Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/PR8d9bKUwgJ75iB1RX6uel-kmzc.roa
File:                     PR8d9bKUwgJ75iB1RX6uel-kmzc.roa (raw, json)
Hash identifier:          qZjR//B/ExgxBnuxeN5a3GHKHoOXGvhEhEfwo0jQ2o4=
Subject key identifier:   3D:1F:1D:F5:B2:94:C2:02:7B:E6:20:75:45:7E:AE:7A:5F:A4:9B:37
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0279
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/PR8d9bKUwgJ75iB1RX6uel-kmzc.roa
Signing time:             Tue 31 Mar 2026 07:33:30 +0000
ROA not before:           Tue 31 Mar 2026 07:33:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        61.199.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3D1F1DF5B294C2027BE62075457EAE7A5FA49B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:5f:95:1a:9b:c4:25:ab:82:cf:09:18:fc:
                    ec:cf:2e:84:8b:01:d4:ac:b7:60:8f:8e:5b:9f:8a:
                    18:ce:2b:df:5d:f2:da:31:35:5e:09:a2:75:e7:79:
                    ff:30:24:e9:e6:a1:8a:7a:47:62:89:fe:57:68:d2:
                    a2:56:c5:53:70:ef:14:53:6f:82:47:30:76:2d:bd:
                    db:fa:f6:3d:5f:0a:91:2a:a0:a2:b9:37:a5:02:b3:
                    99:13:80:98:db:b3:a4:d3:d0:9c:2e:e3:37:e8:f2:
                    eb:d1:33:f9:95:71:b2:ed:2a:66:a6:fd:e5:ef:72:
                    09:54:56:76:7f:53:f1:4a:3d:e8:fd:be:76:32:9a:
                    a6:5b:22:2e:1d:9d:4d:46:3c:d5:a9:45:bb:b5:c1:
                    99:e3:8e:42:4e:73:76:98:db:32:64:ba:59:a7:f7:
                    b7:69:65:dc:67:8b:c8:5f:fc:2b:24:92:cc:4a:67:
                    c7:fd:28:6a:c4:25:3a:1c:7e:27:5d:84:c8:56:ba:
                    62:cc:9b:11:3c:7b:a7:83:ea:c6:80:1a:67:bf:cc:
                    35:d5:1c:d3:d0:b0:31:b5:27:90:c3:ff:d9:f8:ac:
                    15:06:57:33:2a:01:c4:49:a3:89:a6:2e:ba:7c:ed:
                    8e:4c:dd:40:f5:59:25:9f:29:87:81:a2:0d:5c:9d:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1F:1D:F5:B2:94:C2:02:7B:E6:20:75:45:7E:AE:7A:5F:A4:9B:37
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/PR8d9bKUwgJ75iB1RX6uel-kmzc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.199.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b0:38:70:51:e4:8a:96:85:1a:1e:d7:60:79:1c:3e:92:d2:67:
         45:96:48:49:1e:4e:80:4d:67:de:50:a9:30:62:69:a2:81:fb:
         6f:d4:93:19:08:e4:71:c1:3c:91:9a:ca:e3:85:26:52:e9:ae:
         3c:4c:9b:a7:8d:eb:b1:b3:55:4c:d6:16:d5:88:ed:f7:0c:61:
         8c:68:8f:0c:96:ae:1d:95:6c:8b:c0:b1:20:24:c5:aa:b0:9b:
         c0:03:8a:58:dc:ec:c7:52:a3:cc:1d:ad:d8:35:10:c9:54:44:
         51:15:ae:43:a9:80:c2:33:b8:7a:9e:46:e8:96:45:1b:17:bd:
         ff:c4:67:8c:be:64:e2:8d:0a:56:44:82:01:29:16:3f:a3:2a:
         57:3d:69:6d:7c:9e:bc:9e:8a:9f:e8:bf:b1:f5:03:83:79:f0:
         a3:36:ae:a4:8c:38:5b:48:ad:e5:04:53:83:6e:1f:4c:2c:96:
         79:ad:4e:28:3a:2d:d2:ff:66:dc:93:f6:41:25:1a:f1:39:1b:
         70:e4:90:ac:a8:e4:e3:8a:5e:01:92:5f:24:b0:03:bd:9f:f6:
         38:47:e9:ff:c7:b3:f2:0f:a3:4b:1f:85:ce:07:26:97:f9:d0:
         0a:16:9c:8a:41:85:b6:8b:d5:1e:26:28:93:4c:87:9c:03:cd:
         6b:30:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:56 2026 by rpki-client