Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/jEjwcHLsc7h4DvVhDs0iGtRX1XY.roa
File:                     jEjwcHLsc7h4DvVhDs0iGtRX1XY.roa (raw, json)
Hash identifier:          iYIu1G9Te5xQ9z6PfdCspB53iSTZSv/lKskUVuXBXS0=
Subject key identifier:   8C:48:F0:70:72:EC:73:B8:78:0E:F5:61:0E:CD:22:1A:D4:57:D5:76
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01EB
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jEjwcHLsc7h4DvVhDs0iGtRX1XY.roa
Signing time:             Tue 31 Mar 2026 07:39:57 +0000
ROA not before:           Tue 31 Mar 2026 07:39:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        211.128.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8C48F07072EC73B8780EF5610ECD221AD457D576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fb:82:d2:ea:60:18:ab:0e:2c:ac:fa:66:5f:
                    e6:30:0b:1a:47:fc:4a:fb:86:15:bf:76:17:68:85:
                    48:a5:5a:d7:51:f0:b2:13:43:ab:f0:92:c8:c3:33:
                    4b:dd:fa:98:f3:f9:b9:a1:2b:05:79:75:2f:ee:52:
                    01:72:ab:e9:01:e0:50:dc:7a:6c:5e:c0:9b:50:1a:
                    b2:2b:18:b4:c1:cf:2f:b6:56:64:17:4d:89:71:6b:
                    ae:e8:40:ee:29:8f:e6:1a:85:ae:bf:2b:12:a8:9d:
                    65:a9:28:64:0d:c9:67:83:5b:2b:02:34:37:f1:4b:
                    f8:2f:3b:09:cc:ee:8c:f7:e6:ab:68:67:cf:c3:51:
                    d2:96:4e:d8:2e:f2:a0:06:70:c0:c0:9f:da:61:61:
                    bd:45:5b:4f:44:62:9c:fd:e4:07:7c:2e:0b:55:a7:
                    6e:b4:3a:e3:16:fc:57:db:fd:79:56:6c:30:af:1f:
                    f0:62:35:0b:e4:47:a0:3c:6d:05:10:dd:e0:f7:00:
                    66:be:53:12:49:1a:08:ff:56:94:44:26:13:f9:52:
                    96:f8:1c:7c:32:7c:e1:b9:02:70:1d:6b:bd:0f:a0:
                    27:65:bf:be:81:8b:09:41:c9:16:62:d8:ed:50:9e:
                    c6:b1:c5:fb:5d:86:44:2b:1a:f1:ee:e9:97:fc:4b:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:48:F0:70:72:EC:73:B8:78:0E:F5:61:0E:CD:22:1A:D4:57:D5:76
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jEjwcHLsc7h4DvVhDs0iGtRX1XY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.128.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:f7:76:a6:19:ef:70:08:10:45:dd:c1:75:4b:cd:b0:5a:f2:
         df:c2:37:5f:e5:9b:58:57:06:11:7f:5d:62:eb:39:07:37:11:
         9d:93:21:db:6d:04:2a:17:2e:db:93:b6:c1:d2:a4:f9:8d:cc:
         8b:32:57:72:45:c7:82:c9:d5:99:96:49:29:ff:b1:2c:94:78:
         01:77:ba:85:90:4b:49:56:ce:ca:24:06:ab:e4:41:e8:56:c1:
         c3:bf:8f:14:c0:26:8c:24:19:c7:38:a4:8d:cc:a5:36:34:2f:
         e5:9e:97:e7:20:2a:e2:6c:87:ba:a5:4a:c6:d4:04:91:18:89:
         76:fe:12:59:6f:42:04:19:06:c5:84:3d:2e:09:db:be:be:b6:
         2c:b5:03:b9:52:91:83:41:f2:48:28:54:e0:bc:39:74:5f:0c:
         0a:d5:25:9d:7e:14:6d:8a:fe:ce:d7:bb:c8:42:b3:80:fe:5f:
         10:03:54:c9:73:ea:ad:11:46:f5:a1:e3:d2:75:5b:bc:8e:92:
         d0:0c:0f:e0:c9:48:63:89:b6:3c:40:8f:ae:5d:38:0f:0f:ea:
         5c:ff:79:41:ee:03:bd:85:f0:10:df:25:f8:3b:00:84:5d:18:
         28:80:2d:38:9f:c8:3b:13:27:73:d3:a3:44:53:59:65:c5:a7:
         17:3d:ae:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:49 2026 by rpki-client