Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/mItHYn--R0ZmKmL7rNhw-yTtOTk.roa
File:                     mItHYn--R0ZmKmL7rNhw-yTtOTk.roa (raw, json)
Hash identifier:          o5I2XBVHgVGkDh82bVGxQCBdgnVeUwrkxrIq3ShgKVY=
Subject key identifier:   98:8B:47:62:7F:BE:47:46:66:2A:62:FB:AC:D8:70:FB:24:ED:39:39
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       0183
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/mItHYn--R0ZmKmL7rNhw-yTtOTk.roa
Signing time:             Tue 31 Mar 2026 07:38:13 +0000
ROA not before:           Tue 31 Mar 2026 07:38:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10021
IP address blocks:        117.55.216.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Mar 31 07:38:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=988B47627FBE4746662A62FBACD870FB24ED3939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:b1:33:68:dc:20:2d:06:d8:d5:4a:de:9f:
                    d0:59:5d:83:3c:ba:79:d1:07:41:6f:c4:0f:e0:66:
                    ec:9f:b7:65:5b:51:9a:44:1a:64:4a:eb:c8:c5:83:
                    17:53:aa:11:b5:b5:37:99:28:ca:a3:2e:71:3c:2b:
                    91:74:df:5c:db:2f:be:97:d1:e7:a2:1a:b1:f4:29:
                    d7:10:b0:89:8d:06:95:c8:7d:db:51:04:8d:13:70:
                    73:d0:84:9c:14:eb:5e:d0:f9:29:07:72:39:42:44:
                    56:3e:0a:fe:77:ac:d9:9a:9b:66:2b:7f:f8:63:48:
                    8e:5e:fb:b9:8c:a5:d1:ca:7e:c2:56:15:d7:d7:64:
                    36:1b:bb:54:e6:86:12:b5:d6:f4:be:ac:c8:ef:5b:
                    b9:8b:cf:34:04:db:2c:0f:82:b2:b8:3b:47:94:13:
                    84:31:a9:dd:b0:67:b4:b3:af:0d:b3:2d:af:b4:ba:
                    84:d4:0b:79:26:17:a6:a4:e3:f9:0d:27:cd:36:75:
                    74:0c:63:c6:22:f9:0a:62:f8:ae:c6:ba:71:09:05:
                    2b:2c:db:2f:b3:83:c2:42:71:7f:b5:fd:dc:b9:80:
                    94:3a:d4:78:9a:ef:ef:88:b1:d0:df:c9:27:31:ac:
                    b0:ca:fc:89:e1:65:2a:f3:f0:96:1b:a4:8f:95:f9:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8B:47:62:7F:BE:47:46:66:2A:62:FB:AC:D8:70:FB:24:ED:39:39
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/mItHYn--R0ZmKmL7rNhw-yTtOTk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.55.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:ad:98:f8:c6:03:aa:5a:d6:bc:37:87:3e:87:71:76:5c:9a:
         d6:ba:45:db:88:0e:69:a1:da:09:7a:65:49:18:46:c8:aa:19:
         e2:10:c5:2c:dc:60:68:08:a7:4f:d0:dc:9d:ee:df:de:4b:5a:
         98:db:eb:8a:30:73:11:0b:34:ec:ae:f9:e6:68:e8:6a:8e:9d:
         cf:d0:d5:bd:1d:23:c0:a8:00:89:b7:6b:03:6a:38:d0:d5:3c:
         b1:d5:ba:6c:ff:96:c2:bb:38:78:95:1e:2a:3f:fc:96:58:86:
         32:e5:fb:38:6b:0f:ec:d8:29:dd:3e:15:fa:f2:45:d6:97:1e:
         77:ef:dc:11:94:ac:ae:fb:bf:bf:be:e4:2a:a6:b5:eb:93:d7:
         73:aa:1d:99:a2:8b:e2:46:b6:40:b0:27:89:bd:11:65:52:01:
         9b:5c:34:62:55:05:f9:3f:33:4d:f9:96:ed:26:1e:60:86:f5:
         b7:bc:b8:d7:de:d8:4f:af:33:e2:a6:d0:1f:c1:a2:06:8a:13:
         40:14:02:71:8a:fd:d7:77:48:13:65:a7:8d:82:f9:61:3d:28:
         b7:12:da:60:5a:f3:49:5a:65:a2:f3:50:92:74:ff:87:ea:6a:
         eb:34:9c:a5:74:d6:c1:3e:d3:96:11:fb:9d:d0:e7:cc:0c:ad:
         03:b2:b0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:25 2026 by rpki-client