Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/T3j5pyeKxTRD-2k7Yzzc-FIf2mg.roa
File:                     T3j5pyeKxTRD-2k7Yzzc-FIf2mg.roa (raw, json)
Hash identifier:          IMhH2Y0KCp5OIf74qlFIRRzzBQOtH1DCGPdOgBPHkxk=
Subject key identifier:   4F:78:F9:A7:27:8A:C5:34:43:FB:69:3B:63:3C:DC:F8:52:1F:DA:68
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       47
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/T3j5pyeKxTRD-2k7Yzzc-FIf2mg.roa
Signing time:             Tue 31 Mar 2026 08:36:37 +0000
ROA not before:           Tue 31 Mar 2026 08:36:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        132.182.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Mar 31 08:36:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4F78F9A7278AC53443FB693B633CDCF8521FDA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:ac:90:a7:18:d1:b1:41:17:de:fb:54:3b:
                    8c:99:ca:39:0c:f6:cd:b2:03:f3:03:cf:03:a0:ff:
                    a8:aa:38:70:6e:cd:31:78:f9:83:7a:43:4d:67:2b:
                    b2:d2:33:03:f2:09:1e:10:2e:fa:dc:60:d7:b7:14:
                    2c:1b:48:c9:c2:30:52:31:57:ec:ba:d0:19:3c:d4:
                    bf:81:6b:95:c5:b4:c5:79:89:4a:ff:e5:af:4b:05:
                    d7:27:f7:56:3e:16:52:9b:4e:1a:ac:e1:3b:ba:d2:
                    69:62:ae:fa:05:5d:32:27:39:ea:66:58:94:24:52:
                    68:7f:68:34:d3:04:92:be:e6:dd:9d:d6:0c:7b:11:
                    1a:0c:ef:16:7a:4d:b9:91:a3:59:f4:53:cc:33:c5:
                    cc:ab:58:ac:40:2a:99:75:c5:ec:a3:38:7b:a0:1e:
                    e7:7f:f2:c1:0a:5b:1f:b9:ba:48:3e:ea:26:ab:46:
                    1c:b3:69:41:76:a2:2c:05:78:b3:40:b1:ed:ca:f1:
                    1e:1d:ff:b4:b6:e1:e1:bd:a5:17:bd:94:b6:b0:89:
                    c4:99:23:c7:4f:5a:fc:3c:b8:79:d6:01:2f:a3:48:
                    33:70:1f:5e:5c:4f:1e:b4:38:68:80:d3:40:52:07:
                    d0:36:c9:5e:8f:b1:91:e6:d1:d9:6a:db:0a:1d:bf:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:78:F9:A7:27:8A:C5:34:43:FB:69:3B:63:3C:DC:F8:52:1F:DA:68
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/T3j5pyeKxTRD-2k7Yzzc-FIf2mg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         67:99:b5:6d:eb:5f:e7:d2:56:b2:bc:d3:9e:d1:54:97:49:93:
         9c:4e:83:5e:8c:96:47:d7:ed:77:69:e5:ce:29:df:2e:27:eb:
         39:d3:8c:09:6e:a7:0c:21:d0:c8:b8:aa:ec:8d:e1:13:c4:50:
         b4:57:6e:28:ab:be:10:20:b7:91:01:b8:d2:82:ad:4e:f7:3a:
         74:60:8d:4f:be:85:50:88:04:93:64:3f:bc:cd:5d:fb:0f:53:
         0f:56:53:84:90:28:92:6b:a3:84:83:25:c8:c7:d5:2f:ed:7a:
         51:00:b2:1b:49:a8:c6:02:24:6e:c9:7f:10:f5:63:2f:21:19:
         b2:ca:76:f1:bd:bc:eb:76:ee:f5:92:cf:7b:55:1f:90:e0:96:
         5a:6e:d6:2f:81:f6:76:82:4b:52:87:f4:45:36:73:d4:0c:03:
         d9:26:86:91:9b:16:b0:ca:86:25:c6:70:b1:f5:c0:f8:ac:95:
         d0:62:f3:af:e5:15:e3:27:a0:3b:24:68:fb:6a:34:b5:ac:04:
         77:2d:e8:40:82:d0:42:bb:74:de:60:81:70:6b:3d:5d:fb:48:
         5f:6a:70:63:f6:f8:22:80:87:bb:e2:d7:4c:23:33:db:70:8a:
         7d:a2:eb:c9:b4:4a:49:6e:d2:d6:12:b4:71:26:9c:98:6e:9d:
         74:5c:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:14 2026 by rpki-client