Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/0vwIj7_jsVIVADc7MxrttrBUTIk.roa
File:                     0vwIj7_jsVIVADc7MxrttrBUTIk.roa (raw, json)
Hash identifier:          l3ddQplHZkW5OyDAVwELNSEl3YewAY7q5zbw2J+vgIw=
Subject key identifier:   D2:FC:08:8F:BF:E3:B1:52:15:00:37:3B:33:1A:ED:B6:B0:54:4C:89
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       027C
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0vwIj7_jsVIVADc7MxrttrBUTIk.roa
Signing time:             Tue 31 Mar 2026 07:33:32 +0000
ROA not before:           Tue 31 Mar 2026 07:33:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        61.214.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D2FC088FBFE3B1521500373B331AEDB6B0544C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:40:80:c1:d2:da:b4:11:5e:a4:3c:fd:c6:
                    93:9d:f0:ac:4a:bd:e6:c1:f3:c1:f0:38:10:da:71:
                    80:0a:fd:5e:95:61:65:3a:da:49:d9:c0:73:fb:6d:
                    a6:42:58:c7:28:19:98:98:d1:94:a5:ab:36:0c:9c:
                    1b:65:83:30:49:7b:c5:d9:b6:a9:45:3c:21:6f:51:
                    b1:64:88:73:70:73:d5:79:db:78:78:84:01:2a:68:
                    b1:01:f8:05:70:93:9e:d6:a8:96:1d:36:d1:a8:10:
                    cb:9b:58:d3:37:7a:57:0f:40:a0:71:f4:8e:b3:ba:
                    cf:19:59:82:85:66:db:f1:82:89:bf:9a:14:6e:ca:
                    a9:70:81:d3:8a:5c:f4:ed:40:f4:a7:a5:ba:a8:30:
                    32:50:55:62:e6:3f:5f:e2:9f:58:e0:7a:df:84:25:
                    6f:a9:1a:ba:ba:47:d0:d2:8b:e4:d4:0a:51:4f:3a:
                    3e:ce:56:7d:bc:a1:1a:a1:ee:d9:04:74:75:8a:c4:
                    a3:73:e9:57:fd:cd:e3:06:49:4c:b5:df:54:99:8f:
                    31:d4:1d:a6:54:26:21:b3:50:26:8d:3a:fb:53:af:
                    a6:90:0d:2f:30:90:f4:91:0d:e3:cb:96:72:52:96:
                    72:18:86:a1:6b:75:f1:83:81:53:d2:56:3f:fa:64:
                    64:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FC:08:8F:BF:E3:B1:52:15:00:37:3B:33:1A:ED:B6:B0:54:4C:89
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0vwIj7_jsVIVADc7MxrttrBUTIk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:e5:43:7e:72:08:31:8a:c5:c0:19:63:b7:92:63:a6:cd:a4:
         64:c2:ed:65:15:6d:39:8e:f5:c9:57:70:2e:f4:a9:19:50:20:
         17:5f:43:16:0c:b1:66:d9:cb:bb:02:da:aa:77:93:00:9f:64:
         01:51:10:77:69:ca:f3:6f:3d:22:de:d6:ab:7a:5f:d7:b5:ea:
         c7:48:e4:7d:fb:04:3a:83:c0:27:80:60:f2:7b:24:1e:87:55:
         85:56:0c:7c:18:21:48:81:3d:ab:55:7d:86:3c:8d:89:e2:14:
         ac:e4:0c:42:80:5e:9d:f1:01:d2:b4:35:2e:5b:00:56:cc:5b:
         a6:15:c6:66:7f:c3:65:02:63:74:54:db:f1:47:c9:3b:19:bd:
         36:ba:b9:a1:2f:e4:e5:46:27:97:56:40:76:f0:87:e3:1f:50:
         c4:b9:13:f6:c7:be:a0:21:2d:1c:0b:2c:53:0c:03:2c:1c:11:
         1b:19:1b:87:ed:c1:dd:22:d3:49:b7:fe:12:8f:48:46:e4:0a:
         2b:6c:2e:0c:01:a1:40:0a:ae:99:b9:4d:28:54:a8:8e:0a:f3:
         d9:32:7c:77:7e:c8:88:d6:35:5e:ff:0a:2d:72:90:d3:41:b8:
         86:ac:5d:81:79:9a:77:e0:24:1b:4d:b7:05:70:03:e7:5c:90:
         6f:21:fa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:14 2026 by rpki-client