Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/hfZAuy_-NdYdXSxC2CFK_dt1v2k.roa
File:                     hfZAuy_-NdYdXSxC2CFK_dt1v2k.roa (raw, json)
Hash identifier:          e4xHYp99xeTlWCrNcl+5G4PXOTMk0qcYhqNqY7mmsV4=
Subject key identifier:   85:F6:40:BB:2F:FE:35:D6:1D:5D:2C:42:D8:21:4A:FD:DB:75:BF:69
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01DB
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/hfZAuy_-NdYdXSxC2CFK_dt1v2k.roa
Signing time:             Tue 31 Mar 2026 07:39:50 +0000
ROA not before:           Tue 31 Mar 2026 07:39:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        111.216.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=85F640BB2FFE35D61D5D2C42D8214AFDDB75BF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:59:4d:19:61:27:48:5a:b7:5c:eb:6e:45:c9:
                    94:47:fd:8f:be:13:90:dd:52:61:de:c5:42:77:b5:
                    df:bd:9e:77:3c:fd:fb:98:b6:16:1c:f4:f4:54:c8:
                    44:3f:cf:87:8b:6c:6d:e6:c4:71:5e:b1:8a:f5:e8:
                    44:84:af:cf:b2:43:c6:62:32:36:fd:c8:cc:60:79:
                    1b:aa:fe:dd:7c:b3:75:e2:51:2f:3e:43:71:e1:51:
                    11:08:96:6d:09:ca:c7:d0:99:89:dc:d3:d6:19:e7:
                    fa:e8:68:03:2b:2e:99:37:64:dc:46:0f:ed:dd:d1:
                    d1:ca:33:40:9c:fa:48:40:b9:84:cb:d3:43:68:69:
                    18:45:1e:d7:5a:b1:af:03:b0:c4:4b:28:01:94:fb:
                    fe:7c:c6:22:09:b4:1a:85:3f:85:01:e0:bf:61:d4:
                    ad:ac:d9:84:cc:3c:af:7e:b2:da:b3:6d:a4:22:f9:
                    9b:96:f6:4b:36:b2:10:49:f3:0d:c5:b4:b3:41:16:
                    9e:1a:00:1f:80:4e:ce:95:f4:20:d1:fa:09:1d:f2:
                    3a:a8:64:ac:1e:18:ff:da:7e:18:ef:b0:0e:83:9c:
                    eb:22:30:f1:ad:ea:21:99:ea:b6:ed:79:66:f2:6a:
                    9b:88:fa:e6:cc:03:6e:59:a1:ad:10:5e:80:76:d2:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F6:40:BB:2F:FE:35:D6:1D:5D:2C:42:D8:21:4A:FD:DB:75:BF:69
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/hfZAuy_-NdYdXSxC2CFK_dt1v2k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.216.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         34:58:2c:2e:ce:d5:ff:38:98:b7:5a:78:35:26:57:32:60:8b:
         f4:6e:ea:eb:2b:a6:7e:19:45:7b:e3:fe:5e:0c:1a:8e:1c:2f:
         28:d0:57:69:cd:46:43:db:b5:32:ae:58:0a:d7:fe:b3:b2:5c:
         8a:14:cb:a1:ef:3b:57:a0:3d:57:7e:ac:5b:fb:80:27:e3:99:
         74:bc:61:af:b9:fe:8e:ce:ec:91:3c:ee:be:b4:24:c8:5a:ed:
         b9:1f:40:74:dd:78:19:96:47:30:f8:20:fd:81:ea:5d:bf:ed:
         9d:b1:2b:17:43:11:48:8e:17:aa:37:b5:78:03:dc:c0:d3:96:
         0e:70:60:29:d6:11:8a:1d:4b:52:8f:37:cc:45:f1:bb:f3:61:
         20:8a:46:12:85:55:d6:52:16:e9:fd:47:45:71:3b:2b:ea:21:
         9c:05:55:1f:1b:9f:8f:83:81:4b:01:00:ff:e2:b4:1f:7c:59:
         00:70:14:8f:ee:0d:d5:f2:4e:e3:02:e5:4f:f4:b9:10:02:92:
         61:18:cd:96:dd:ce:ca:06:a8:79:0d:27:1e:a9:dd:47:86:94:
         9b:e6:4f:fb:5c:c0:6b:13:27:ab:a0:e4:08:e7:9e:a6:42:f0:
         5b:2a:01:5f:0a:42:aa:34:35:78:02:14:df:7d:f5:67:fa:eb:
         16:bb:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:07 2026 by rpki-client