Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/803/MpsJo-SuF9KgbeH3sUD492U0s9A.roa
File:                     MpsJo-SuF9KgbeH3sUD492U0s9A.roa (raw, json)
Hash identifier:          rjWygLfAbm+I8AzbArM9Fdr8tKqYWuX4Kf7EHVhuBJI=
Subject key identifier:   32:9B:09:A3:E4:AE:17:D2:A0:6D:E1:F7:B1:40:F8:F7:65:34:B3:D0
Certificate issuer:       /CN=E98C96D61ADABE6F87001F7231581BB31FA87C98
Certificate serial:       1B
Authority key identifier: E9:8C:96:D6:1A:DA:BE:6F:87:00:1F:72:31:58:1B:B3:1F:A8:7C:98
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6YyW1hravm-HAB9yMVgbsx-ofJg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/MpsJo-SuF9KgbeH3sUD492U0s9A.roa
Signing time:             Tue 31 Mar 2026 08:43:45 +0000
ROA not before:           Tue 31 Mar 2026 08:43:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18281
IP address blocks:        157.5.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/6YyW1hravm-HAB9yMVgbsx-ofJg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/6YyW1hravm-HAB9yMVgbsx-ofJg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6YyW1hravm-HAB9yMVgbsx-ofJg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98C96D61ADABE6F87001F7231581BB31FA87C98
        Validity
            Not Before: Mar 31 08:43:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=329B09A3E4AE17D2A06DE1F7B140F8F76534B3D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3c:52:a0:a5:cd:20:0d:20:84:e2:1b:ae:79:
                    67:d6:fc:f5:21:56:56:5c:c7:c5:eb:91:2b:90:9d:
                    e7:51:c4:2f:3e:4c:03:ed:97:81:6f:2c:a2:f8:93:
                    ba:e0:d1:95:d2:ce:7e:24:de:67:30:7b:7f:2e:17:
                    1c:07:41:38:79:f5:80:47:ce:42:97:ee:1b:d1:ec:
                    50:cb:14:86:53:a2:6e:93:3e:20:d4:9d:f7:22:96:
                    f7:df:24:99:5f:1e:ee:3f:0e:d7:35:98:b6:21:eb:
                    3d:2d:28:9a:f5:3f:9e:c8:ef:26:43:0a:06:ce:8e:
                    5c:6f:80:00:d3:43:b1:84:7b:c2:a5:e1:5c:81:96:
                    7a:57:01:68:bb:af:f5:e6:8c:cb:7c:5a:93:49:86:
                    14:8c:88:3c:d6:04:ea:ba:df:30:d9:fc:f2:a1:82:
                    5f:1c:39:c7:e3:0b:d1:d4:4f:57:18:a9:0b:dc:71:
                    44:6f:a5:c6:e8:24:3c:fb:d0:4c:a3:63:db:2d:fa:
                    61:5a:59:c5:d1:ea:c3:c5:e0:a4:16:31:50:be:f3:
                    94:e0:2e:00:84:e8:9d:82:37:b4:b5:ca:8b:c7:e9:
                    d5:36:7a:bb:30:b8:73:8c:e8:f3:d3:80:3b:9e:5e:
                    7d:d4:a7:7e:f9:8a:ee:07:ae:9c:07:51:cf:7a:8a:
                    40:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9B:09:A3:E4:AE:17:D2:A0:6D:E1:F7:B1:40:F8:F7:65:34:B3:D0
            X509v3 Authority Key Identifier:
                keyid:E9:8C:96:D6:1A:DA:BE:6F:87:00:1F:72:31:58:1B:B3:1F:A8:7C:98

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/6YyW1hravm-HAB9yMVgbsx-ofJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6YyW1hravm-HAB9yMVgbsx-ofJg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/MpsJo-SuF9KgbeH3sUD492U0s9A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:41:f5:2f:7a:fd:d8:39:1b:17:68:79:25:11:1d:4c:f5:e3:
         58:dc:aa:45:09:95:1f:53:99:95:ea:cc:ef:b8:4f:c5:98:0f:
         bf:df:ec:1f:63:55:db:53:85:c8:51:c3:5b:df:19:cc:21:75:
         07:8b:13:ce:e8:fe:1f:83:b8:7d:0d:cd:cd:71:cc:39:f2:24:
         28:a5:17:03:96:8e:86:4c:f2:0a:14:6f:02:7c:f9:0b:4e:b6:
         7a:12:87:06:e6:bc:78:01:48:ef:67:bd:52:1b:e3:43:41:9f:
         85:f6:3f:c1:a4:1d:03:e3:7c:2e:77:06:f9:79:f6:e7:6f:8a:
         f4:db:70:68:b6:3c:59:18:1d:f0:3a:e2:2e:2d:57:90:24:7d:
         20:28:5c:11:d8:12:cb:35:2c:2b:d0:4e:e5:5a:e3:06:4b:df:
         60:49:ed:89:39:5e:5f:f2:e4:a0:c1:8a:8d:28:b8:81:18:a7:
         16:19:8e:47:e0:e2:63:1e:b3:c8:bd:09:89:77:7c:0d:97:0b:
         c2:6a:37:1e:4a:ba:50:aa:62:10:49:95:01:aa:4d:82:0b:5c:
         a8:08:59:eb:8b:7d:51:c3:1d:b5:4c:92:23:3e:7f:b9:2d:6a:
         a8:da:99:d7:58:c4:c6:e5:11:b5:bc:c3:b9:3b:4f:05:34:ba:
         d2:fa:79:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:28 2026 by rpki-client