Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/JBav2nPEPto814xK1ZZj1tU8ZYo.roa
File:                     JBav2nPEPto814xK1ZZj1tU8ZYo.roa (raw, json)
Hash identifier:          6CNuOsPKbxs0w5ViX9F3ZTcyiq9r+DzF7gUlGSvtB1g=
Subject key identifier:   24:16:AF:DA:73:C4:3E:DA:3C:D7:8C:4A:D5:96:63:D6:D5:3C:65:8A
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       45
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/JBav2nPEPto814xK1ZZj1tU8ZYo.roa
Signing time:             Tue 31 Mar 2026 08:43:36 +0000
ROA not before:           Tue 31 Mar 2026 08:43:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        202.157.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Mar 31 08:43:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2416AFDA73C43EDA3CD78C4AD59663D6D53C658A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:56:c3:54:14:c2:c5:49:01:b7:bc:a4:6e:5b:
                    d3:cc:24:58:8e:0c:f1:74:a1:61:53:cd:15:3c:52:
                    62:c3:06:14:81:52:fc:42:79:0d:c3:2f:59:83:9e:
                    1b:37:a6:87:67:71:7b:25:00:2b:93:18:0f:df:59:
                    9c:3b:03:13:34:d9:14:df:95:25:fd:06:d4:d1:5d:
                    3e:43:dc:23:92:be:26:0c:09:b8:46:ac:c6:41:64:
                    e2:dc:7b:b5:bf:b9:7d:7c:48:78:bd:26:08:22:f4:
                    82:d8:0b:af:60:33:50:ef:79:42:69:76:b8:fd:77:
                    8c:91:01:a2:40:20:96:f9:fd:33:ce:5e:f9:0c:af:
                    50:56:3d:a1:cf:3f:06:39:e7:61:f0:82:cd:c8:a3:
                    8c:85:07:8b:d0:82:34:ab:7b:13:60:1e:d1:67:0e:
                    aa:0a:78:9d:5b:df:43:a6:ac:c5:27:5a:dc:c7:87:
                    94:63:1a:70:7f:c8:e6:30:8b:f0:5e:7d:c4:af:2d:
                    6d:56:58:88:bb:a6:05:77:b9:33:76:92:2f:c3:e9:
                    56:ed:d5:2b:f2:fb:0d:fb:80:bf:63:b6:96:59:7b:
                    99:21:19:81:9a:3f:ef:e7:d2:1e:f6:1b:e9:c4:80:
                    ea:a6:97:2c:05:3a:09:3a:ea:26:9e:a6:99:df:63:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:16:AF:DA:73:C4:3E:DA:3C:D7:8C:4A:D5:96:63:D6:D5:3C:65:8A
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/JBav2nPEPto814xK1ZZj1tU8ZYo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:7a:62:28:e8:74:7f:bc:17:b4:a9:c9:c3:79:70:4b:65:b0:
         4b:8c:4f:10:e3:d7:b7:1c:c1:10:48:b3:43:39:f4:b7:c1:bc:
         5d:17:93:cb:b8:b0:22:ec:d1:79:b6:da:c3:84:35:4b:89:fb:
         bb:b9:ff:10:a1:ca:96:fc:f8:1e:2c:f1:84:13:0b:7a:e8:dc:
         ed:e7:98:da:1c:18:b1:b9:d6:f9:ef:ec:01:0b:25:37:b0:07:
         97:00:d5:99:21:19:eb:b0:1e:55:43:38:61:71:a3:b5:d2:d9:
         7b:ea:92:3c:7d:0b:0b:0f:77:22:df:80:ac:d2:78:aa:bb:ea:
         be:62:29:97:a2:4f:3c:04:32:e3:98:2b:b4:8e:fa:9e:c0:7c:
         0a:49:5c:e0:4b:72:40:2a:4b:db:69:59:65:85:62:81:bd:88:
         68:d7:a6:ff:46:d3:a8:66:f8:30:b6:9a:e2:d4:e0:47:ec:fa:
         0c:f8:4d:d6:54:07:be:8b:46:59:4e:eb:79:f5:e0:b2:84:b4:
         b9:18:b4:38:bc:24:56:72:02:e4:7a:4b:27:a6:25:a7:a8:d9:
         4f:08:fc:f6:db:74:97:43:7d:b4:8e:21:2d:4b:18:d0:5b:a5:
         c5:77:e8:4c:15:49:d2:3e:61:c6:54:be:7c:84:7c:94:97:6c:
         b0:47:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:39 2026 by rpki-client