Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/ClGj6MzjU9Y-rCkXHDwheST1JDM.roa
File:                     ClGj6MzjU9Y-rCkXHDwheST1JDM.roa (raw, json)
Hash identifier:          uDjYLMo+buvJ/rDHTkQUfT0oPMugX08YJY6fmhSAzJQ=
Subject key identifier:   0A:51:A3:E8:CC:E3:53:D6:3E:AC:29:17:1C:3C:21:79:24:F5:24:33
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       AC
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ClGj6MzjU9Y-rCkXHDwheST1JDM.roa
Signing time:             Tue 31 Mar 2026 07:38:51 +0000
ROA not before:           Tue 31 Mar 2026 07:38:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9621
IP address blocks:        218.40.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Mar 31 07:38:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0A51A3E8CCE353D63EAC29171C3C217924F52433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:71:02:28:df:8b:c7:61:9b:18:dc:8a:53:ac:
                    f7:ae:55:73:14:54:de:7d:ec:a7:bc:0f:0a:90:7c:
                    59:e9:59:97:67:48:d0:06:ac:91:4e:d3:6c:33:fc:
                    35:f8:0c:cd:2b:b5:fd:25:56:89:44:61:85:3e:32:
                    a5:dd:79:83:87:bb:1c:39:bc:6e:fe:67:22:2d:32:
                    3d:41:ba:9c:32:e2:a1:9d:9f:a4:dd:a3:b4:72:9f:
                    c4:49:e5:a1:ab:a4:18:69:a4:11:06:36:8e:36:f1:
                    a2:54:7e:25:64:35:88:f8:1f:1b:b9:7c:e3:c7:38:
                    86:4c:d5:03:dd:48:f8:f5:ec:5d:10:7c:6b:6a:a3:
                    9e:7c:55:13:2d:2e:30:bd:3d:f1:64:c8:a7:8a:38:
                    92:4e:19:ab:6c:19:97:d2:29:aa:71:f1:d8:a4:7a:
                    2a:44:9c:56:37:52:c5:72:70:da:b8:5f:5a:5e:b6:
                    52:68:57:4d:78:d4:41:ee:70:ee:03:17:62:cc:5c:
                    d7:d2:57:32:13:f5:98:10:9b:63:77:33:58:49:da:
                    15:6b:fa:21:e3:d7:ee:04:dd:f8:76:df:6d:df:b4:
                    ab:79:76:af:1d:77:51:4b:ef:9e:46:e2:39:9f:8a:
                    19:3b:01:0e:8b:85:f8:67:2e:42:a8:ba:d7:90:c4:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:51:A3:E8:CC:E3:53:D6:3E:AC:29:17:1C:3C:21:79:24:F5:24:33
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ClGj6MzjU9Y-rCkXHDwheST1JDM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:14:a4:fe:ab:55:0f:85:45:f9:8f:97:88:b7:a2:cb:92:36:
         a7:64:88:0e:cb:d0:9f:23:88:ad:09:ba:c4:82:8d:01:89:c7:
         ca:d5:54:52:08:a5:83:9a:93:e1:ca:f4:f8:d9:27:e3:2a:e6:
         e3:97:d9:34:e4:e2:05:7f:f8:cf:df:c4:56:74:f5:28:e1:c0:
         4f:a1:6b:e3:4f:ed:b0:88:6c:7b:de:a3:df:45:f1:a1:aa:ca:
         d8:25:d2:b4:a3:60:ac:07:96:69:b9:d9:28:54:27:f2:d8:27:
         62:f1:7a:06:05:fb:3d:3c:19:e5:ee:9e:33:31:bd:04:3a:ca:
         e4:64:aa:b0:ad:32:70:98:39:19:13:02:d7:ca:d9:ca:16:bb:
         a1:9f:9d:ef:c5:2f:64:9c:1c:e8:84:46:73:a7:70:ff:94:f2:
         8d:c9:18:13:fb:2f:a7:59:aa:a7:9d:4a:73:18:7f:01:6b:9b:
         88:e0:c3:3b:60:a4:97:3c:62:d5:c4:32:05:66:1d:d2:28:b2:
         de:73:8d:92:27:6a:5d:13:4b:db:b2:c0:e1:55:7f:d8:c7:66:
         69:ef:78:88:c7:6d:64:79:f9:70:81:f3:d9:93:d4:27:3e:44:
         1d:12:b8:75:c3:a5:92:6d:1d:3e:97:9f:71:e3:a9:23:43:1e:
         57:ee:a7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:26 2026 by rpki-client