Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/4WHTakuENj4F62csVlCmKY3UAtA.roa
File:                     4WHTakuENj4F62csVlCmKY3UAtA.roa (raw, json)
Hash identifier:          NQw6MYZawZRvcSTLRrxczR6++59QRjf/9t37aDo8PPA=
Subject key identifier:   E1:61:D3:6A:4B:84:36:3E:05:EB:67:2C:56:50:A6:29:8D:D4:02:D0
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       81
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/4WHTakuENj4F62csVlCmKY3UAtA.roa
Signing time:             Tue 31 Mar 2026 08:37:36 +0000
ROA not before:           Tue 31 Mar 2026 08:37:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        49.128.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 31 08:37:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E161D36A4B84363E05EB672C5650A6298DD402D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:51:34:bd:93:3f:04:9b:3b:02:90:78:fd:aa:
                    c2:4a:78:21:10:ff:24:ef:1b:2d:46:4a:9b:8b:18:
                    d7:25:81:8f:02:71:58:d9:6d:7d:06:2a:0a:96:6f:
                    10:1c:f8:13:1c:e4:af:a9:33:56:65:86:41:c9:15:
                    32:d3:4c:36:c5:26:02:56:04:07:4d:13:5b:55:5a:
                    30:28:0b:ec:16:98:77:d2:57:2f:1d:0f:c0:42:5e:
                    5b:97:ea:05:fb:c3:6f:30:d3:45:e8:3e:21:ef:a2:
                    98:20:ce:09:22:e7:f6:d3:62:30:97:b0:67:74:61:
                    90:00:b4:4e:45:bd:70:15:5d:2a:28:15:a7:8c:ab:
                    c4:3c:b4:f1:9c:f3:88:7c:dd:f8:7d:08:b8:c2:9c:
                    04:42:3c:4a:ea:17:3c:0a:87:2e:99:13:6d:9f:52:
                    60:e9:2b:2f:fd:89:99:f4:e8:b7:b9:35:10:fb:9e:
                    29:3b:10:23:b1:f7:1d:31:20:a3:3a:49:89:d2:ce:
                    72:1c:1e:84:c8:b7:a5:23:52:2b:28:e0:4c:11:82:
                    d9:4f:41:12:94:c6:1a:bd:26:32:47:ff:1f:21:4f:
                    b7:e3:5a:10:5a:92:24:c7:d8:71:16:c9:b0:c8:5f:
                    78:7a:4d:25:df:9d:7d:1d:2c:b9:bb:e6:19:e9:8e:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:61:D3:6A:4B:84:36:3E:05:EB:67:2C:56:50:A6:29:8D:D4:02:D0
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/4WHTakuENj4F62csVlCmKY3UAtA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:fe:16:e3:48:26:f6:f4:44:96:e5:5b:96:ec:21:05:ec:
         95:95:f3:28:04:e6:31:f9:0b:7a:ea:38:08:56:d0:04:2c:81:
         cb:5f:3a:e7:53:46:2f:56:d5:ef:82:76:64:97:4a:06:51:b6:
         93:21:cd:d4:c2:52:44:c6:3a:2f:e3:a1:c7:2b:83:8f:fe:0d:
         e0:a5:aa:5b:a7:a6:9f:51:ca:0b:ce:df:5b:39:f6:33:a6:3d:
         60:57:f4:ce:60:ca:1b:2c:e4:a1:fc:80:44:84:8b:ad:a3:cc:
         64:44:e6:7c:4e:dc:18:79:35:22:65:59:9f:dd:2a:a7:2d:27:
         0a:00:27:82:82:c2:b3:48:f4:46:69:d6:10:e0:06:ea:6f:0a:
         ca:90:2a:38:d7:1b:dd:6d:2b:00:7c:73:ba:50:55:67:c0:d9:
         4e:cd:d7:1a:60:22:1a:b2:d6:0a:5d:36:8a:62:a8:8b:46:cd:
         bd:3d:ec:db:ea:ee:20:23:48:34:a4:66:47:d9:69:b3:ac:ca:
         37:b4:48:37:1a:3b:15:0d:a8:5f:59:6e:db:6a:31:a9:c1:b4:
         ef:de:64:44:8e:c6:e7:ca:be:18:9d:61:0c:0f:18:9b:08:75:
         06:e3:31:50:c4:b7:8f:a6:d9:99:48:54:58:1d:45:21:93:b7:
         34:3d:e9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:40 2026 by rpki-client