Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/sl4PJQsjfuatn57SxaCh40Qyfe4.roa
File:                     sl4PJQsjfuatn57SxaCh40Qyfe4.roa (raw, json)
Hash identifier:          kfXHGsOa/3fd3GE3Wdxire3Auj4918whuwpuvIDgDM4=
Subject key identifier:   B2:5E:0F:25:0B:23:7E:E6:AD:9F:9E:D2:C5:A0:A1:E3:44:32:7D:EE
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       5F
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/sl4PJQsjfuatn57SxaCh40Qyfe4.roa
Signing time:             Tue 31 Mar 2026 07:52:08 +0000
ROA not before:           Tue 31 Mar 2026 07:52:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        153.122.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Mar 31 07:52:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B25E0F250B237EE6AD9F9ED2C5A0A1E344327DEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:41:45:6e:a0:7c:ac:83:9e:56:40:43:3f:
                    fc:e7:fc:6c:3e:d2:db:4d:71:d6:21:7d:62:ba:11:
                    d2:91:f4:b8:30:6d:c5:50:56:6d:eb:8b:6e:d1:0a:
                    20:48:e7:fd:87:22:93:61:9e:e3:7b:05:b5:25:f2:
                    46:02:59:ab:94:8e:57:f2:7e:2c:92:92:50:4e:8d:
                    20:dc:1d:83:ac:c8:40:cf:39:3c:f1:8a:ed:83:d2:
                    e6:2d:17:e7:52:81:e0:e7:c4:db:87:c4:5a:b8:6b:
                    c6:16:d5:5b:07:0d:77:7e:45:21:94:ae:bc:52:b4:
                    4d:55:ac:39:99:36:e2:b5:e6:93:a6:41:16:cc:72:
                    62:17:41:70:40:e9:a0:70:d1:c4:36:84:df:47:2e:
                    28:ac:03:fd:30:75:72:dd:ba:7e:de:7c:be:9c:5a:
                    fa:71:10:09:0d:9b:0a:a0:ac:c5:8d:5c:c7:c2:fc:
                    4b:e6:5c:f0:96:9e:c0:b7:5c:13:4a:4a:a1:0e:83:
                    ca:8d:75:36:2b:3e:ca:e2:84:38:46:68:f6:64:ee:
                    b0:de:11:d6:58:7c:72:c1:8a:6c:ee:1f:84:e4:cc:
                    c4:56:4f:c1:41:ee:15:96:13:41:f0:f2:2d:5a:0d:
                    12:bf:df:93:13:e9:63:3e:a4:a0:54:bb:dd:a3:91:
                    55:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5E:0F:25:0B:23:7E:E6:AD:9F:9E:D2:C5:A0:A1:E3:44:32:7D:EE
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/sl4PJQsjfuatn57SxaCh40Qyfe4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.122.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:7b:02:d1:a7:a0:2b:96:62:80:63:e0:48:b9:73:0e:8b:d6:
         03:e8:02:d0:b2:fc:3a:82:1c:04:e4:b9:d1:c4:63:4a:3c:68:
         2a:a8:89:97:86:d7:d8:38:53:f9:8a:77:8d:35:cd:01:77:7c:
         96:29:a6:9a:64:48:8f:e7:a7:01:39:33:a9:95:1f:bf:51:4d:
         73:ca:4c:8a:83:9e:b4:fb:12:47:ae:f9:07:f0:96:41:87:f0:
         b9:c7:09:f6:45:59:54:96:31:77:94:41:ca:5e:47:ef:77:38:
         71:a4:29:f4:9c:38:d4:4f:97:9b:e7:63:84:7d:7e:1e:a8:88:
         24:56:4b:92:aa:63:75:44:49:57:18:01:9b:78:b4:d2:2d:a0:
         89:40:64:07:91:02:3d:1a:46:29:33:94:41:a8:36:dd:5f:cd:
         07:10:44:0b:28:9d:7d:70:23:e2:93:c9:8e:1e:44:78:69:1c:
         d6:d1:aa:81:bd:80:83:24:b8:ed:b1:ac:57:68:cd:81:8c:18:
         c1:66:e8:b4:ce:be:36:e4:e7:92:c1:e7:ca:74:9f:a2:2c:24:
         53:41:6b:a0:bb:78:40:2e:ca:d0:18:4f:fc:ae:dd:fa:51:9b:
         fa:f4:e8:fe:1f:61:17:01:ab:d7:b9:8d:be:97:b5:76:1c:f6:
         59:85:94:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:03 2026 by rpki-client