Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/xItSy8C4gO3P2xdnAq9vCgapRlM.roa
File:                     xItSy8C4gO3P2xdnAq9vCgapRlM.roa (raw, json)
Hash identifier:          7VDYjHxsGkxxybOjdRbeBoq6m/5hD3S6mbtPfKzcJmw=
Subject key identifier:   C4:8B:52:CB:C0:B8:80:ED:CF:DB:17:67:02:AF:6F:0A:06:A9:46:53
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       FF
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/xItSy8C4gO3P2xdnAq9vCgapRlM.roa
Signing time:             Tue 31 Mar 2026 07:39:10 +0000
ROA not before:           Tue 31 Mar 2026 07:39:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2518
IP address blocks:        218.227.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Mar 31 07:39:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C48B52CBC0B880EDCFDB176702AF6F0A06A94653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:3a:f4:97:0b:55:1c:b9:c2:3f:cd:6a:47:
                    56:01:71:c2:55:ee:5d:9c:39:b6:42:6e:bd:8c:19:
                    0b:ec:30:f4:de:da:77:14:3e:c1:89:cc:cd:10:da:
                    bc:25:a6:df:29:85:56:1e:c5:ac:c7:9c:4d:f3:76:
                    47:9b:58:1c:75:15:b8:55:72:b6:7d:be:b7:16:b5:
                    ab:70:4f:73:c4:23:28:48:dc:eb:9b:83:16:48:b6:
                    c8:b3:5a:e6:52:4f:f6:3f:2c:58:36:15:7d:0c:77:
                    81:03:1b:b7:89:d7:04:8f:eb:9c:96:6a:eb:1e:08:
                    d6:db:cc:15:0c:70:4f:ad:a6:f2:4c:7a:08:cc:d8:
                    b7:df:34:b6:1d:3b:fc:84:97:9c:28:07:88:e0:1a:
                    d5:9d:de:b8:a3:0e:59:b7:e2:55:e7:cf:57:55:71:
                    8e:81:93:9e:f7:49:2f:44:8c:af:19:e0:1f:6d:ae:
                    2e:8a:7e:b4:e0:8a:31:8b:38:a2:09:53:b9:82:cf:
                    39:3e:e6:10:7d:a5:b3:d9:c5:6a:e5:4a:d5:2e:7b:
                    db:dd:da:9b:bc:5b:02:9d:ac:fb:eb:01:cf:f8:c5:
                    ec:b4:99:c2:38:99:b6:6c:46:dc:2d:49:55:8b:b1:
                    e4:3e:b0:e4:cd:be:11:ff:b8:b8:81:49:26:3f:5d:
                    74:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8B:52:CB:C0:B8:80:ED:CF:DB:17:67:02:AF:6F:0A:06:A9:46:53
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/xItSy8C4gO3P2xdnAq9vCgapRlM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:d7:57:30:9f:50:7e:e1:c8:a7:4e:5b:3a:cd:0f:97:4e:20:
         ea:80:60:bf:82:0f:fc:9d:a0:59:7d:3f:66:9d:0d:2c:cd:2e:
         bf:92:b8:f0:ea:ff:13:d8:dc:fa:45:b2:87:9a:63:90:ce:cf:
         28:01:bf:8a:fa:64:c2:a2:00:22:98:be:55:96:36:5e:ac:bd:
         f9:3b:67:3b:3f:ea:00:f0:11:f0:d0:0b:c4:c2:25:4c:8b:cf:
         fe:24:bf:b0:7b:0b:68:9e:a4:e5:5a:8b:ec:ce:3b:46:6e:1a:
         3d:4f:d4:49:b8:50:45:47:60:70:61:d0:c3:96:1c:7d:4c:d9:
         43:a5:ec:0a:1d:a1:4d:fb:36:8a:f4:c9:1c:31:8c:1d:aa:23:
         17:e2:63:ea:ae:27:0b:f7:b7:ed:a6:b2:aa:6a:b0:5a:09:7c:
         f7:8f:89:c5:87:91:a2:64:0d:60:52:20:80:a6:46:95:99:0d:
         cb:d8:d0:37:51:d7:c6:c6:da:f1:46:22:93:ee:e4:fc:5d:39:
         c6:97:49:87:72:ca:65:a3:7a:b6:20:c4:5e:69:10:0b:d2:48:
         37:4f:76:25:e4:b7:fc:c6:18:10:db:43:c2:f4:56:78:3e:af:
         f9:b5:24:b6:0f:fd:48:9f:49:a4:80:ed:b5:9e:59:ec:65:4e:
         2c:92:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:22:21 2026 by rpki-client