:94:66:55:58
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01CC
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/aqB4lGW_AYg_RlDWfkg--pRmVVg.roa
Signing time:             Sun 01 Mar 2026 01:28:46 +0000
ROA not before:           Sun 01 Mar 2026 01:28:46 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        116.91.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar  1 01:28:46 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6AA0789465BF01883F4650D67E483EFA94665558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:89:37:4b:fe:70:bb:91:3a:ee:66:53:9b:
                    00:e5:79:6e:db:13:ef:c7:9e:fe:a9:73:ed:12:c3:
                    7c:28:ed:5e:d7:9f:ec:da:cd:95:db:64:2e:80:a5:
                    b1:2e:06:f4:96:66:1a:10:d7:cc:fc:48:d3:f0:8f:
                    fe:2b:3a:ad:d9:e2:48:1c:c0:6d:83:eb:ce:f4:68:
                    65:2f:ca:e4:df:d9:ec:e0:8c:f1:01:23:dd:39:bc:
                    05:65:04:c6:f9:1a:b7:b9:db:fd:d4:4b:d4:d5:3d:
                    26:dc:ef:18:c2:2f:8b:8c:ec:92:8a:e1:01:5a:8d:
                    c4:4f:45:e0:47:a7:ca:f0:b6:ad:ee:3e:52:20:80:
                    65:5e:e7:cf:84:f1:a4:bf:0d:29:b9:79:6d:97:83:
                    ca:a8:31:0d:c1:35:d0:bc:15:5b:83:c5:b8:6a:1f:
                    a6:16:a6:6b:f8:be:1e:76:09:bd:15:a8:49:b0:9d:
                    89:77:c4:ef:9f:83:79:b5:80:9a:6c:d6:81:ba:ce:
                    f1:f2:4c:6c:56:b3:b8:77:0d:25:c5:35:18:6d:36:
                    4b:f1:df:31:f9:62:57:a9:61:58:05:5d:17:36:01:
                    91:3e:cd:e3:7c:04:95:72:6d:81:a3:d8:b4:ab:5e:
                    ad:cd:ae:0c:83:6d:98:bc:fa:6c:34:5e:33:9e:61:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A0:78:94:65:BF:01:88:3F:46:50:D6:7E:48:3E:FA:94:66:55:58
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/aqB4lGW_AYg_RlDWfkg--pRmVVg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.91.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:85:29:ed:ab:d4:df:1a:a2:3a:bc:d3:8a:14:e6:f2:87:6c:
         cc:8e:f1:a3:1d:30:4b:dc:60:76:e0:44:7d:a6:60:e7:a2:f8:
         db:fe:26:65:61:d9:99:41:69:73:63:15:75:99:fa:93:c5:d9:
         1f:35:1c:6a:f3:f2:a0:f0:48:c5:70:fb:34:b2:4a:48:9b:71:
         d5:d0:80:7d:60:13:90:85:2f:b2:ed:cf:ea:5f:47:7f:ca:f6:
         6c:da:9f:52:11:ce:f4:92:56:6f:51:7e:95:b7:ad:9f:e8:5b:
         cf:d2:15:5d:c4:3d:f7:c6:bc:a9:58:5d:96:8c:67:ac:04:ba:
         49:5e:31:c4:52:35:de:5b:1b:13:dd:0a:b2:37:9d:11:01:9a:
         30:90:35:99:63:5c:eb:69:91:39:1f:43:6f:3a:c8:d6:ce:e6:
         3b:0c:3d:8f:7e:48:31:23:96:bf:c6:d3:51:db:8b:aa:78:96:
         0a:39:e5:50:4e:ec:f5:9f:c9:31:1f:95:3d:d9:b1:68:d7:e0:
         6e:77:f0:3e:3c:77:ee:6d:a6:16:d8:68:30:14:bf:a4:4a:4e:
         ae:37:cf:d9:ce:03:08:29:3c:d9:66:b5:df:78:c6:78:aa:31:
         3d:45:da:bc:0e:7c:17:4d:c1:24:ae:07:c7:46:66:b2:17:a4:
         09:20:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:45 2026 by rpki-client