Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/ocq9mA2e1R7PYpHKP-zbvbozUJ4.roa
File:                     ocq9mA2e1R7PYpHKP-zbvbozUJ4.roa (raw, json)
Hash identifier:          DoB61NtyqMC8Bvb2p5SHH8pAVDN7iUB4gO+HJ6dENbc=
Subject key identifier:   A1:CA:BD:98:0D:9E:D5:1E:CF:62:91:CA:3F:EC:DB:BD:BA:33:50:9E
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       61
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/ocq9mA2e1R7PYpHKP-zbvbozUJ4.roa
Signing time:             Tue 31 Mar 2026 08:31:09 +0000
ROA not before:           Tue 31 Mar 2026 08:31:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131923
IP address blocks:        218.45.64.0/19 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Mar 31 08:31:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A1CABD980D9ED51ECF6291CA3FECDBBDBA33509E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:3b:1e:52:0f:e1:67:3e:d1:70:f4:2a:a7:
                    ea:df:85:47:8b:a6:aa:90:46:48:ba:11:ef:48:ec:
                    67:ee:0c:d3:90:42:23:b7:5c:0b:26:10:86:a1:7d:
                    e5:1c:d4:ec:86:54:79:a3:5e:45:76:2f:93:9b:64:
                    64:ac:cb:bd:fa:17:11:d3:26:4b:9e:fc:ee:cd:f5:
                    70:a4:7d:7d:30:cb:b8:50:31:be:c6:c9:a8:ad:09:
                    2f:73:6d:e3:f7:62:d8:ea:e6:32:f4:f5:50:2a:2b:
                    a1:9e:c0:44:4e:05:b3:71:a8:e9:c2:78:ac:e3:1b:
                    8b:e3:63:92:d4:c0:28:08:0c:30:0f:7a:32:29:a5:
                    5f:43:79:04:7d:1a:9c:3d:e0:5f:98:16:d9:34:6d:
                    b1:7b:8f:dd:da:04:40:41:7e:8c:a1:6c:7d:5f:45:
                    57:3e:5b:05:82:30:39:11:c0:10:a6:8e:1c:28:95:
                    1f:e4:48:d8:5d:79:71:4f:39:41:cb:0b:09:a2:fa:
                    c4:20:5f:ce:98:6d:25:bb:74:86:7d:b4:7b:f4:1c:
                    b3:98:1b:ac:07:2b:fa:bf:b6:ef:74:f4:74:44:d4:
                    35:9c:35:0c:ee:af:fb:7e:1f:bc:5a:80:22:57:a5:
                    21:bd:38:df:4d:b3:1a:1d:b4:6d:ce:e1:30:c9:fc:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CA:BD:98:0D:9E:D5:1E:CF:62:91:CA:3F:EC:DB:BD:BA:33:50:9E
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/ocq9mA2e1R7PYpHKP-zbvbozUJ4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:20:96:ba:35:e7:bd:04:ce:a0:50:12:7c:72:75:26:22:1f:
         40:68:86:f9:01:fa:98:a0:0e:9f:91:46:b4:28:8b:11:21:d4:
         9b:3c:da:2d:45:01:0d:95:b8:2a:db:f0:6e:29:cd:f3:93:77:
         bc:a1:06:45:95:9e:0f:c1:4d:07:df:0b:0d:9c:0c:fb:8b:0a:
         20:07:aa:59:58:c1:02:fb:8b:e1:cc:6e:4e:fd:f3:1d:d2:a4:
         90:dc:d9:36:26:9e:ee:3a:66:22:ac:eb:7c:92:3e:38:1e:65:
         c7:53:ec:9c:8f:e8:86:f1:28:0a:65:b4:c2:9e:d7:9d:f7:c7:
         1b:c3:4c:b0:e9:9d:e9:87:58:38:17:f0:3a:c0:26:92:12:d5:
         d7:d1:c2:4b:81:ba:30:7c:cf:fc:96:a4:75:df:74:03:6b:d9:
         51:46:8e:bb:87:12:61:2b:70:60:5e:01:c6:8c:b4:06:8f:e8:
         02:9f:8a:26:5e:e0:14:92:ad:85:b6:3c:e3:f4:01:72:53:0d:
         3d:d6:07:d1:5e:41:b0:d9:01:a4:ae:3f:b8:a8:26:39:e1:61:
         67:18:d0:99:af:e0:e9:46:cf:eb:91:8e:c5:74:bd:3f:cb:13:
         34:3c:f5:46:dd:1e:7f:27:7f:80:6c:85:c6:59:73:57:f9:43:
         8f:d9:42:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:03 2026 by rpki-client