Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/WutoLul8LKailj66f-qAjfYvZ0Y.roa
File:                     WutoLul8LKailj66f-qAjfYvZ0Y.roa (raw, json)
Hash identifier:          REPlwxrfkoHlLj+dnyzpJUlvqU7t9Fy10bu0tcVmSQE=
Subject key identifier:   5A:EB:68:2E:E9:7C:2C:A6:A2:96:3E:BA:7F:EA:80:8D:F6:2F:67:46
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       B1
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/WutoLul8LKailj66f-qAjfYvZ0Y.roa
Signing time:             Tue 31 Mar 2026 08:14:48 +0000
ROA not before:           Tue 31 Mar 2026 08:14:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17676
IP address blocks:        126.135.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Mar 31 08:14:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5AEB682EE97C2CA6A2963EBA7FEA808DF62F6746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:19:ad:0b:39:c2:84:07:56:c3:95:6e:ff:
                    e4:d2:c1:12:c3:63:cc:8b:f6:de:e7:3d:e4:ee:cb:
                    ae:b7:c7:e4:5f:79:48:ba:9f:7d:b9:6d:50:a3:a4:
                    e5:30:5f:d3:55:5d:71:e2:40:64:e9:91:30:8f:f8:
                    4b:7f:f5:9b:e4:c9:33:b7:07:bf:a2:ab:97:f8:48:
                    19:26:d3:48:57:e0:4b:41:b0:13:1e:1a:e6:28:90:
                    08:56:41:9b:ff:c0:2b:8f:8d:fc:74:3d:70:19:68:
                    4d:b9:cb:58:f1:00:61:44:9c:74:81:00:a4:29:3d:
                    a3:ef:b2:d8:8e:0a:41:f9:88:f7:cd:c8:fe:4b:a1:
                    f9:b6:4a:9d:78:99:2b:4f:eb:4e:c5:cd:90:47:19:
                    3b:b1:26:c4:8e:bd:a3:2f:62:36:ac:93:70:83:57:
                    20:4f:93:3d:43:8e:67:ff:8f:28:17:28:80:31:e4:
                    d5:bc:ed:8a:14:6f:77:fe:82:fb:ab:42:b6:44:5d:
                    03:34:fa:b7:ad:e8:fb:5a:b7:75:70:2d:7a:fc:8b:
                    c0:64:bb:bd:eb:e2:c9:ed:c1:19:ed:e2:ca:31:db:
                    89:63:e9:a0:7a:89:f1:fb:0e:57:b4:c1:23:04:f2:
                    4e:99:dc:4f:84:9b:06:e4:ed:61:a2:3c:73:bd:2f:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EB:68:2E:E9:7C:2C:A6:A2:96:3E:BA:7F:EA:80:8D:F6:2F:67:46
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/WutoLul8LKailj66f-qAjfYvZ0Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:d4:67:56:7b:b2:01:f6:e4:6e:85:79:55:02:95:2c:de:8a:
         4c:8c:11:ae:20:75:16:81:2b:78:f5:a2:39:47:0c:be:87:a1:
         f2:ab:87:72:b0:5e:62:b1:ef:35:ad:6c:a5:86:b0:dc:de:4d:
         7d:73:ba:a7:48:7d:8d:8d:94:76:66:6d:98:88:62:46:ab:a8:
         0e:a7:ea:aa:c2:11:e4:cb:61:8e:d9:19:4b:8d:97:8b:bc:24:
         84:76:e6:a6:2c:bd:06:ba:ab:9b:85:4b:a0:dd:cd:59:50:eb:
         79:73:2d:3b:78:63:5f:c6:82:9c:b1:cc:f5:f6:db:f7:2e:98:
         b0:13:60:53:f6:de:51:fb:c2:1e:ef:69:19:44:b9:7c:45:8c:
         b4:ff:99:c6:16:ff:7a:af:eb:0d:37:53:5a:ea:d3:8d:7f:71:
         83:de:46:6c:f1:6d:1c:04:bc:73:7b:f6:56:46:7f:1c:ec:9b:
         b9:cc:c5:51:2c:28:17:f2:ce:6e:94:aa:fb:f6:97:65:87:95:
         47:ae:63:99:ba:db:6e:67:e7:c4:f9:8e:f9:64:6c:5d:e9:c7:
         7b:1b:9e:15:a6:ef:2a:e7:b6:1c:db:3c:e5:6f:61:e7:42:e3:
         c6:05:e4:74:d1:9a:72:ca:54:9a:57:9c:7c:4e:d5:1f:d4:e2:
         85:8e:1d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:29:07 2026 by rpki-client