Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/pOjrticYFAb2IUVIR_kBNQDr1zI.roa
File:                     pOjrticYFAb2IUVIR_kBNQDr1zI.roa (raw, json)
Hash identifier:          W/uBZ4J0hcoGyh9ZYwr7mzpL+NTCCwYy6KhefY1k12o=
Subject key identifier:   A4:E8:EB:B6:27:18:14:06:F6:21:45:48:47:F9:01:35:00:EB:D7:32
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       42
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/pOjrticYFAb2IUVIR_kBNQDr1zI.roa
Signing time:             Tue 31 Mar 2026 08:43:34 +0000
ROA not before:           Tue 31 Mar 2026 08:43:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        202.157.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Mar 31 08:43:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A4E8EBB627181406F621454847F9013500EBD732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d3:40:65:9d:59:5f:a1:0d:0e:8b:a8:27:ed:
                    1b:16:ee:59:86:8e:6b:c0:3b:69:e6:0c:3c:88:32:
                    5f:13:cb:6a:a5:05:0e:3b:33:78:ed:69:4b:45:d2:
                    f9:eb:e8:97:2b:89:ec:ba:66:b9:1d:32:7e:d4:bb:
                    19:34:cd:8d:9e:a6:4f:24:bd:a9:b2:0c:8c:b7:e7:
                    d7:81:60:56:fa:09:92:c0:6a:bc:47:d0:c7:b6:2f:
                    8a:4b:7d:7d:17:ec:00:cd:21:b8:b1:68:65:12:32:
                    ec:cf:d3:f7:4d:d2:4c:db:60:a0:1d:63:82:18:0f:
                    d4:69:89:d6:a0:e4:63:e0:3c:fd:d9:54:0b:1c:6a:
                    b7:f2:6a:05:6b:b9:d1:d3:df:8e:00:89:a7:9e:c4:
                    f1:a4:3c:79:14:55:21:07:cd:68:5c:d8:51:01:6a:
                    de:2b:d1:0c:c0:af:de:9d:13:f0:90:18:6c:26:fc:
                    b6:58:6f:c0:dc:ab:43:eb:ad:d8:2d:87:68:62:e7:
                    16:39:5c:68:8f:f5:82:34:82:a9:91:e5:5b:b0:c4:
                    08:e5:28:3c:3a:52:a5:00:f0:07:e1:c5:bf:0b:d0:
                    b6:f1:9f:1b:31:c6:e2:28:aa:2d:ea:8c:9e:b3:50:
                    a0:d1:db:b7:95:df:88:c7:a6:ee:88:62:ef:d1:2a:
                    7a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E8:EB:B6:27:18:14:06:F6:21:45:48:47:F9:01:35:00:EB:D7:32
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/pOjrticYFAb2IUVIR_kBNQDr1zI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:5c:98:89:67:ee:5f:2f:96:de:c0:e3:a7:9b:20:a9:e7:16:
         50:b4:9a:21:47:b0:d9:fa:ec:51:07:b2:d0:fc:04:55:89:94:
         08:0b:f2:7f:47:a1:c7:9d:b2:60:a7:94:33:87:92:4a:37:47:
         0b:29:d3:82:dc:14:f7:ff:5e:a1:4e:bb:d9:2f:5f:9b:25:3a:
         6d:75:33:d7:fa:0e:02:7b:20:5c:a5:0b:4f:ab:5f:f7:95:a9:
         92:f6:86:f6:b3:cd:b7:3b:10:47:3d:1d:74:4f:cc:28:ae:d9:
         e5:32:a6:af:b2:0d:9e:7b:60:81:e1:74:a3:ca:88:ae:44:80:
         60:09:67:2f:e2:ac:cf:af:2c:37:46:53:0a:63:06:dd:04:79:
         3c:a1:2a:da:43:ea:02:da:72:22:8a:66:68:fa:a7:ce:98:ae:
         67:a6:13:49:24:7c:32:70:05:11:cc:38:54:a9:00:cd:9d:96:
         ab:92:14:d3:30:0b:6b:f1:39:07:b3:38:15:8a:7d:cf:c9:ca:
         a1:09:41:d4:04:6f:fc:28:2c:4b:27:6b:37:0a:42:05:ff:78:
         07:ba:10:63:1b:f2:f3:f7:96:4f:58:bf:24:79:79:d5:f9:58:
         32:7e:36:05:f0:80:fb:09:9b:93:30:d7:74:28:90:ce:2c:bb:
         1f:7d:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:34 2026 by rpki-client