Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/5XNARVD8T2J_j5Z70O9kpEuelhE.roa
File:                     5XNARVD8T2J_j5Z70O9kpEuelhE.roa (raw, json)
Hash identifier:          RpmILaZoTpGqfcy+S0ubBZjOBv9P5hD9Jn9itdauDqs=
Subject key identifier:   E5:73:40:45:50:FC:4F:62:7F:8F:96:7B:D0:EF:64:A4:4B:9E:96:11
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       027F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/5XNARVD8T2J_j5Z70O9kpEuelhE.roa
Signing time:             Tue 31 Mar 2026 07:33:34 +0000
ROA not before:           Tue 31 Mar 2026 07:33:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        118.0.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E573404550FC4F627F8F967BD0EF64A44B9E9611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:f8:df:a0:42:42:6a:16:fb:fa:55:c6:c1:
                    f6:87:49:b5:08:13:89:37:18:5d:67:84:a7:ae:98:
                    fb:52:1c:1f:4e:05:59:76:42:26:32:e9:f1:9a:f6:
                    2f:02:77:ac:b6:86:3d:f9:40:44:7a:e3:d9:ab:7f:
                    29:77:54:90:72:d5:d9:ca:e8:a3:bc:10:ce:de:e2:
                    d4:f0:34:62:58:39:c6:df:45:37:9d:a8:1b:14:33:
                    83:c6:91:09:1d:3e:71:4e:80:81:66:6d:3e:db:e6:
                    4d:11:a1:39:68:b9:01:87:5c:a3:12:7d:65:66:18:
                    0f:a4:cd:b3:41:bf:f2:cf:06:0b:d8:01:ab:a6:54:
                    9d:81:22:12:af:ee:8f:73:ea:c6:7a:df:e5:34:a0:
                    09:ea:7a:8e:b4:6d:6d:85:e3:8b:7d:b5:65:a8:9d:
                    9f:42:fd:7a:d5:4b:ed:7a:44:03:f7:66:0b:89:ba:
                    85:45:f1:d0:00:07:30:5b:4b:5a:b8:89:50:18:5e:
                    bd:2a:e0:c6:7b:6b:a7:aa:b6:42:6d:93:47:4e:eb:
                    0b:dd:7b:fc:a2:fc:f6:80:79:9a:da:67:a5:f1:a7:
                    55:df:05:8d:6e:6e:c8:8c:c0:e0:45:91:62:0f:7f:
                    74:37:cc:04:8b:46:96:58:ca:d0:56:5a:30:30:3e:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:73:40:45:50:FC:4F:62:7F:8F:96:7B:D0:EF:64:A4:4B:9E:96:11
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/5XNARVD8T2J_j5Z70O9kpEuelhE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.0.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         c5:d7:8f:8f:1c:74:3e:c4:14:01:33:3c:57:44:62:b2:3d:44:
         b7:1f:a3:05:f1:b9:f0:80:e3:a0:12:d7:11:ee:f4:9a:f9:0e:
         d7:e2:88:20:9e:ba:c4:4e:49:df:dc:c8:65:e8:20:26:d8:d8:
         6c:dd:d4:bc:45:3a:cb:d2:e1:34:2b:e0:63:53:ab:a6:cb:83:
         5b:b2:db:ed:2a:3b:60:d9:60:b1:a1:9c:d8:f3:e1:b1:b9:35:
         98:5f:e2:13:2b:fb:11:eb:e0:d5:09:a7:14:6b:0b:04:9e:c7:
         54:cd:02:06:2e:6c:30:7c:88:8e:b7:2c:32:44:c8:81:c6:cf:
         1c:70:c5:bd:4a:83:4f:58:a7:de:82:39:17:25:b1:9b:b3:30:
         4d:39:f4:6e:f5:5f:58:cf:aa:57:8c:a4:2d:f1:0f:71:64:9a:
         d9:f4:f3:08:30:47:fb:7b:fc:49:00:ba:5a:70:33:c3:1a:39:
         93:3c:e0:43:dc:ad:29:e5:58:05:c5:3b:d9:d8:01:77:f9:61:
         a1:85:bc:14:2d:32:e1:d6:13:ae:fe:c8:d8:52:4e:ae:8b:2e:
         13:56:1d:90:28:9d:47:7d:25:12:60:62:90:57:d2:71:be:4d:
         47:40:81:b2:65:3f:75:c8:6f:1d:e6:b3:4c:4d:39:e9:d3:c8:
         db:e7:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:02 2026 by rpki-client