Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/snc0kUGNOtUOfuegObLCGHqxRwc.roa
File:                     snc0kUGNOtUOfuegObLCGHqxRwc.roa (raw, json)
Hash identifier:          J34zP1T53503zwNrfW0BmqDvYPk2KF4RIDlnTldIfqc=
Subject key identifier:   B2:77:34:91:41:8D:3A:D5:0E:7E:E7:A0:39:B2:C2:18:7A:B1:47:07
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       62
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/snc0kUGNOtUOfuegObLCGHqxRwc.roa
Signing time:             Tue 31 Mar 2026 08:29:38 +0000
ROA not before:           Tue 31 Mar 2026 08:29:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7511
IP address blocks:        203.147.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Mar 31 08:29:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B2773491418D3AD50E7EE7A039B2C2187AB14707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:7c:c4:65:bf:5f:db:2d:d2:09:01:fe:3c:
                    0d:a2:8a:1d:fb:a3:f3:1e:6f:e0:2f:f4:0f:59:d7:
                    74:3e:48:36:c3:1e:45:22:7e:47:45:ea:96:79:f0:
                    d1:56:1e:cc:23:40:5b:35:86:7e:52:86:d4:00:d8:
                    29:97:2c:f5:52:45:01:22:a1:13:cc:32:90:97:8c:
                    59:e1:a5:2a:b6:56:87:00:0e:b6:ae:e1:2d:38:8d:
                    53:61:60:b4:fe:54:05:bc:ee:4b:1c:54:5e:7b:f2:
                    78:fd:17:a3:21:63:9b:48:5f:de:a5:a3:e8:23:ad:
                    53:fc:97:b2:06:c8:32:60:b7:cf:b0:9a:80:bd:7e:
                    12:6b:92:03:47:7d:03:e9:ac:cb:2f:b7:64:d8:40:
                    f5:1c:28:8b:37:f1:26:f1:a1:3b:82:9f:0b:5d:5a:
                    f2:9e:63:5a:a2:6b:ad:8d:5b:05:51:68:7d:e0:7b:
                    c8:6c:ea:f7:94:f0:b7:1d:82:c8:cb:60:06:ec:66:
                    b8:4f:35:eb:97:16:61:cd:d2:de:4f:02:e1:84:64:
                    f5:76:23:10:ba:f8:07:15:e3:61:a3:82:f7:ee:25:
                    c1:48:7e:0d:18:9b:b2:4c:4c:dc:4d:f8:2c:c6:17:
                    33:2b:8f:d3:63:e8:52:fe:d7:6c:b4:23:22:09:4a:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:77:34:91:41:8D:3A:D5:0E:7E:E7:A0:39:B2:C2:18:7A:B1:47:07
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/snc0kUGNOtUOfuegObLCGHqxRwc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.147.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:0a:dd:f6:9c:33:7f:67:db:fb:36:06:2e:3f:57:60:00:df:
         82:2c:e1:23:5d:a5:12:88:a7:22:3d:a3:eb:f4:e0:07:cb:77:
         a3:61:05:60:8b:9d:86:c4:a0:60:da:d7:74:82:0a:6b:b5:4f:
         36:eb:f9:31:de:c3:6e:f0:2a:fb:78:20:f4:e8:e3:1a:fa:3e:
         ae:32:2d:02:75:d9:f4:24:58:44:54:fd:78:ca:dd:c9:32:50:
         1c:8f:53:11:ce:2d:2d:e6:f7:67:aa:27:9a:82:1d:ed:ef:95:
         c9:b8:45:03:6e:32:d4:0a:b5:11:79:01:7c:03:3e:22:e8:d8:
         24:70:6c:2e:9c:3b:4d:2f:74:31:d1:2c:ae:40:68:3d:fe:c8:
         c0:1b:e0:55:f7:a4:30:db:bd:ca:0f:04:9e:c8:f0:6b:b8:66:
         96:f3:fd:91:cc:90:86:89:d3:1e:ed:24:88:32:04:35:0e:fb:
         37:1f:c2:c9:c5:bd:7b:1e:20:4e:f6:f7:c6:4e:1b:77:0a:66:
         ae:2a:57:25:44:34:1d:72:ae:d5:32:01:71:ae:7e:74:51:c3:
         51:51:9d:16:e4:20:48:f4:d7:7a:77:89:4d:cd:f7:96:0f:d9:
         61:1f:03:d9:09:a5:ec:7b:69:ca:8c:19:f5:95:b2:14:46:5f:
         54:42:30:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:10 2026 by rpki-client