Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20061/-ZEmPGe-iHFFf-XkF033T98LQoM.roa
File:                     -ZEmPGe-iHFFf-XkF033T98LQoM.roa (raw, json)
Hash identifier:          QreQIR2cBUQuYxB4GN6SKxYfyhEWxVXSUpGBDydcEQc=
Subject key identifier:   F9:91:26:3C:67:BE:88:71:45:7F:E5:E4:17:4D:F7:4F:DF:0B:42:83
Certificate issuer:       /CN=72811A6F4B1F7935818F8C8794F150A772BDD7CB
Certificate serial:       4D
Authority key identifier: 72:81:1A:6F:4B:1F:79:35:81:8F:8C:87:94:F1:50:A7:72:BD:D7:CB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/coEab0sfeTWBj4yHlPFQp3K918s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/-ZEmPGe-iHFFf-XkF033T98LQoM.roa
Signing time:             Tue 31 Mar 2026 07:52:49 +0000
ROA not before:           Tue 31 Mar 2026 07:52:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131161
IP address blocks:        43.222.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/coEab0sfeTWBj4yHlPFQp3K918s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/coEab0sfeTWBj4yHlPFQp3K918s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/coEab0sfeTWBj4yHlPFQp3K918s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72811A6F4B1F7935818F8C8794F150A772BDD7CB
        Validity
            Not Before: Mar 31 07:52:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F991263C67BE8871457FE5E4174DF74FDF0B4283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:67:29:4d:f2:98:9a:9d:e8:b7:9a:14:99:
                    4d:7f:95:f0:03:ae:86:5b:d3:95:d2:39:fb:11:59:
                    5e:ff:e8:a3:30:de:46:aa:47:31:0e:78:04:c5:39:
                    43:0a:91:15:c7:63:af:9d:49:e2:f2:dc:3d:46:94:
                    80:4a:59:d2:df:3c:b5:0f:71:67:1e:41:a7:b4:9a:
                    e1:fc:53:6b:ef:5f:b4:bb:c8:46:36:e2:30:73:4e:
                    92:c5:23:51:d6:0d:db:c5:9e:95:cf:b9:e4:36:f9:
                    fc:41:87:8e:28:b3:b2:ef:1f:68:9b:6a:e2:a2:c1:
                    21:01:14:e2:83:9a:84:1c:e2:f1:8e:4e:40:69:b5:
                    f3:b1:d9:72:ec:ed:89:62:74:d6:83:0d:54:b1:93:
                    d5:25:16:38:ca:20:8b:5a:96:f8:0c:de:fb:30:99:
                    59:c7:ae:9f:e6:45:70:18:60:44:b8:9f:e6:72:ea:
                    ec:19:8b:1c:0c:c1:74:3a:b3:2d:4c:6c:bc:c7:0f:
                    71:8f:6e:a3:91:0f:ed:51:a5:5e:54:53:12:ab:37:
                    0f:46:ca:f5:04:49:12:12:b5:af:e8:d4:0c:0a:e7:
                    16:e2:b2:05:d7:50:3d:fb:e6:07:dd:24:c2:72:74:
                    14:9a:7e:ab:6a:4f:0d:3a:a6:9c:24:fc:03:10:86:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:91:26:3C:67:BE:88:71:45:7F:E5:E4:17:4D:F7:4F:DF:0B:42:83
            X509v3 Authority Key Identifier:
                keyid:72:81:1A:6F:4B:1F:79:35:81:8F:8C:87:94:F1:50:A7:72:BD:D7:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/coEab0sfeTWBj4yHlPFQp3K918s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/coEab0sfeTWBj4yHlPFQp3K918s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20061/-ZEmPGe-iHFFf-XkF033T98LQoM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.222.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:6b:c1:f8:0f:4d:14:28:f4:79:86:a1:f4:99:95:df:35:88:
         7f:d5:1e:5d:a6:f4:09:07:2b:44:df:e7:f9:4e:d2:0b:d2:86:
         b5:18:b0:7a:b3:ed:e0:0c:d6:3b:6c:26:f3:fd:3d:21:20:9c:
         ca:07:53:f8:de:e1:ec:32:e8:b0:ef:69:7f:77:7d:0a:a4:46:
         71:a8:ab:1b:b3:8b:7f:bb:b0:22:e4:85:79:46:6e:60:d4:ca:
         79:51:d3:1a:8a:8a:b1:56:a1:b9:e0:d7:c9:b4:ea:97:2b:bc:
         75:12:dc:c7:49:fa:85:8c:ce:21:47:54:f3:f2:1d:84:99:fe:
         54:c2:6b:ce:0a:7a:76:0e:23:30:43:40:3b:57:70:54:cd:33:
         a5:35:38:f0:1f:a3:d7:20:fd:7c:03:6e:87:53:e2:4c:49:1a:
         dd:43:9b:0c:7d:2a:8a:ed:7f:70:0a:fd:a1:65:84:c5:da:4c:
         79:e2:4a:57:d8:3b:11:c5:a4:5f:9e:af:f2:e2:e3:75:18:90:
         12:42:cf:e3:72:46:4c:43:8b:71:6e:77:cd:42:01:03:01:3f:
         ff:22:72:76:d9:c2:e9:03:ad:56:36:48:db:48:5d:0f:7c:c5:
         74:da:55:89:e4:c1:68:f5:f1:93:03:87:5e:73:10:4f:68:56:
         4b:ea:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:49 2026 by rpki-client