Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/oWKoHNXiyFZkuFHcgipyEu0Yrx0.roa
File:                     oWKoHNXiyFZkuFHcgipyEu0Yrx0.roa (raw, json)
Hash identifier:          bMUuCap0DBALMsQ9CvSGv9t2VF5tcmxAV6mozMDllVk=
Subject key identifier:   A1:62:A8:1C:D5:E2:C8:56:64:B8:51:DC:82:2A:72:12:ED:18:AF:1D
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       4A
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/oWKoHNXiyFZkuFHcgipyEu0Yrx0.roa
Signing time:             Tue 31 Mar 2026 08:43:38 +0000
ROA not before:           Tue 31 Mar 2026 08:43:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        202.157.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Mar 31 08:43:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A162A81CD5E2C85664B851DC822A7212ED18AF1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:d9:13:c8:d6:0a:a2:34:ee:f1:a0:be:9b:
                    d2:d8:91:a6:25:3d:ca:15:8e:eb:57:5b:a8:6b:ef:
                    67:37:ac:21:e9:59:9a:d5:79:e7:c8:fe:bd:86:70:
                    25:5b:0c:20:54:35:a4:0a:56:13:3b:d2:e0:f7:9f:
                    cd:3b:a4:08:19:04:63:57:32:2f:94:51:ca:32:50:
                    f0:dc:b2:b6:4d:57:da:cb:57:57:4f:04:a8:d1:4d:
                    a3:f2:47:b2:e2:4d:13:e2:50:0f:96:26:18:ed:d2:
                    7d:af:6b:96:8e:a2:cb:b3:6c:b3:93:72:d1:f0:ec:
                    1b:3a:31:97:f7:c4:5e:86:9b:06:4a:45:0c:9b:2a:
                    d7:81:65:25:df:65:21:f3:5a:e5:bd:0a:85:d7:25:
                    e8:9f:49:32:bc:55:d2:39:86:92:6c:1e:91:2d:94:
                    c1:a5:cb:ef:c7:db:8a:87:b1:10:6c:18:84:9f:69:
                    1c:f2:e0:c7:cd:74:36:9a:a7:2a:7a:16:1f:51:90:
                    35:64:13:cc:98:34:d7:92:7e:d3:15:b4:ec:55:05:
                    67:82:fa:7f:16:b0:b9:0d:5f:01:3f:ef:19:c6:c3:
                    62:10:17:d0:b2:90:5d:c0:0f:4e:dd:62:e0:30:7d:
                    32:d1:05:1c:16:33:cc:49:45:fb:7e:1f:78:08:51:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:62:A8:1C:D5:E2:C8:56:64:B8:51:DC:82:2A:72:12:ED:18:AF:1D
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/oWKoHNXiyFZkuFHcgipyEu0Yrx0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:05:31:8b:c7:1e:24:c8:d7:b4:92:78:16:1c:d7:17:49:c6:
         27:72:0d:ab:10:b5:0f:be:26:97:70:bd:81:37:4b:9d:d8:8b:
         3b:17:e4:59:53:9d:7f:90:de:5e:47:9a:c2:39:a1:30:da:76:
         4b:4c:bc:05:6b:0f:1b:ab:54:5f:78:67:fe:da:96:95:41:55:
         6c:d9:6d:c2:11:c1:f0:6e:b9:81:7b:35:eb:ec:bc:c6:d4:29:
         21:6a:4e:f3:00:be:dd:76:7c:a6:1a:ee:e0:8e:2f:77:a2:c1:
         37:9c:3c:6e:93:b5:62:af:27:35:d3:68:51:fc:ce:b0:80:93:
         ea:8b:96:b2:5a:b1:f6:89:b3:1e:d3:61:4b:2d:1e:16:74:b1:
         d3:4f:2c:1a:f5:31:c5:7f:a5:ce:c1:ab:c4:c3:6d:a5:53:51:
         0c:17:13:25:bc:4b:6e:3c:66:32:e8:07:60:65:47:6c:dc:eb:
         01:89:be:64:5a:ec:54:ae:26:bc:5d:b6:86:3d:ea:c9:3f:81:
         a3:a7:51:30:76:3f:8b:1e:f0:0e:01:72:4c:01:b4:14:90:6e:
         47:a6:f4:0f:e2:cb:42:0f:6f:30:b9:9c:2c:c8:71:bd:7c:f7:
         a3:eb:c9:7a:dc:98:94:64:fd:2d:f2:67:7b:a9:36:ce:80:b3:
         42:07:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:34 2026 by rpki-client