Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/4djfd5S2bMv1S0ekStANp8V7VU4.roa
File:                     4djfd5S2bMv1S0ekStANp8V7VU4.roa (raw, json)
Hash identifier:          +6a8B4rHqMPFwmcXvHxZvKuinkvxeetmozio3vf+L84=
Subject key identifier:   E1:D8:DF:77:94:B6:6C:CB:F5:4B:47:A4:4A:D0:0D:A7:C5:7B:55:4E
Certificate issuer:       /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial:       4F
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/4djfd5S2bMv1S0ekStANp8V7VU4.roa
Signing time:             Tue 31 Mar 2026 08:15:05 +0000
ROA not before:           Tue 31 Mar 2026 08:15:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131929
IP address blocks:        219.100.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
        Validity
            Not Before: Mar 31 08:15:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E1D8DF7794B66CCBF54B47A44AD00DA7C57B554E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:8d:c4:20:5d:61:81:7e:0b:29:7d:50:4a:
                    f2:2b:40:49:32:0f:05:0a:d3:1d:a6:85:d3:21:55:
                    86:fb:48:35:c2:2e:da:76:96:ce:a5:23:73:4e:5f:
                    7f:2e:60:61:56:98:f2:44:6c:06:32:ca:48:60:62:
                    cb:3e:5f:64:68:44:85:7b:05:5c:c9:0c:20:6a:ac:
                    b0:44:b3:bc:60:a9:57:ab:75:91:7c:77:4b:9a:7c:
                    8d:c4:c9:a7:8f:6b:3b:b0:33:c3:f3:76:d1:d9:98:
                    64:11:65:f9:f5:cc:9e:71:f1:49:1a:ec:2a:87:16:
                    db:8e:95:34:4b:77:ad:bf:a9:f6:81:81:17:83:0f:
                    9e:45:d6:6c:2e:e2:5d:6f:e0:27:9a:b0:9e:b3:c0:
                    42:79:c8:2a:ae:a8:b3:c9:3e:5b:91:b2:5d:65:1f:
                    4d:fd:82:1c:0d:8d:89:04:f4:85:c6:ed:c8:0a:dd:
                    f4:ec:d8:3e:a3:46:a6:31:66:08:9c:28:bf:4b:9f:
                    50:54:9c:e6:0c:c9:17:40:c1:26:be:90:9f:1c:1e:
                    f9:45:7f:85:72:97:8f:c0:6b:08:ba:b1:d6:84:7c:
                    e5:b9:cc:c2:eb:ee:d4:3f:da:41:02:64:e0:3d:34:
                    da:ce:71:1d:13:c7:c2:d1:0f:5a:cf:0d:61:43:91:
                    fd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D8:DF:77:94:B6:6C:CB:F5:4B:47:A4:4A:D0:0D:A7:C5:7B:55:4E
            X509v3 Authority Key Identifier:
                keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/4djfd5S2bMv1S0ekStANp8V7VU4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:45:ac:d7:6c:cf:8a:1a:76:41:85:b4:16:0e:f7:ce:b4:9d:
         f8:7b:8b:7a:fa:34:61:61:a6:32:10:05:2f:98:d8:c7:cc:85:
         b1:5c:fa:d7:cc:ab:e6:04:25:43:78:d3:76:c1:60:8d:e6:54:
         c1:d5:6d:db:83:ae:cd:45:a5:40:47:b5:ee:b1:b7:be:6d:f1:
         8c:dc:e6:71:67:92:15:54:7a:9c:f6:cd:7d:bb:d1:5a:fd:48:
         66:f0:31:68:80:c9:8c:50:4c:00:4b:d6:fe:0f:40:3e:d3:13:
         55:28:c2:92:01:b9:29:59:f5:c8:38:aa:bc:12:87:ce:c5:0d:
         5b:a5:22:bf:41:67:75:e9:48:9d:30:f2:60:16:97:06:e3:50:
         fc:26:97:2d:1b:02:62:78:bf:40:38:a2:f0:bf:23:b8:58:de:
         06:70:c1:e6:1f:b5:b1:a2:bf:bd:3c:1d:84:c3:bd:cb:76:25:
         ee:a2:e4:36:64:29:7f:b9:bc:47:1e:21:3e:7b:0e:00:9d:4d:
         e2:a1:2f:36:23:d5:d4:48:00:cc:0b:7a:68:f2:47:54:a2:02:
         75:20:8f:2a:ca:81:f7:ae:12:04:02:10:e4:d9:59:8a:da:b4:
         1f:7d:de:60:9e:d9:99:ac:df:cd:35:69:f4:29:3a:57:be:ea:
         48:1c:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:04:28 2026 by rpki-client