Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/qnXglz17WLXC0f6cBNsLf-nhdOU.roa
File:                     qnXglz17WLXC0f6cBNsLf-nhdOU.roa (raw, json)
Hash identifier:          eIJuyyHk+DD3mUBsa28O5iNdJNgb1FEhooz2xpRUdy8=
Subject key identifier:   AA:75:E0:97:3D:7B:58:B5:C2:D1:FE:9C:04:DB:0B:7F:E9:E1:74:E5
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01C8
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qnXglz17WLXC0f6cBNsLf-nhdOU.roa
Signing time:             Sun 01 Mar 2026 01:28:44 +0000
ROA not before:           Sun 01 Mar 2026 01:28:44 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        36.2.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar  1 01:28:44 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=AA75E0973D7B58B5C2D1FE9C04DB0B7FE9E174E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:83:d4:c4:85:fa:fb:d6:b9:ca:1c:af:18:
                    88:a9:3c:9f:d2:23:9e:f1:ec:f0:fd:6a:15:61:13:
                    bd:14:85:24:59:29:b5:b3:c7:70:e7:2a:e6:14:48:
                    74:d1:dc:db:ac:e5:6a:d1:f1:db:12:1c:21:b7:f1:
                    31:20:09:59:bb:1d:27:e3:3a:0b:5c:05:26:73:48:
                    e1:e0:a0:b6:b7:9a:6d:4e:c4:8b:9f:dc:48:fa:67:
                    60:d8:6f:2d:62:03:1a:38:ca:3f:23:a0:e4:56:5b:
                    61:71:c8:46:7e:92:fc:19:79:52:a7:a3:bc:dd:7f:
                    91:a3:20:97:70:b6:27:20:7b:97:3b:f0:41:4b:2d:
                    36:02:a2:eb:43:c5:7a:13:82:99:b7:37:da:1a:e6:
                    b6:2a:92:47:36:bb:c4:f6:55:09:31:d9:7e:e8:22:
                    72:e6:39:20:ce:98:e5:2c:77:eb:35:2c:0a:f8:61:
                    31:ff:05:6b:bc:22:35:b2:c7:28:9e:82:d4:55:37:
                    84:d9:10:a8:08:4b:2c:ee:ad:4a:81:08:9f:02:cc:
                    29:f0:be:c8:a3:e4:2a:7b:df:2e:a9:d6:76:2b:64:
                    41:e2:a3:c1:f4:65:d9:cc:04:9e:93:22:0c:18:33:
                    8d:9b:63:db:b3:5c:af:ec:7e:1b:1b:c7:42:0f:b3:
                    c4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:75:E0:97:3D:7B:58:B5:C2:D1:FE:9C:04:DB:0B:7F:E9:E1:74:E5
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qnXglz17WLXC0f6cBNsLf-nhdOU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.2.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:82:99:5e:33:a2:35:dd:82:48:f4:6d:bb:60:be:3f:cc:9b:
         6c:8e:9f:35:25:a6:cd:d6:c3:2f:2f:83:e2:a2:0c:92:4e:06:
         77:48:4b:68:66:bb:10:7a:76:04:ca:cf:11:51:ac:ec:1a:51:
         b3:08:d6:27:f6:97:be:46:5d:40:93:6a:37:de:25:40:5d:41:
         30:3b:35:37:c9:dc:6b:29:df:91:86:c8:9b:08:29:76:12:07:
         03:3d:f5:bd:0a:18:db:9c:0f:b0:37:ff:86:cc:e7:f5:5a:6f:
         3b:27:aa:d1:41:89:93:70:46:4f:66:ce:63:85:7e:b3:af:97:
         30:80:ac:d7:55:ef:03:ba:b9:8c:2d:76:56:82:8b:5a:44:82:
         ee:6e:ba:ba:bd:71:72:d6:bf:c2:59:5a:4a:59:3b:d9:68:dc:
         eb:c3:f5:b8:aa:0e:70:1b:ff:09:fc:75:60:7e:66:30:fe:78:
         6e:43:84:a2:d6:33:3a:2c:0c:1f:36:a1:aa:2b:cf:12:1d:f9:
         fe:34:23:5b:fc:0a:3e:3d:58:12:a5:d7:55:17:77:00:97:10:
         20:cc:91:72:06:c0:62:fb:91:4a:ef:48:40:5c:c5:59:0a:6f:
         13:12:d7:c2:91:06:95:d9:84:f4:8c:86:81:63:b3:91:b2:f8:
         02:3f:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:05:50 2026 by rpki-client