Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/uo6G4ZAE55eDyfzbIxpDvkrcW-Y.roa
File:                     uo6G4ZAE55eDyfzbIxpDvkrcW-Y.roa (raw, json)
Hash identifier:          a8OmaZ8y3/f+FKBzElbySJTp2uTcPtRkL2/FUHOiyvg=
Subject key identifier:   BA:8E:86:E1:90:04:E7:97:83:C9:FC:DB:23:1A:43:BE:4A:DC:5B:E6
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       8A
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/uo6G4ZAE55eDyfzbIxpDvkrcW-Y.roa
Signing time:             Sun 01 Feb 2026 01:29:21 +0000
ROA not before:           Sun 01 Feb 2026 01:29:21 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     10019
IP address blocks:        211.125.144.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Feb  1 01:29:21 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=BA8E86E19004E79783C9FCDB231A43BE4ADC5BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:b4:13:e7:4e:5e:50:b6:40:79:76:ec:12:
                    2e:da:e7:9e:62:e3:6e:f9:75:31:f7:8c:43:eb:ea:
                    a3:ce:12:c9:ae:d9:fb:7a:31:6e:89:28:7c:51:5b:
                    3b:ab:8c:20:67:89:08:a5:23:14:52:65:d4:62:7e:
                    78:ed:d9:29:5c:4c:9c:fd:19:2e:fb:83:ab:6b:d9:
                    b2:6f:31:1f:e0:c7:d4:9f:e2:ee:fa:78:16:ef:bd:
                    22:24:21:32:c7:0c:dd:ff:08:85:79:dc:56:5d:bc:
                    84:31:ca:a0:5a:23:4e:8e:92:3a:5c:a2:4f:bf:cc:
                    c4:75:66:3f:80:12:4b:78:05:3f:29:f5:4c:a8:fa:
                    52:e6:3c:ca:a0:2a:5c:22:d8:30:62:d2:13:a5:4d:
                    5d:de:76:d2:4a:d0:56:6e:56:7f:40:aa:cd:ce:59:
                    64:05:76:ab:4c:ed:2c:2e:0e:9a:89:56:e2:93:5c:
                    95:67:99:c4:f7:1b:78:54:e1:2c:51:b4:04:ad:f4:
                    ba:8a:2d:ea:5b:b2:0e:2c:b2:00:1b:d3:41:c2:9b:
                    93:72:fc:27:98:c3:8b:c8:c5:c3:2d:95:a1:00:19:
                    36:47:64:01:4c:10:dd:d5:74:ba:89:6d:20:09:48:
                    ff:62:09:28:81:5b:3a:21:4c:2a:0f:51:83:70:d6:
                    78:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8E:86:E1:90:04:E7:97:83:C9:FC:DB:23:1A:43:BE:4A:DC:5B:E6
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/uo6G4ZAE55eDyfzbIxpDvkrcW-Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:02:20:4b:72:68:3e:69:e9:b4:0e:b2:8d:a8:fe:44:ac:78:
         7e:ee:92:d1:7c:4b:b9:37:0e:4a:eb:76:7d:46:d3:22:a1:f7:
         9f:16:47:7b:d9:cf:bf:a7:29:3b:6d:4d:cb:ce:b2:35:38:53:
         94:bf:d9:34:6e:b4:00:a0:56:5f:65:ab:d7:f3:8d:38:00:d6:
         1f:48:aa:ff:9e:b5:fb:81:87:c2:64:84:e2:f6:ce:1c:7e:9e:
         72:8e:8f:ae:a4:02:7f:93:8c:cd:06:0f:d7:06:d1:1e:ef:c0:
         8d:76:f6:d3:b4:ed:91:30:3f:f3:bb:ff:8d:69:31:88:79:9b:
         5e:b9:49:44:2d:54:a7:f1:de:6b:32:b3:d7:34:b5:4a:f1:9d:
         61:07:95:b8:e1:b2:69:ba:ac:51:83:0d:9d:d8:1f:9f:e0:08:
         6f:28:32:23:07:44:16:4d:95:cb:49:79:50:08:05:e3:a8:f4:
         f2:7f:7c:75:d6:97:07:79:33:ab:20:59:14:fd:48:67:ce:d0:
         1c:d0:2c:9e:29:c0:b0:82:52:17:a4:79:3f:bf:e7:cf:b0:8c:
         eb:09:13:c9:f9:26:05:f8:20:e0:d5:da:fd:46:b6:99:46:93:
         8c:29:e7:4e:54:cd:cd:33:1b:45:4c:dc:2c:cd:71:8b:07:2d:
         ed:76:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:50:53 2026 by rpki-client