Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1022/mOrRtve7GOlfeUioLZE9VcT05Jo.roa
File:                     mOrRtve7GOlfeUioLZE9VcT05Jo.roa (raw, json)
Hash identifier:          sSpJJid3pdA7gHkbphq82w/B8dRm9jlMOu7Xvaiwd8Q=
Subject key identifier:   98:EA:D1:B6:F7:BB:18:E9:5F:79:48:A8:2D:91:3D:55:C4:F4:E4:9A
Certificate issuer:       /CN=321316A93C382011A2FC4B8E7CB848649868F434
Certificate serial:       03
Authority key identifier: 32:13:16:A9:3C:38:20:11:A2:FC:4B:8E:7C:B8:48:64:98:68:F4:34
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MhMWqTw4IBGi_EuOfLhIZJho9DQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1022/mOrRtve7GOlfeUioLZE9VcT05Jo.roa
Signing time:             Tue 31 Mar 2026 08:49:45 +0000
ROA not before:           Tue 31 Mar 2026 08:49:45 +0000
ROA not after:            Sat 27 Mar 2027 06:08:46 +0000
asID:                     9355
IP address blocks:        133.243.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1022/MhMWqTw4IBGi_EuOfLhIZJho9DQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1022/MhMWqTw4IBGi_EuOfLhIZJho9DQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MhMWqTw4IBGi_EuOfLhIZJho9DQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321316A93C382011A2FC4B8E7CB848649868F434
        Validity
            Not Before: Mar 31 08:49:45 2026 GMT
            Not After : Mar 27 06:08:46 2027 GMT
        Subject: CN=98EAD1B6F7BB18E95F7948A82D913D55C4F4E49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:86:b4:f2:9e:7a:cb:85:bc:fd:0e:fd:01:b7:
                    e0:18:5d:2e:e2:88:c0:51:b3:82:1b:06:1d:a7:95:
                    29:d9:f5:7f:13:4e:d5:eb:fd:05:f6:06:56:74:1c:
                    e3:bc:59:c8:a4:97:b6:9c:57:b6:a1:d7:43:71:40:
                    cd:b0:7d:0f:ad:8d:ac:a9:87:94:dc:cb:be:79:bd:
                    35:df:3a:a6:84:7e:d7:92:22:e1:61:a9:3d:a0:f3:
                    a6:06:4c:bf:bc:98:5e:c3:e4:38:4f:49:89:23:db:
                    31:34:85:08:c3:d4:3a:9b:ec:aa:e5:60:ad:82:cf:
                    c2:cc:26:b0:a0:05:e4:1b:a9:06:a5:b3:27:eb:24:
                    07:9e:ee:77:7b:06:09:18:ac:3e:8f:f0:db:55:9a:
                    07:96:c6:54:c9:51:53:49:a8:4d:93:37:91:bc:ad:
                    86:ad:59:0b:e6:15:1d:f4:8a:e1:37:e2:1b:64:fc:
                    3c:a5:ec:25:27:c4:0f:d1:3d:38:8f:a5:fd:7c:50:
                    8c:1b:ed:f5:2f:44:b3:b7:93:c4:95:6b:4b:9e:fb:
                    60:aa:8d:17:d1:b6:4d:c3:2a:ce:4b:61:f7:03:eb:
                    59:47:3e:9a:3d:fb:c2:0f:01:6a:bc:c2:f8:ac:ba:
                    70:fd:f3:d7:5a:61:6f:56:e4:54:f7:2c:77:cd:b3:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EA:D1:B6:F7:BB:18:E9:5F:79:48:A8:2D:91:3D:55:C4:F4:E4:9A
            X509v3 Authority Key Identifier:
                keyid:32:13:16:A9:3C:38:20:11:A2:FC:4B:8E:7C:B8:48:64:98:68:F4:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1022/MhMWqTw4IBGi_EuOfLhIZJho9DQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MhMWqTw4IBGi_EuOfLhIZJho9DQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1022/mOrRtve7GOlfeUioLZE9VcT05Jo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:6b:a6:7a:47:92:6a:97:79:54:16:b4:ac:e7:e5:82:56:
         5d:07:d6:d6:27:a9:cb:5c:c3:f5:9e:c0:5a:c6:a8:25:f9:ff:
         28:7f:ea:55:5b:ec:98:fe:be:e9:7b:d9:5e:19:75:28:ae:21:
         ca:88:33:bb:9a:be:6f:51:af:ca:c0:93:53:0a:f6:05:6d:23:
         ce:bc:0f:dc:ab:ca:6a:aa:bf:a5:56:f8:35:75:44:74:8d:7a:
         49:e9:e3:0c:69:f7:32:b5:79:fd:6c:10:36:c8:ff:e7:e8:44:
         bf:bd:cd:d3:60:c3:f8:5e:ce:85:72:8c:8a:9f:77:bc:1a:a3:
         34:94:63:ea:49:74:16:9c:04:f0:a3:54:da:13:ce:b2:b8:93:
         22:42:86:d4:c7:13:f3:c6:54:2c:ef:01:8a:49:b8:e7:d2:47:
         4e:67:42:76:53:65:64:62:91:4f:4a:51:07:b4:d9:c7:43:8c:
         42:84:bf:af:4a:9b:8c:e7:28:e7:fa:3f:d1:dd:74:61:a7:4c:
         5b:59:f6:d8:a9:1c:83:2d:32:cf:ce:c2:ab:d7:40:79:f5:5b:
         7c:61:be:ff:26:92:d9:52:c7:e9:58:34:22:7e:ad:9c:b9:e7:
         f3:bc:74:52:8c:6d:40:af:0a:63:23:92:b7:80:95:00:8a:07:
         41:17:c1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:49:53 2026 by rpki-client