Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/My2J5uMY3Z9864f5d0ew4tHNVVo.roa
File:                     My2J5uMY3Z9864f5d0ew4tHNVVo.roa (raw, json)
Hash identifier:          gLjt7DGxS6KhuA3oG8CswuluzTw6ngvjyIra+QbI+uc=
Subject key identifier:   33:2D:89:E6:E3:18:DD:9F:7C:EB:87:F9:77:47:B0:E2:D1:CD:55:5A
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       0101
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/My2J5uMY3Z9864f5d0ew4tHNVVo.roa
Signing time:             Tue 31 Mar 2026 07:39:11 +0000
ROA not before:           Tue 31 Mar 2026 07:39:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2518
IP address blocks:        49.129.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Mar 31 07:39:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=332D89E6E318DD9F7CEB87F97747B0E2D1CD555A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:f7:99:f8:a8:f8:84:92:7d:14:3e:02:ec:
                    f9:4c:e3:ed:76:6d:4c:ca:1e:bb:1b:c3:0c:38:48:
                    e2:1e:4b:a0:01:6d:e3:55:01:3d:b9:86:b6:b6:e0:
                    be:68:43:21:58:04:2e:0a:81:e9:fd:7b:5f:f8:8e:
                    67:56:c0:37:39:7b:33:e3:da:6c:cd:0e:9d:54:6b:
                    be:b8:69:2f:84:78:b4:79:ab:68:15:99:49:e5:a3:
                    5c:5e:a2:17:1a:7a:32:17:9f:05:d6:0d:1a:11:be:
                    20:ef:f0:e6:2b:a6:89:bf:d1:91:bc:50:b5:3d:ba:
                    26:ad:1f:63:85:db:82:b4:6f:cb:c3:96:cd:30:77:
                    e7:b7:6e:f5:89:a6:bb:be:69:80:04:58:a6:e0:b6:
                    90:b0:e5:e4:d0:77:90:08:44:d1:06:3b:93:5e:cd:
                    71:97:15:ec:1e:9c:a3:9c:30:a3:38:7c:29:6d:90:
                    33:e6:c2:36:a9:d9:5a:0a:cc:53:59:3f:83:84:0c:
                    5d:dc:d6:7a:dc:01:a5:bf:a2:01:a2:3d:ab:4f:a7:
                    8b:5d:10:da:21:03:f5:cb:10:bf:e2:bf:ed:53:20:
                    1c:21:aa:a2:43:fc:2e:b1:79:6f:46:3b:5d:43:7f:
                    4e:47:f2:10:9e:c8:a7:1a:49:5e:93:4d:fa:c4:fb:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2D:89:E6:E3:18:DD:9F:7C:EB:87:F9:77:47:B0:E2:D1:CD:55:5A
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/My2J5uMY3Z9864f5d0ew4tHNVVo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:6c:86:ac:5a:15:54:aa:e3:24:21:71:47:c6:f1:d9:a5:23:
         79:b3:52:1e:02:44:98:66:6f:2c:e3:96:cd:db:f2:cb:7b:e4:
         c9:38:32:bf:d0:4e:1c:10:35:fd:c2:ed:67:23:0e:b4:14:08:
         4d:13:f1:76:03:62:f8:9e:71:33:da:fb:ad:a7:16:87:93:98:
         26:7a:2f:c4:44:8d:78:b3:24:75:96:81:b9:61:d0:5c:20:25:
         24:b5:94:b4:fb:05:6d:4b:87:4a:52:08:7a:7c:04:3b:21:74:
         a3:66:56:a5:60:af:30:e2:a0:23:f5:82:21:90:54:7d:26:5b:
         2b:69:17:46:a3:c5:3c:29:5c:03:b7:66:fd:99:43:a1:9b:e2:
         76:fb:81:48:3a:32:9b:34:55:e0:81:5a:90:bb:49:08:29:35:
         a0:d3:9b:65:50:66:c9:a0:33:92:6f:bf:6b:22:fe:f8:29:4d:
         e2:6e:12:0c:d1:99:63:52:f5:54:79:69:7c:23:81:2a:bf:09:
         b3:b5:fe:5b:45:b5:b7:03:d1:fa:fc:9f:9e:72:a9:93:1f:c9:
         b2:76:a9:b7:0b:dd:c5:06:f9:92:1c:60:81:aa:99:c9:98:cf:
         83:ec:22:9e:fd:53:25:ce:7f:a4:01:7b:dc:45:35:d7:3d:9e:
         7f:c3:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:21 2026 by rpki-client