Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/_RUUFcbNvP5avk6VK_llK7WXjTE.roa
File:                     _RUUFcbNvP5avk6VK_llK7WXjTE.roa (raw, json)
Hash identifier:          omXy55lH4zgvvGsqeP8QrOMdXCZzWZKoZrlEToRzTcI=
Subject key identifier:   FD:15:14:15:C6:CD:BC:FE:5A:BE:4E:95:2B:F9:65:2B:B5:97:8D:31
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       58
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/_RUUFcbNvP5avk6VK_llK7WXjTE.roa
Signing time:             Tue 31 Mar 2026 08:33:49 +0000
ROA not before:           Tue 31 Mar 2026 08:33:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24259
IP address blocks:        202.127.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Mar 31 08:33:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FD151415C6CDBCFE5ABE4E952BF9652BB5978D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:ea:21:d6:27:f1:6a:15:44:3e:0e:b7:3b:
                    97:31:bc:56:12:7a:84:14:84:b5:3c:40:c4:a1:41:
                    b7:41:72:4e:73:8e:b6:b7:a8:77:b0:ab:c4:14:90:
                    c8:cf:8a:fc:c8:a8:1f:60:04:07:bb:2d:de:0d:72:
                    49:e8:66:ac:44:1b:2e:b3:2c:94:3e:d3:2e:1d:c4:
                    61:64:d4:53:46:24:b9:83:b0:1d:51:5c:0f:a2:65:
                    da:48:59:c6:63:06:bb:84:96:df:9a:cf:d0:80:aa:
                    70:73:fc:df:2e:00:fc:10:45:8e:b8:53:b3:d6:2c:
                    e9:b1:2b:8f:10:83:b2:78:cf:2c:ac:24:63:7e:2e:
                    00:7d:6d:05:7e:37:bf:fa:f2:b1:a3:0b:8c:1a:b8:
                    43:02:9f:4f:3b:f0:66:ca:45:3e:a8:ef:be:42:94:
                    81:68:15:d5:b3:dd:b1:c5:54:1f:a1:41:89:0c:d4:
                    f7:a5:b8:35:49:33:0d:c6:77:7b:ad:90:3a:60:fc:
                    f4:6a:c6:c3:ff:ee:0e:15:32:bd:36:6e:0e:74:2c:
                    05:ee:12:47:58:5c:3b:97:43:0b:0b:36:38:0f:3b:
                    58:48:c1:17:bc:55:71:63:df:1f:6f:1e:eb:5a:c5:
                    ed:2d:a4:65:59:45:91:48:c8:54:c1:8f:14:95:f4:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:15:14:15:C6:CD:BC:FE:5A:BE:4E:95:2B:F9:65:2B:B5:97:8D:31
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/_RUUFcbNvP5avk6VK_llK7WXjTE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:3f:bd:20:f1:e1:8c:8e:bc:a0:d8:ce:ee:a2:bf:ee:3a:2c:
         d0:fc:69:11:dd:b1:e9:ad:76:66:cf:10:ea:55:5b:59:f8:4a:
         80:50:c7:a4:4c:bf:76:23:9f:c8:31:6d:e0:d7:54:70:d7:e1:
         8c:60:31:6b:dd:23:0f:a4:7e:46:d5:c4:be:ea:61:cc:d1:c5:
         5a:6b:7b:63:3c:8a:29:e2:8b:1b:3d:fa:33:60:f9:b4:a8:4b:
         d4:43:09:d9:85:6a:56:56:1e:9c:9d:c8:d6:f8:6f:50:c8:5b:
         8b:04:12:3c:bf:95:5d:c2:f0:6e:54:a7:6e:5e:ac:59:b2:b7:
         04:37:53:a1:bc:f3:a6:a2:c8:d9:73:fd:71:ea:41:bd:a6:94:
         e9:b3:42:43:31:d9:08:91:f8:87:0c:c3:c6:0f:d7:c9:a4:51:
         05:78:0d:85:8c:cc:57:e5:de:25:0c:3e:1b:19:39:5a:a2:74:
         4a:90:e8:c1:46:ca:96:d3:92:29:97:ae:a8:2d:e8:f2:0d:c0:
         bf:9d:93:1e:0f:78:38:1d:c2:ad:1c:56:a3:55:82:e2:fc:7f:
         4d:08:89:19:0f:b5:fe:a5:0d:7e:7f:8f:21:aa:a7:43:48:a2:
         ae:6c:d9:36:3e:2b:2d:50:06:21:b1:69:95:ac:7e:b4:f4:a5:
         01:0c:a0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:32 2026 by rpki-client