Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/QTBrzCaL3w3iS5BF5QN4J6JANfA.roa
File:                     QTBrzCaL3w3iS5BF5QN4J6JANfA.roa (raw, json)
Hash identifier:          NsXUUfAJger1aZtfeAf3kNcbzI8oRRu97giCG2smBmU=
Subject key identifier:   41:30:6B:CC:26:8B:DF:0D:E2:4B:90:45:E5:03:78:27:A2:40:35:F0
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       0108
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/QTBrzCaL3w3iS5BF5QN4J6JANfA.roa
Signing time:             Tue 31 Mar 2026 07:39:14 +0000
ROA not before:           Tue 31 Mar 2026 07:39:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2518
IP address blocks:        220.102.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Mar 31 07:39:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=41306BCC268BDF0DE24B9045E5037827A24035F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ae:13:df:49:c7:56:05:da:da:0e:6f:b2:47:
                    a8:fc:82:b3:6d:81:5b:38:49:ac:7c:69:6a:46:50:
                    4c:59:a7:e0:cb:f3:f4:47:c3:8b:ea:8f:7b:48:34:
                    17:c2:fa:d4:1b:eb:0a:69:29:d3:57:87:55:c3:2c:
                    68:01:97:ee:4a:c4:d0:87:8a:f3:00:de:2d:99:a1:
                    ee:b1:47:72:6a:34:9f:fb:c9:3a:c6:79:7d:54:5b:
                    7a:84:16:12:2a:cb:3e:09:95:21:8c:96:29:71:57:
                    c8:57:e0:b5:c8:48:28:df:89:35:39:f5:38:03:d0:
                    7f:3e:c6:33:0d:0e:f2:64:d0:67:00:55:12:25:f7:
                    aa:26:a1:fd:58:e1:e3:c8:d9:49:81:67:96:b6:52:
                    db:5f:a3:c1:b4:bf:6f:ef:4f:b5:88:fc:1d:c1:7a:
                    f5:f3:1c:06:54:53:72:9e:47:68:76:ad:88:2b:a6:
                    4d:4e:fb:b8:a4:af:3b:95:be:1f:7c:94:78:a9:87:
                    ac:d0:9a:0d:36:bf:99:9f:49:0c:94:6c:bc:08:2b:
                    ef:c2:4a:f1:8e:ca:2b:6a:21:15:a3:67:1c:68:54:
                    be:49:66:54:c1:27:ef:9b:3e:83:69:17:c0:38:f8:
                    2f:47:50:14:0a:c2:74:45:79:e6:e1:31:c3:f2:f4:
                    f9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:30:6B:CC:26:8B:DF:0D:E2:4B:90:45:E5:03:78:27:A2:40:35:F0
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/QTBrzCaL3w3iS5BF5QN4J6JANfA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:e5:1b:00:eb:59:97:df:46:c3:4e:da:b4:7e:a0:a2:c9:65:
         2a:b4:ce:0e:b8:09:6a:f1:de:02:0d:aa:5f:3b:b0:89:d2:4f:
         0e:87:d2:fb:47:95:86:54:19:93:60:2e:c3:0d:e0:6b:6e:3f:
         cb:f4:a5:6e:21:da:85:be:5d:6e:52:53:84:e8:a2:a8:1c:db:
         d8:a7:ca:ea:1e:61:cd:69:71:67:27:01:02:17:67:fd:67:a4:
         2a:dc:5d:34:a2:3f:3d:22:dc:fd:7c:03:4a:92:16:54:a7:4e:
         57:08:59:09:19:56:2f:83:2b:38:39:15:2a:1c:9d:0d:11:17:
         a2:87:d8:76:73:0f:7e:3a:7c:40:01:fb:55:5b:5e:67:ac:f2:
         2a:44:43:db:c6:db:fd:e2:22:e0:68:06:b8:b8:a3:92:ac:ef:
         89:ab:94:a1:60:1b:99:a1:87:f0:0c:db:c6:4f:03:bd:86:ee:
         0b:84:5d:36:47:bf:5a:ba:92:d4:73:aa:dd:19:2b:aa:10:8e:
         67:23:34:d2:a2:cf:b6:47:6a:d9:c7:5b:fb:83:e5:e8:91:d0:
         5f:80:1e:38:44:d9:8d:2d:b9:fd:3f:51:59:d9:43:ec:2a:85:
         b7:be:1e:85:8c:5a:37:fb:64:24:63:3b:a7:e4:41:5d:90:bc:
         f2:f3:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:31 2026 by rpki-client