Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/8qFkll6FOXCV04OT8vEs5GqkNZw.roa
File:                     8qFkll6FOXCV04OT8vEs5GqkNZw.roa (raw, json)
Hash identifier:          lyXGLw4RH7hpQHci5LoUbv7r91SVyJOwvDO7QAIrSYA=
Subject key identifier:   F2:A1:64:96:5E:85:39:70:95:D3:83:93:F2:F1:2C:E4:6A:A4:35:9C
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       48
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/8qFkll6FOXCV04OT8vEs5GqkNZw.roa
Signing time:             Tue 31 Mar 2026 08:34:38 +0000
ROA not before:           Tue 31 Mar 2026 08:34:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18121
IP address blocks:        202.88.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Mar 31 08:34:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F2A164965E85397095D38393F2F12CE46AA4359C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b1:e6:f6:7b:cb:59:88:45:73:1a:d4:8a:50:
                    7b:0e:d9:da:80:f6:fe:4b:c3:90:7d:0d:c0:50:ca:
                    0b:07:bd:f2:41:52:9f:0e:53:a8:4c:7e:e3:ab:a3:
                    80:09:1a:2e:0d:cb:af:83:46:72:d2:40:92:28:27:
                    36:c4:68:3f:7a:ba:b9:ca:e4:d9:77:e7:60:b4:4a:
                    bd:d1:5a:64:ca:fd:0d:b4:ec:04:4c:75:7c:5d:ab:
                    d7:e4:69:53:ed:25:df:49:76:8d:50:02:b7:bb:0e:
                    f1:b2:c0:a0:0b:93:ad:ab:a6:41:bf:c8:28:33:80:
                    e2:c1:66:9f:3e:c9:74:f3:da:e0:0b:a8:31:53:b0:
                    fe:ef:25:dd:9b:b8:3d:7e:b1:14:ac:57:1f:2c:85:
                    f7:cf:17:39:a6:e7:4f:31:a2:35:0b:e9:aa:3b:a2:
                    8d:43:1c:92:f3:c1:da:f1:0f:c2:4a:c9:04:e1:90:
                    3c:69:25:c3:ac:d5:c2:1b:ba:9a:26:4f:99:61:fb:
                    20:ad:9a:01:81:ca:da:42:fe:0e:9b:28:4b:11:f4:
                    27:c6:a9:6b:c1:02:e2:36:b6:e5:d9:3f:90:24:74:
                    0b:15:8e:2f:47:5f:92:63:e3:83:91:21:00:2b:00:
                    ba:a8:a7:c1:d1:56:7a:c2:a9:1f:70:d5:f3:92:f2:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A1:64:96:5E:85:39:70:95:D3:83:93:F2:F1:2C:E4:6A:A4:35:9C
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/8qFkll6FOXCV04OT8vEs5GqkNZw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.88.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:8f:f7:3d:62:ce:1b:74:17:77:0d:d1:9b:94:ec:08:19:6e:
         b5:4c:bf:40:88:02:ea:b4:01:95:62:61:f9:84:a0:95:0d:52:
         01:d6:50:c3:a2:6b:24:13:b8:91:06:a1:48:83:3d:54:4b:ee:
         2b:f5:9b:92:db:d3:b8:1e:6d:25:85:7d:4f:8e:c4:9c:5c:c2:
         84:7d:52:1f:2a:06:63:07:74:b8:db:0f:0e:91:bd:04:8c:2a:
         a6:87:88:4c:04:e2:15:c1:6c:45:6a:04:7d:2c:77:2a:56:02:
         e9:3d:bc:6e:69:3c:3e:16:e9:83:19:e1:64:62:3d:e6:a6:42:
         6d:10:2d:66:f5:b6:98:8b:5a:8c:fb:45:87:44:9c:cb:ec:70:
         68:a7:c7:6d:a0:cf:64:8c:69:7f:ee:e0:15:0f:d9:ce:ae:22:
         4f:85:e7:34:73:d1:b6:78:23:3c:7f:e8:b8:a8:3a:c0:3a:fb:
         da:d3:f9:39:ef:95:1a:61:f5:e6:8c:30:a7:87:ae:ef:0f:0a:
         66:7f:9b:cb:2c:db:b3:f1:67:9a:08:af:2e:dc:ff:b9:36:97:
         69:0b:34:d4:00:3f:96:9f:67:a8:bc:f8:d0:27:9b:f7:84:91:
         07:dd:a9:77:05:54:76:ce:dc:fc:5b:b1:1f:80:df:ea:bf:5b:
         8f:49:ec:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:31 2026 by rpki-client