Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/MDvdDYPAkL1Ep-4p49aFOI9N4Ls.roa
File:                     MDvdDYPAkL1Ep-4p49aFOI9N4Ls.roa (raw, json)
Hash identifier:          ROjnosYTgcWu9GSEov3GXhIXCO15uEAwPpRxEcEEQfM=
Subject key identifier:   30:3B:DD:0D:83:C0:90:BD:44:A7:EE:29:E3:D6:85:38:8F:4D:E0:BB
Certificate issuer:       /CN=3379E8E6535F01A7EDF24705F93EFCEDFF29BA48
Certificate serial:       0B
Authority key identifier: 33:79:E8:E6:53:5F:01:A7:ED:F2:47:05:F9:3E:FC:ED:FF:29:BA:48
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M3no5lNfAaft8kcF-T787f8pukg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/MDvdDYPAkL1Ep-4p49aFOI9N4Ls.roa
Signing time:             Mon 14 Sep 2026 07:12:10 +0000
ROA not before:           Mon 14 Sep 2026 07:12:10 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        81.203.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/M3no5lNfAaft8kcF-T787f8pukg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/M3no5lNfAaft8kcF-T787f8pukg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M3no5lNfAaft8kcF-T787f8pukg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 14:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3379E8E6535F01A7EDF24705F93EFCEDFF29BA48
        Validity
            Not Before: Sep 14 07:12:10 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=303BDD0D83C090BD44A7EE29E3D685388F4DE0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:1d:99:43:5f:e4:2f:7c:8d:21:01:42:8b:
                    6d:0c:9c:2c:22:2d:5e:35:02:8d:bf:ab:e1:3a:43:
                    c5:be:64:6b:ee:a8:e0:eb:e8:13:49:0e:71:e9:07:
                    e5:ae:84:82:2b:1d:80:f0:08:97:cb:73:c3:8d:5b:
                    63:ac:88:e9:ce:7a:5f:b0:60:01:ca:ab:66:83:8e:
                    44:95:11:4f:c7:46:5b:a6:61:41:64:bb:65:5b:34:
                    1e:db:05:c1:7e:77:cd:cd:f3:83:84:bd:37:09:99:
                    fa:b9:3c:7a:61:c0:41:86:c2:e8:e1:e6:df:55:8f:
                    f2:53:d9:84:74:cc:5a:b1:e7:25:9f:9f:1d:7f:e7:
                    ab:5d:bf:b7:b2:8c:a5:54:78:51:b2:75:3b:93:f3:
                    e3:38:6e:97:c9:74:07:f0:a2:cd:eb:06:ac:ee:c1:
                    2e:36:66:56:4f:5b:46:64:da:31:d5:ae:5d:32:13:
                    76:4a:38:5e:c8:bf:e9:d8:03:57:98:72:5a:1d:69:
                    f9:08:ca:f8:78:57:39:c0:af:25:cb:e1:ca:92:ea:
                    d4:75:1a:23:fd:b4:a7:04:11:6a:bd:d9:c6:ac:93:
                    37:f3:d8:07:80:54:cc:62:fb:db:af:59:cc:b0:d4:
                    c3:0d:83:43:96:80:88:dd:0b:0f:05:d4:67:24:24:
                    58:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3B:DD:0D:83:C0:90:BD:44:A7:EE:29:E3:D6:85:38:8F:4D:E0:BB
            X509v3 Authority Key Identifier:
                keyid:33:79:E8:E6:53:5F:01:A7:ED:F2:47:05:F9:3E:FC:ED:FF:29:BA:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/M3no5lNfAaft8kcF-T787f8pukg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M3no5lNfAaft8kcF-T787f8pukg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/MDvdDYPAkL1Ep-4p49aFOI9N4Ls.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.203.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:a1:51:bb:d3:f2:3c:26:5a:ec:2e:1c:e6:31:6a:aa:9d:07:
         27:3d:09:26:bd:bf:0b:f2:2c:a4:c0:8d:fc:ef:15:76:8f:fd:
         87:8f:cb:76:46:c0:a0:37:bc:8e:42:55:aa:27:76:63:91:51:
         ab:26:1d:bd:c3:48:a7:c7:4e:01:7a:48:f2:fa:f5:68:e7:d4:
         93:2d:de:25:a9:22:59:e5:68:d3:4b:7e:0a:54:c2:b4:c2:48:
         9d:60:c0:2a:44:c2:1a:74:35:34:2b:c6:17:a5:c8:d9:9b:9d:
         1a:b5:d4:e9:9f:97:f1:c2:53:56:87:58:4e:a1:ac:e2:3d:af:
         4a:db:0a:98:1e:df:9f:6a:17:4f:bb:12:75:1f:1f:e3:d8:ef:
         ac:2c:f6:2d:66:08:79:c9:e6:e9:87:a4:5e:78:ca:6d:c8:39:
         78:e0:76:ea:4f:c4:84:cb:ec:ca:b3:92:18:4c:9d:4d:fa:8f:
         dc:24:09:aa:03:e3:62:9a:c3:04:d7:38:6f:52:15:8f:a5:43:
         bd:48:2c:1b:70:04:4d:e8:47:81:62:57:f0:bd:5a:eb:26:cf:
         ed:a8:27:9a:ce:5a:10:9a:73:92:bc:c6:f4:1f:91:6d:39:24:
         6a:a2:b1:55:bb:eb:86:91:9a:5b:69:46:cc:16:e2:46:ec:18:
         b3:14:52:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:08 2026 by rpki-client