Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/dAsfRmR8Ti8pN5NMe8ODZGlBFME.roa
File:                     dAsfRmR8Ti8pN5NMe8ODZGlBFME.roa (raw, json)
Hash identifier:          CBmWqeSWCht3W2qbeMkjv/ZL4fcfQajtlYvOzYrUUYo=
Subject key identifier:   74:0B:1F:46:64:7C:4E:2F:29:37:93:4C:7B:C3:83:64:69:41:14:C1
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01F1
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/dAsfRmR8Ti8pN5NMe8ODZGlBFME.roa
Signing time:             Tue 31 Mar 2026 07:39:59 +0000
ROA not before:           Tue 31 Mar 2026 07:39:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        211.10.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=740B1F46647C4E2F2937934C7BC38364694114C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:9a:35:23:ed:66:16:36:98:e2:38:74:c0:
                    1a:81:e1:8a:db:b2:04:a5:8b:19:2a:d1:10:2f:00:
                    ec:5b:8e:b7:ae:ee:5b:b2:b5:ca:ed:b1:e7:c2:61:
                    c4:98:96:c8:ca:c8:d9:b3:dd:eb:a6:d6:97:af:53:
                    e3:62:1f:2c:0f:6e:68:2b:a1:c2:0a:5a:96:06:93:
                    43:79:2c:c9:b5:2e:5d:00:87:ae:52:24:db:94:23:
                    9f:ac:e3:65:0e:2f:94:e4:dd:a8:46:2c:3d:5a:50:
                    49:7b:85:98:0d:83:84:51:2b:c7:96:cd:9a:2e:55:
                    7f:7c:2e:0f:f1:5c:8c:ef:2a:05:50:65:2b:3a:58:
                    fb:dc:ca:bf:a4:19:07:a0:a0:3c:9e:dc:b8:15:9f:
                    f6:05:98:ec:ab:3f:4b:0c:04:7e:69:b6:21:e5:e2:
                    b9:f5:f6:50:e6:68:f7:9f:9b:f2:af:c8:76:71:4f:
                    33:74:c8:a5:bd:b4:4c:43:4b:72:0a:1f:33:72:fc:
                    98:55:01:ec:c4:fb:4d:03:3f:61:54:85:d4:a9:4a:
                    b2:1b:12:54:bc:be:2f:69:c2:70:48:97:73:98:59:
                    ce:b7:57:34:dd:b6:bc:00:af:c0:fd:8b:3c:aa:58:
                    5d:f7:fa:15:b5:1e:1b:b8:fa:df:64:0d:b9:3e:ba:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0B:1F:46:64:7C:4E:2F:29:37:93:4C:7B:C3:83:64:69:41:14:C1
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/dAsfRmR8Ti8pN5NMe8ODZGlBFME.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:3a:a4:8c:b2:ad:f9:3a:49:32:1d:f9:30:9d:b0:54:48:
         cf:8b:65:fd:97:8f:ba:1e:6b:46:de:1e:51:8b:24:a5:72:bf:
         50:d6:9e:2c:ac:ef:d3:4e:3b:93:f1:2c:9e:69:cb:f7:09:e0:
         78:30:ef:ff:43:d3:df:91:42:81:5f:f4:70:f1:d6:ec:01:e4:
         70:96:7d:7c:78:f8:85:e3:c4:e1:85:6c:bf:4b:6e:09:bd:76:
         e8:79:3b:65:cd:ca:a6:2f:40:3f:fc:d0:a9:8b:54:66:46:09:
         ed:c2:4b:a9:35:b1:55:b8:ea:96:8e:1f:e8:76:4c:e6:f7:ce:
         73:72:b9:7b:90:15:de:e5:30:37:72:4e:62:5a:f6:ba:f2:2c:
         a5:51:4a:ed:fe:e4:77:1d:9f:19:94:41:e9:ed:c0:cb:81:8b:
         f3:5e:ca:82:80:9c:9d:cd:f9:cd:17:75:3c:fb:a5:64:e1:79:
         5e:86:02:b9:b9:45:5f:c7:bb:fe:7a:e6:9e:ef:fa:d0:f1:c1:
         be:e9:bf:8e:44:55:e5:e3:57:1c:d7:79:54:10:3d:75:3f:52:
         b5:96:77:d7:d5:d7:2d:81:5e:2e:44:e5:7d:f7:42:e7:84:ce:
         40:f2:28:74:8b:00:82:6b:3e:16:23:07:55:94:6c:24:a5:e4:
         12:91:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:39 2026 by rpki-client