Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/m2CTtTf8a97zsh5ysmc1KOdajJ4.roa
File:                     m2CTtTf8a97zsh5ysmc1KOdajJ4.roa (raw, json)
Hash identifier:          RSjTghs80d3kwtoISmChxki7sgjvedbUmI+6/5jzJNg=
Subject key identifier:   9B:60:93:B5:37:FC:6B:DE:F3:B2:1E:72:B2:67:35:28:E7:5A:8C:9E
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       84
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/m2CTtTf8a97zsh5ysmc1KOdajJ4.roa
Signing time:             Sun 01 Feb 2026 01:29:17 +0000
ROA not before:           Sun 01 Feb 2026 01:29:17 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     131934
IP address blocks:        61.245.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Feb  1 01:29:17 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=9B6093B537FC6BDEF3B21E72B2673528E75A8C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:af:34:c0:56:05:c0:c5:5c:02:f1:fe:a5:
                    d3:f3:8e:ba:1f:5d:18:7f:e8:4f:ea:24:91:d0:11:
                    82:b9:eb:b1:a1:79:64:25:25:04:70:fb:1d:62:15:
                    f2:54:54:b5:d1:52:4d:77:49:66:70:b9:ed:5a:ad:
                    fa:9c:d0:6c:29:7f:0c:45:b1:41:05:80:3b:e3:14:
                    31:6a:58:94:7d:a5:f6:69:3f:b0:6f:45:4e:66:29:
                    de:73:ee:f8:50:fd:55:19:b0:59:bd:a9:86:8c:fa:
                    4e:d4:9c:ad:26:b5:72:38:22:32:c9:bf:e0:27:e1:
                    37:ea:61:54:b4:a3:e4:30:03:51:45:37:c0:6e:65:
                    0f:d6:b5:58:27:a6:d4:7b:20:90:27:81:8a:cf:ab:
                    a7:f1:a0:28:72:0c:df:eb:7f:e3:da:8f:40:2c:fa:
                    20:a7:d5:60:ff:6a:f3:45:66:60:69:60:46:58:db:
                    c7:6c:d3:6c:78:ab:3a:ff:fb:1c:24:95:ca:98:45:
                    0f:3f:2e:a1:8d:76:11:c0:71:f5:07:19:89:58:bc:
                    1e:9c:b5:88:f7:35:97:78:5f:fe:39:8d:10:14:96:
                    34:2b:d2:21:f0:ac:f4:ee:78:84:78:52:3e:3e:24:
                    a2:f4:2b:64:98:ad:48:d1:1e:45:5f:a5:a7:50:3e:
                    67:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:60:93:B5:37:FC:6B:DE:F3:B2:1E:72:B2:67:35:28:E7:5A:8C:9E
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/m2CTtTf8a97zsh5ysmc1KOdajJ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:f2:2b:b6:25:b3:b3:61:17:c1:a1:c4:1f:c7:9a:6f:d5:be:
         a1:cc:84:e9:d9:5c:d6:90:e3:f5:63:06:56:29:79:74:8f:25:
         b6:80:74:26:40:f5:f4:35:50:85:49:50:de:7d:49:3c:f5:26:
         f0:89:3f:91:01:f8:60:84:e6:8a:da:12:f7:bf:1d:37:23:10:
         15:34:fc:9b:6c:0d:ca:44:f0:70:d7:c6:d5:36:ed:aa:17:a0:
         4f:67:a4:a3:9e:c9:e5:bf:21:7c:50:97:00:b5:dd:43:04:eb:
         93:81:db:ed:8f:ac:26:ad:05:5d:e6:5d:28:af:a4:a3:23:ba:
         66:ef:be:22:40:5e:4d:79:54:1c:65:8f:21:1e:ae:b0:54:8c:
         2a:2b:9b:6e:da:01:8d:3d:1c:32:0b:ca:33:9c:ef:e1:1d:fc:
         a4:c1:dd:45:32:c7:8a:05:96:d6:50:67:dc:71:5b:de:77:57:
         14:8d:c8:89:d7:90:61:7b:ef:7d:4f:f2:5b:d1:a1:c9:72:ac:
         12:1c:3e:58:d9:45:e8:ec:8e:9e:a4:a2:fc:2a:cb:cd:a4:f7:
         27:de:b9:09:c1:42:ee:35:7d:0e:b1:ae:17:a3:41:e1:26:6e:
         9f:99:e0:9c:2b:f4:0b:ab:90:24:7d:df:99:75:d6:6f:3c:7a:
         79:b0:3b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:53 2026 by rpki-client