Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/g9X2p_7zor4HRyn7tn2s2jhjwV4.roa
File:                     g9X2p_7zor4HRyn7tn2s2jhjwV4.roa (raw, json)
Hash identifier:          2S8LbzQJguRF/RlsO3WyAHCTjQyMnw82PqvQOBJIawk=
Subject key identifier:   83:D5:F6:A7:FE:F3:A2:BE:07:47:29:FB:B6:7D:AC:DA:38:63:C1:5E
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       77
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/g9X2p_7zor4HRyn7tn2s2jhjwV4.roa
Signing time:             Sun 01 Mar 2026 01:31:21 +0000
ROA not before:           Sun 01 Mar 2026 01:31:21 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     2500
IP address blocks:        203.178.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: Mar  1 01:31:21 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=83D5F6A7FEF3A2BE074729FBB67DACDA3863C15E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:70:ae:e2:77:a1:58:fd:b7:6c:7f:55:aa:
                    62:00:24:0d:27:5a:87:ba:f4:01:99:6c:5d:b5:6e:
                    8a:76:91:1a:21:99:7f:84:aa:49:13:d3:26:52:d1:
                    f6:96:bb:db:20:0e:a2:35:f6:95:ea:94:db:a9:e4:
                    d4:1c:aa:54:96:80:35:69:70:2f:37:13:1d:64:70:
                    0d:e9:49:a0:51:46:f9:8e:7e:41:4c:72:45:46:14:
                    70:f3:67:6c:53:f2:f9:e0:c0:a0:d8:3b:c3:72:3d:
                    8e:ac:39:35:6a:d7:70:ba:84:54:6e:5b:6f:04:b2:
                    68:bd:63:7a:d2:36:c3:f6:8b:7d:9b:a9:ed:d0:6e:
                    47:72:65:44:ea:1c:45:60:6f:11:fa:6a:aa:2f:1e:
                    83:18:a4:7d:f8:37:8b:76:02:0d:13:d1:82:b7:c6:
                    2c:4f:30:73:de:2c:0f:de:60:7a:39:28:e1:de:ad:
                    20:e8:81:7e:b8:e8:70:85:32:e5:88:64:d3:e7:d5:
                    87:c0:a3:98:17:a1:80:24:4e:56:e4:b5:0a:6b:e2:
                    97:b9:72:7e:0b:41:d1:a1:3d:05:7f:b5:f5:17:5f:
                    63:18:6a:72:96:ce:3f:84:91:c2:df:a3:d6:3c:51:
                    a1:cf:9b:66:bb:41:4f:5b:cf:78:de:2c:ea:5c:03:
                    d6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D5:F6:A7:FE:F3:A2:BE:07:47:29:FB:B6:7D:AC:DA:38:63:C1:5E
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/g9X2p_7zor4HRyn7tn2s2jhjwV4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.178.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         33:28:1b:8c:de:38:f6:e4:d8:d3:95:01:55:50:46:9b:f5:f0:
         77:6c:f4:1c:4b:fa:62:07:23:53:b9:0f:7b:fb:a9:3a:f1:72:
         4a:dc:86:8d:56:60:dd:87:3d:e2:ff:41:c7:6a:ef:dd:b4:9d:
         55:f3:d2:a2:ba:9e:40:03:cf:b5:6a:6e:e8:e3:a5:f5:fd:c9:
         a1:a4:b0:93:51:c9:5a:25:99:93:12:cd:a0:61:1f:7d:90:95:
         e3:71:4b:00:f4:15:fe:42:b1:c2:71:ba:65:44:0a:0e:53:17:
         f2:24:71:86:e3:e2:2b:41:34:be:8e:cc:ce:01:60:f6:67:e5:
         55:74:ed:65:ba:5f:8d:48:c0:9f:fa:2b:5f:c0:39:50:9b:1b:
         c0:52:0e:62:ef:f5:59:ce:38:9d:34:b9:6f:ab:f8:35:df:31:
         1f:23:2d:8a:08:17:3a:ce:d9:82:23:b3:6e:50:f2:53:49:86:
         db:8d:72:3c:2e:7d:5c:57:7a:a6:fd:cc:ad:a7:fc:de:49:b8:
         50:1c:9e:2e:10:c0:97:9c:f9:74:89:5c:20:86:04:10:01:f6:
         36:cf:91:3f:6c:86:30:9a:2a:f2:35:83:2d:30:05:bb:7b:ee:
         85:a3:fe:05:6c:19:ef:88:44:52:76:6d:36:a5:91:a5:44:95:
         ce:58:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:01:40 2026 by rpki-client