Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/qqOItXE5OE7Qr4VUE0m3DBZAzYI.roa
File:                     qqOItXE5OE7Qr4VUE0m3DBZAzYI.roa (raw, json)
Hash identifier:          WYEcYc0fAoKaFRekGJy/C+cOGLjcdBKTUfPT0fBK9qI=
Subject key identifier:   AA:A3:88:B5:71:39:38:4E:D0:AF:85:54:13:49:B7:0C:16:40:CD:82
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0280
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qqOItXE5OE7Qr4VUE0m3DBZAzYI.roa
Signing time:             Tue 31 Mar 2026 07:33:34 +0000
ROA not before:           Tue 31 Mar 2026 07:33:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        118.16.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AAA388B57139384ED0AF85541349B70C1640CD82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:49:0d:38:fd:e4:37:01:02:ae:82:a2:b6:
                    57:1f:c4:66:0b:98:b1:71:35:22:b9:25:9f:20:07:
                    b9:93:99:ec:ca:3d:9d:84:3d:9f:2c:06:83:36:d8:
                    0b:28:2d:35:eb:ce:0f:42:39:85:fe:f9:70:6c:87:
                    f6:c7:b3:34:c0:c8:b1:b6:d6:4e:79:2b:0b:3d:aa:
                    78:1d:bc:59:44:c2:db:5f:3c:f6:b0:25:17:94:29:
                    83:43:85:57:0d:22:d2:ae:7a:51:33:3e:91:f2:c0:
                    dd:65:44:99:ac:62:9f:5e:52:45:f4:63:30:66:ef:
                    d3:84:92:ce:fb:1e:95:2f:3f:10:d4:1a:e6:dc:bc:
                    25:45:17:0f:70:8e:df:25:d9:79:2a:91:29:62:ed:
                    ff:76:1f:4d:67:97:d2:6a:a8:27:66:c1:ef:ec:81:
                    d7:09:b7:3c:28:bd:c8:55:51:2c:77:4b:6e:80:3d:
                    6e:d1:1a:52:54:2b:f7:43:a7:32:89:d6:8b:2f:21:
                    e9:49:32:0b:62:31:c7:42:79:83:22:1f:e5:75:59:
                    8b:08:8c:37:7c:ba:e0:5b:63:9c:8d:64:54:07:d9:
                    97:67:4f:54:e3:be:7f:99:dd:af:19:eb:31:52:39:
                    a8:cc:e5:ec:bc:6e:59:ed:94:ce:67:96:50:d7:e0:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A3:88:B5:71:39:38:4E:D0:AF:85:54:13:49:B7:0C:16:40:CD:82
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qqOItXE5OE7Qr4VUE0m3DBZAzYI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.16.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         cf:79:07:c2:76:c5:2c:07:f9:35:d4:2b:e0:5d:a6:33:d1:92:
         30:a7:a7:12:0a:7a:4e:c0:65:11:04:3a:11:2d:98:f7:d2:00:
         c2:79:7c:1e:ae:02:73:cf:de:c9:d0:69:24:d3:bf:8d:b6:e7:
         ce:4f:6a:de:fa:42:7c:b0:61:7b:23:a7:25:ad:c5:1b:26:c1:
         ab:5b:5a:cd:d3:01:a6:2d:26:de:75:ba:12:e4:7b:9e:84:d5:
         b5:52:3a:85:a7:05:9d:42:e4:d7:45:a6:a6:a8:a9:7c:90:90:
         79:99:85:14:c0:8e:22:fd:73:1d:ff:2c:9f:d8:85:01:dd:54:
         4e:28:aa:79:b4:b4:52:52:4a:94:10:0a:6c:4a:2d:cb:fe:f7:
         0b:95:c5:a5:c3:7a:8a:2c:f2:99:98:c2:f6:de:d3:31:7d:fb:
         1f:a1:80:4b:85:0f:d6:66:62:2e:f5:95:67:c6:ff:54:3e:79:
         85:91:05:e1:76:7a:b4:47:13:81:4c:c5:02:46:ce:bc:d2:eb:
         ff:2f:00:ff:0f:e8:71:74:1b:d6:1e:28:21:b2:6a:55:5f:64:
         8e:a6:3e:1a:ca:b9:0e:32:58:be:5c:05:0f:0a:07:b0:7a:93:
         37:d6:88:5b:ad:ca:4d:b4:62:dd:77:df:fa:88:7d:d0:97:80:
         26:d0:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:54 2026 by rpki-client