Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/Mm9JVSFylFX3xQ_Id-KaVHlnT3M.roa
File:                     Mm9JVSFylFX3xQ_Id-KaVHlnT3M.roa (raw, json)
Hash identifier:          sBGbIyf4rKrTZt+eRigx0gVZVVXzXb4n1rSUw++VWQU=
Subject key identifier:   32:6F:49:55:21:72:94:55:F7:C5:0F:C8:77:E2:9A:54:79:67:4F:73
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       36
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/Mm9JVSFylFX3xQ_Id-KaVHlnT3M.roa
Signing time:             Sun 01 Mar 2026 01:35:54 +0000
ROA not before:           Sun 01 Mar 2026 01:35:54 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     18129
IP address blocks:        202.238.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Mar  1 01:35:54 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=326F495521729455F7C50FC877E29A5479674F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:4f:35:3a:86:19:dc:70:a9:ec:34:62:7c:
                    23:f4:b5:84:f5:53:13:e6:89:aa:e6:71:f4:2c:cd:
                    ab:35:11:0e:67:12:68:82:25:26:d6:a2:bc:db:de:
                    3b:7b:2e:97:90:c7:2b:90:06:7b:07:2f:21:09:bb:
                    b4:04:bd:8b:f2:a2:39:9a:c5:97:32:28:cb:5b:fb:
                    a3:a8:87:f4:3a:9b:72:90:b5:44:d7:c9:e0:50:d6:
                    0e:bc:07:5f:04:70:ee:54:22:0e:8a:ec:2a:d7:14:
                    95:c4:16:f0:8b:b0:1c:a3:4a:b6:e0:5d:0f:5f:c2:
                    cb:9e:2c:38:53:d4:31:27:43:9d:b2:d3:db:c8:7f:
                    5d:bb:fb:cf:74:1d:6e:a1:56:4f:67:70:7d:2e:08:
                    c9:27:58:c5:77:05:3e:f6:d0:98:71:ad:22:17:bb:
                    e5:2d:6f:69:f1:40:f8:1f:44:b7:d1:bf:37:49:60:
                    17:b9:2f:86:2c:1c:56:2e:36:d2:da:36:19:c0:d7:
                    06:53:a5:f0:c9:cb:c8:e2:95:05:d3:9a:ab:15:26:
                    89:2d:5a:24:d4:9c:e7:9b:3b:ae:7f:75:85:d8:91:
                    11:d4:7f:63:9a:7a:11:c8:9b:17:43:e7:b6:31:d9:
                    07:c0:82:6a:37:dc:cf:05:e9:9d:15:1c:77:9b:e3:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6F:49:55:21:72:94:55:F7:C5:0F:C8:77:E2:9A:54:79:67:4F:73
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/Mm9JVSFylFX3xQ_Id-KaVHlnT3M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.238.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:f4:a1:42:fb:64:05:f8:2a:25:e1:85:db:62:87:f6:ed:6e:
         bd:79:0a:bb:27:23:bc:e7:3c:5f:92:5b:a3:61:4f:0e:ad:20:
         4b:7e:2a:2b:e1:04:39:7a:6c:e6:c3:fa:31:69:0b:24:f1:5d:
         e8:24:1e:c8:fc:2f:3d:4e:6e:e7:e9:d3:0d:c9:38:c0:4a:85:
         7c:af:e3:98:fb:f4:5f:3b:23:29:df:5c:ef:4f:1a:85:4a:f7:
         63:72:64:cc:f1:75:43:99:7a:b0:09:bd:62:35:e8:30:54:cc:
         b0:8a:b2:f6:d4:34:88:c9:f7:c9:a9:24:d5:1c:e6:50:8e:aa:
         26:e9:b5:14:ce:6e:bc:bc:84:34:40:ed:7b:a4:3f:b4:9c:63:
         bc:d1:58:c5:5f:aa:34:e3:10:ff:ba:9b:10:84:60:3c:81:d5:
         5e:ee:33:40:5b:8b:67:e8:04:57:1a:eb:03:37:0c:41:e9:2b:
         1b:04:b7:4f:62:02:8e:5d:2a:95:a1:7a:31:d0:f8:c7:92:ce:
         3c:96:0b:4d:3d:aa:8b:c3:c5:d0:e9:2d:78:77:a4:3d:c9:79:
         3d:c8:cb:f0:f3:f2:82:62:bd:f1:27:aa:34:c9:95:a5:39:70:
         20:fc:ac:db:b1:1c:d0:e7:31:f0:10:28:4c:db:0c:f6:14:5f:
         b1:00:8f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:32 2026 by rpki-client