Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/MbdgyLkQ9TNeqqcd-ZTJ5DEMz6A.roa
File:                     MbdgyLkQ9TNeqqcd-ZTJ5DEMz6A.roa (raw, json)
Hash identifier:          tD85hPJ2bS08ONwxmpMoGjpk+SWMg4/ptYvzLKFf3OM=
Subject key identifier:   31:B7:60:C8:B9:10:F5:33:5E:AA:A7:1D:F9:94:C9:E4:31:0C:CF:A0
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       60
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/MbdgyLkQ9TNeqqcd-ZTJ5DEMz6A.roa
Signing time:             Tue 31 Mar 2026 07:52:09 +0000
ROA not before:           Tue 31 Mar 2026 07:52:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        153.122.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Mar 31 07:52:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=31B760C8B910F5335EAAA71DF994C9E4310CCFA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:aa:a4:ab:b5:be:88:b5:fa:00:96:a2:92:
                    15:54:89:c8:0e:0f:fb:b6:c2:85:c1:f5:9e:df:b4:
                    dc:eb:50:b9:05:0f:46:7f:94:62:a0:64:56:42:53:
                    7f:87:25:00:3d:2a:03:db:15:5b:1a:56:25:65:c9:
                    23:4f:1f:c3:9f:d8:46:39:2c:5f:98:e2:0f:b1:aa:
                    fc:d3:55:5d:c4:60:88:e3:35:e7:43:11:e6:98:8e:
                    5e:45:7d:f4:f5:68:dc:a2:a2:4d:6d:dc:35:03:6c:
                    a5:15:38:2a:f2:6b:2b:0a:5f:00:94:f4:78:60:00:
                    e5:f4:c3:81:7f:c4:69:63:4a:bd:eb:c5:cf:09:85:
                    ae:28:d9:40:ee:3f:b0:e3:19:9c:22:80:fe:d2:b5:
                    8f:0e:ac:29:e1:00:6c:0e:80:a4:7e:a9:e4:85:8f:
                    cc:d9:2d:ba:19:fd:25:18:7f:98:a9:8f:64:26:bf:
                    0d:b3:d8:f9:67:6c:89:1b:3f:e6:dd:70:70:e8:bd:
                    f7:18:15:0d:3b:73:c0:c4:8b:fa:1e:af:12:43:57:
                    db:af:6f:49:80:8c:d9:e6:27:93:c7:9b:56:22:c8:
                    6c:d7:c1:66:5f:6b:f0:b2:33:92:2a:23:11:46:bd:
                    47:8d:e6:08:34:2f:66:af:7a:2a:ff:42:37:3d:38:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B7:60:C8:B9:10:F5:33:5E:AA:A7:1D:F9:94:C9:E4:31:0C:CF:A0
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/MbdgyLkQ9TNeqqcd-ZTJ5DEMz6A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.122.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:e1:78:ff:a2:bc:35:90:9f:69:4a:58:0e:55:03:b7:a4:27:
         96:21:2f:1c:42:23:c0:32:d2:6c:28:de:38:91:7e:39:8f:0b:
         b0:5c:fd:4c:ea:61:b9:2b:38:13:96:6b:0f:bd:29:a2:5d:8a:
         1d:c8:82:3c:4c:e1:34:24:3a:3c:27:28:8f:45:e1:ac:2e:df:
         ca:45:b0:83:1d:49:f5:2c:20:63:80:31:18:9c:97:69:41:04:
         77:18:a9:64:90:b2:dd:bc:15:a9:4c:6e:cd:dc:59:4d:fc:36:
         bc:53:74:27:05:b2:4c:c2:18:37:4e:fd:cf:09:72:f4:d4:cb:
         07:44:81:bc:aa:cb:41:a8:12:23:8e:bf:90:7d:c3:2a:eb:f2:
         06:64:33:d3:38:ee:98:07:44:47:af:16:45:61:72:da:37:a6:
         43:56:04:96:4e:73:a3:cd:0d:4d:00:f4:09:68:61:82:ea:8c:
         4d:d7:86:da:19:55:22:8d:7b:c6:cd:ba:0f:38:69:2b:56:1d:
         79:81:5d:40:4d:bf:4e:bf:9d:4f:9e:31:46:54:5a:b8:5e:2b:
         34:02:86:16:c1:88:ec:c4:17:34:11:ba:c2:72:9f:31:6d:23:
         3d:80:e8:f0:d1:4a:e6:11:8b:3a:2d:29:68:cd:93:05:66:d4:
         ec:25:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:27 2026 by rpki-client