Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/UWq1DUE8O1R8J3owY9y3xrLHcm4.roa
File:                     UWq1DUE8O1R8J3owY9y3xrLHcm4.roa (raw, json)
Hash identifier:          DQu4+vKCRBHnHJN0BFokQVTtxaKoOcl3HG5bl/WkBYM=
Subject key identifier:   51:6A:B5:0D:41:3C:3B:54:7C:27:7A:30:63:DC:B7:C6:B2:C7:72:6E
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       58
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/UWq1DUE8O1R8J3owY9y3xrLHcm4.roa
Signing time:             Tue 31 Mar 2026 08:16:50 +0000
ROA not before:           Tue 31 Mar 2026 08:16:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17958
IP address blocks:        218.40.96.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 12:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Mar 31 08:16:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=516AB50D413C3B547C277A3063DCB7C6B2C7726E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:04:f5:be:45:93:c1:de:14:80:a2:dd:4a:
                    a6:f4:ba:a3:ad:6c:8e:93:ac:a3:8b:0a:46:b1:f4:
                    13:18:b2:c2:10:51:11:c7:e1:03:a0:e1:1f:17:b8:
                    d7:83:3b:fc:43:07:05:13:b8:96:ed:67:ee:d9:32:
                    f9:5d:30:a8:e0:dc:08:54:92:56:3b:1c:14:ea:f2:
                    6f:2a:23:6d:87:81:c9:bd:bd:11:f9:9a:e6:36:fa:
                    98:9b:1f:4e:2b:1b:bd:76:f6:34:ca:b7:1d:bc:26:
                    19:2a:22:7b:8f:33:ed:ea:86:30:27:94:85:73:c6:
                    3a:ff:b1:68:ab:d3:a9:4a:8f:8d:60:04:5d:4b:dd:
                    6f:88:0a:26:d4:36:f6:65:27:83:b4:56:c7:b8:d0:
                    06:a5:46:6b:a5:32:6f:2a:85:e5:63:c0:df:51:35:
                    e3:82:b7:8e:2c:31:f2:49:19:ec:0c:7a:0c:40:02:
                    4a:60:01:59:e6:b5:bb:ba:55:30:a7:25:ef:20:fe:
                    b0:24:82:a2:41:29:27:53:fb:09:53:04:7f:2c:cf:
                    73:db:58:56:35:4b:0c:02:1c:e9:9a:b3:7b:fd:df:
                    75:b9:4a:1a:b8:16:03:17:a5:70:68:0b:b5:0d:74:
                    04:a4:fb:36:e1:44:15:85:6c:bf:ca:a8:6c:e2:7d:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6A:B5:0D:41:3C:3B:54:7C:27:7A:30:63:DC:B7:C6:B2:C7:72:6E
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/UWq1DUE8O1R8J3owY9y3xrLHcm4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:1b:3f:0e:be:2d:4c:37:f2:bc:5e:5e:a3:0e:42:e1:53:99:
         29:25:7b:7f:69:94:24:c0:c0:16:27:d9:33:3a:9c:26:ac:3c:
         34:8b:20:82:a8:ce:5d:2f:d6:ed:4f:22:8f:a6:11:c9:38:70:
         14:13:66:d9:ac:b7:ff:49:36:76:bb:e6:71:ff:ff:68:9e:ee:
         59:f8:5e:4b:4a:da:73:e5:23:31:e6:9d:af:b7:6b:7a:bc:e4:
         57:a7:35:9e:e5:e3:60:18:40:1b:3f:8e:87:59:71:7f:a1:8e:
         24:58:c6:ff:dd:e8:b3:bf:79:89:51:44:e0:e7:43:44:ce:c6:
         ed:05:f8:d0:97:ea:81:bc:a4:9f:7c:1c:56:83:e1:4d:89:88:
         3f:4c:ee:c5:e8:21:12:72:a5:1d:ed:a8:59:40:c2:4b:ec:c2:
         ce:57:ef:66:6a:73:3b:1c:42:7e:7e:b6:1a:a3:72:cf:56:aa:
         c1:21:d5:54:0c:91:83:29:3f:4a:4d:a6:0b:56:78:8f:a5:ad:
         ce:2a:0a:9a:09:35:2b:d0:7e:98:bc:12:c7:69:35:9d:fd:e1:
         2b:d6:5d:3c:9e:dc:eb:6b:d9:bb:72:4f:1d:aa:a6:01:cc:4b:
         41:26:96:cc:82:b0:00:96:5d:0b:43:2a:03:0f:df:47:2b:91:
         9f:82:e7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:18:56 2026 by rpki-client