Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/pO82HnjvSRzLruRCnodteUnsbAE.roa
File:                     pO82HnjvSRzLruRCnodteUnsbAE.roa (raw, json)
Hash identifier:          Klu0GScusCnBxp3AEWMrzTV5AV+eCrtlkrA52ZKKLeM=
Subject key identifier:   A4:EF:36:1E:78:EF:49:1C:CB:AE:E4:42:9E:87:6D:79:49:EC:6C:01
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       02B5
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/pO82HnjvSRzLruRCnodteUnsbAE.roa
Signing time:             Tue 31 Mar 2026 07:33:58 +0000
ROA not before:           Tue 31 Mar 2026 07:33:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        222.144.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A4EF361E78EF491CCBAEE4429E876D7949EC6C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cb:ec:9f:6c:d3:3b:07:db:b2:24:bb:21:a4:
                    d0:e0:e4:ab:df:7f:65:9d:94:21:09:bc:d2:b2:e7:
                    d3:86:1a:93:6a:38:07:d0:e6:2f:d8:56:52:8c:51:
                    4c:1e:b1:be:b0:2e:58:af:4f:d1:5a:1e:32:93:6f:
                    6c:5d:8b:26:ab:2b:77:d1:0a:39:9f:6c:50:cc:2b:
                    7c:0d:7f:7a:5d:b0:18:67:31:d1:1d:d4:d9:32:44:
                    cd:52:c2:e7:6e:fd:c0:c6:27:98:f9:09:a3:e2:e5:
                    fd:50:9c:61:b5:c6:3e:e9:1b:c5:ed:83:5c:dc:45:
                    d2:b7:e9:36:8b:2f:78:d3:a7:52:3d:15:6b:45:5c:
                    f6:57:fa:b7:01:40:64:ab:07:8d:55:bb:46:c3:db:
                    e1:50:79:28:8d:f8:ce:22:79:28:0b:24:b8:bd:b5:
                    43:26:9d:d3:86:6a:a4:eb:88:d5:e3:7b:1f:3d:39:
                    00:13:7f:a5:2a:60:38:f8:53:3b:f5:14:f3:52:2a:
                    4f:f9:35:b2:36:61:0a:40:ba:c4:c0:b3:e1:c4:f9:
                    28:f4:03:d0:01:1d:d1:ba:ca:17:7c:36:37:a0:01:
                    8f:9b:4b:86:e3:f3:d3:eb:21:82:32:34:59:14:41:
                    fe:4e:b8:2b:ae:58:7e:5a:03:cc:8b:83:d6:96:23:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EF:36:1E:78:EF:49:1C:CB:AE:E4:42:9E:87:6D:79:49:EC:6C:01
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/pO82HnjvSRzLruRCnodteUnsbAE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.144.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         bc:14:3c:da:21:1c:e8:83:49:d2:7b:77:aa:4c:5b:19:16:91:
         90:35:4a:66:17:9d:6d:98:05:9e:30:af:26:fe:cc:30:ce:21:
         6f:b4:38:94:4c:9f:f4:38:66:b6:3d:d4:05:2e:54:1d:da:9c:
         08:f5:5c:ff:b3:54:3e:e6:5b:1f:92:13:60:f1:07:50:97:e4:
         6c:35:e5:d2:82:84:e2:c2:5d:65:2c:27:02:3c:54:c9:dc:3e:
         1e:90:3c:bc:de:88:53:26:82:e0:c0:a0:6f:11:0c:ce:f2:44:
         e4:3b:ee:14:f9:63:5f:02:c4:8e:32:9d:fa:06:78:b9:06:00:
         09:0d:38:a6:76:87:24:c5:8e:ed:cc:18:e0:b7:b8:af:5f:57:
         d5:96:f4:f1:a0:84:fe:21:b5:9b:50:98:69:ee:1b:ab:b2:5c:
         4b:3b:cf:f5:3a:51:52:66:70:c4:f4:d3:32:8d:21:ce:0d:d3:
         5e:ed:39:51:73:b6:73:ed:08:2f:c2:99:98:ec:72:c9:eb:bf:
         9f:fa:11:fe:0b:0a:dd:88:a8:a8:64:3f:d0:c0:89:60:f4:a3:
         86:6f:31:5a:47:75:c5:07:c7:8c:d5:5f:2f:49:24:f8:d0:05:
         80:b3:cd:2c:b6:de:b9:db:84:ef:d4:56:24:b4:c7:03:ff:cf:
         e8:19:fc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:38 2026 by rpki-client