Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/4xbcPpBtziijTA5_jFpagzw3rrg.roa
File:                     4xbcPpBtziijTA5_jFpagzw3rrg.roa (raw, json)
Hash identifier:          23q5n4VvIfsFFvUaKE6Xl7j5wSYRaUjUhTmpLc90M1o=
Subject key identifier:   E3:16:DC:3E:90:6D:CE:28:A3:4C:0E:7F:8C:5A:5A:83:3C:37:AE:B8
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       93
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/4xbcPpBtziijTA5_jFpagzw3rrg.roa
Signing time:             Tue 31 Mar 2026 07:40:56 +0000
ROA not before:           Tue 31 Mar 2026 07:40:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7514
IP address blocks:        120.93.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Mar 31 07:40:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E316DC3E906DCE28A34C0E7F8C5A5A833C37AEB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:a5:85:f8:c4:1d:e8:4c:d5:50:9c:fd:e6:
                    e2:c3:b9:61:b9:92:c9:93:e4:c1:61:f3:c0:f2:5b:
                    4b:f5:00:80:64:c7:e6:d5:28:5e:78:b2:46:c4:46:
                    c1:03:86:7f:5a:48:03:cf:10:b4:2e:80:07:1d:07:
                    af:4c:a5:14:ff:ec:23:dc:44:dc:02:2f:19:e9:8e:
                    6f:c1:f9:1f:ca:42:79:43:7e:5d:58:e5:f3:1e:fd:
                    66:96:d0:67:4f:81:7e:e6:e3:8b:7b:49:e7:01:f7:
                    0c:17:11:18:3b:2f:1f:3d:54:25:32:28:56:41:0d:
                    c5:d1:2e:fc:02:6b:76:5e:d6:ef:21:f2:d6:af:ed:
                    1e:99:0a:ec:a2:6d:28:95:a5:5f:4f:06:df:2a:8f:
                    f9:7d:a4:2e:a7:14:66:50:60:6b:87:93:6d:21:ea:
                    7a:55:42:be:69:0b:a8:67:2e:49:a6:64:66:72:1b:
                    b5:43:a7:c7:3c:9c:b4:b5:17:8e:c3:ce:64:85:e1:
                    28:0a:72:8c:8d:57:3e:0a:bd:20:05:78:2e:c3:73:
                    1e:68:24:23:d7:d5:5d:8a:e8:ea:ad:c2:de:c9:76:
                    f0:9b:d0:e1:da:bc:34:08:7e:9d:47:b5:35:e3:81:
                    07:a3:3f:c7:d8:5f:2e:d1:7a:83:fb:dc:e2:6b:f1:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:16:DC:3E:90:6D:CE:28:A3:4C:0E:7F:8C:5A:5A:83:3C:37:AE:B8
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/4xbcPpBtziijTA5_jFpagzw3rrg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.93.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         72:74:fb:ec:31:6a:1f:d9:6a:06:31:a8:a9:1a:f2:df:ca:02:
         0e:84:9e:2f:26:72:5d:50:1c:e4:3b:e9:55:8e:ec:0d:5e:82:
         7f:d1:6d:5c:c8:48:c1:7c:68:5c:8b:29:5a:8c:78:61:c3:73:
         77:4a:8c:d2:4a:07:4a:3f:2c:16:27:8b:ae:8d:1e:2a:ca:f7:
         72:3c:f9:ce:22:7d:5f:4d:e3:2d:82:18:0d:01:d5:9e:82:4e:
         19:ee:8e:50:d3:83:d8:b6:b1:11:46:45:29:e0:0b:b7:e9:28:
         fc:d4:12:a0:5c:9f:25:24:8c:0e:20:5a:7d:7d:ee:81:02:3f:
         39:1f:4d:6a:26:80:d8:40:eb:5f:75:e4:8c:e3:01:f3:ef:63:
         03:6e:9e:4c:70:e3:4c:d1:95:20:60:d6:5b:4b:3f:40:5c:3b:
         2d:f6:08:4e:7e:08:ea:38:7b:8e:9e:e6:01:e4:4a:8b:09:8e:
         51:0d:3b:cb:24:34:d1:bd:6f:ed:1a:ec:fb:24:99:f9:ad:15:
         c5:53:73:87:f8:8a:8a:90:6a:16:ce:47:94:a6:0d:85:d8:a7:
         99:91:3b:a3:ac:a5:ef:ca:ed:e9:74:46:b5:ed:76:b3:a4:4e:
         19:ae:7c:29:18:fe:8c:9e:87:b1:96:f5:92:da:d5:10:c9:b4:
         80:3a:be:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:15 2026 by rpki-client