Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/CNt500udyzUVvILQ1Lz0AJeJiRs.roa
File:                     CNt500udyzUVvILQ1Lz0AJeJiRs.roa (raw, json)
Hash identifier:          EnHFv8YoywX3vm9iS60iSVk//cdwzmTfGt3Ot3QPHuA=
Subject key identifier:   08:DB:79:D3:4B:9D:CB:35:15:BC:82:D0:D4:BC:F4:00:97:89:89:1B
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       61
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/CNt500udyzUVvILQ1Lz0AJeJiRs.roa
Signing time:             Tue 31 Mar 2026 08:29:38 +0000
ROA not before:           Tue 31 Mar 2026 08:29:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7511
IP address blocks:        203.145.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Mar 31 08:29:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=08DB79D34B9DCB3515BC82D0D4BCF4009789891B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:f1:ef:c8:ab:0d:2a:a4:52:08:65:dd:8a:
                    09:39:47:d9:6c:aa:f7:7f:33:dc:cf:24:0c:7d:46:
                    aa:b1:2c:7c:6d:b2:93:ca:82:54:47:96:55:40:81:
                    a5:99:44:e6:0a:da:0a:17:c0:1e:3b:5b:9e:8e:1c:
                    aa:50:2f:fa:25:d5:b4:09:20:e5:c8:43:c9:24:bd:
                    c3:9f:47:ee:21:dd:54:47:bd:b3:a4:cf:1c:26:28:
                    4f:89:95:e1:b8:ed:0a:bb:a1:8a:19:ee:c4:c9:04:
                    c6:3b:33:c4:59:cd:b5:ed:fe:b1:b1:d0:f1:9f:22:
                    f6:d6:e8:05:52:d7:3b:92:69:5e:28:6c:fe:52:3f:
                    bc:8c:a8:68:8e:d2:6f:44:5d:5f:e3:ec:bc:66:38:
                    7f:d3:42:aa:86:3b:d5:fe:0a:f6:d1:c5:64:b2:0b:
                    ed:7e:b2:9a:ad:91:2e:3a:c4:bd:77:aa:a9:b8:70:
                    0c:19:3f:91:09:51:17:dd:69:3d:34:85:87:dc:c0:
                    f7:e1:dd:9e:55:a8:ac:e3:ff:ae:f3:1c:77:2c:f2:
                    e2:a3:a8:91:cf:53:00:a7:ba:3e:9b:ca:1f:63:0d:
                    d4:ec:68:76:7b:77:7b:23:ed:b9:b6:c4:91:c1:78:
                    46:dc:14:bc:6a:72:35:d2:b6:b5:a9:5d:ca:7c:4b:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DB:79:D3:4B:9D:CB:35:15:BC:82:D0:D4:BC:F4:00:97:89:89:1B
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/CNt500udyzUVvILQ1Lz0AJeJiRs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:bd:f1:a1:d0:ed:4d:4b:01:cb:37:ed:f5:4b:4a:b9:da:ac:
         b3:9f:7f:e5:fa:f3:dd:bd:e1:7f:00:ce:08:ba:0d:09:19:d3:
         39:2f:c7:80:5d:0b:83:6b:f4:3c:39:16:db:94:72:28:20:5b:
         74:0b:57:8b:df:1c:39:7d:c5:66:fc:6b:7c:dc:fb:65:4c:f3:
         f1:6b:8c:de:74:57:9a:4d:55:0d:ed:2a:53:46:89:26:5c:a3:
         c8:02:84:5c:b3:eb:b7:69:1d:20:c0:97:f1:8e:f6:c1:35:95:
         85:68:6b:32:f7:9c:4a:46:38:45:e0:a0:fd:43:c9:bd:84:23:
         9c:6f:b1:73:4f:c5:89:0d:be:73:1f:2a:96:97:8e:28:35:7d:
         2c:6a:a3:a1:41:ed:13:af:9c:76:9f:04:5c:a8:97:fe:ef:66:
         39:0c:f1:0e:f0:a1:92:74:47:8d:37:9f:62:2b:00:d1:41:74:
         b8:f2:43:cb:32:d3:56:0c:c4:8e:f3:fc:02:51:57:1f:cd:53:
         a2:c0:37:30:63:ce:22:a5:d3:20:cf:30:83:7b:81:14:98:9d:
         21:d4:e0:e0:33:f6:89:26:0c:54:24:11:d0:02:38:3c:c1:7f:
         a9:1e:01:c1:ef:93:3f:49:9c:d1:7e:01:b9:8f:49:15:85:c6:
         c6:a0:03:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:24 2026 by rpki-client