Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/zQF_wx7f9jgR_lWuf3tiKFfsCeY.roa
File:                     zQF_wx7f9jgR_lWuf3tiKFfsCeY.roa (raw, json)
Hash identifier:          5RVjFwgtoogI/OwoBiF34n2Ya/xE78U9+t3DQ4Kxm04=
Subject key identifier:   CD:01:7F:C3:1E:DF:F6:38:11:FE:55:AE:7F:7B:62:28:57:EC:09:E6
Certificate issuer:       /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial:       50
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/zQF_wx7f9jgR_lWuf3tiKFfsCeY.roa
Signing time:             Tue 31 Mar 2026 08:15:06 +0000
ROA not before:           Tue 31 Mar 2026 08:15:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131929
IP address blocks:        133.247.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
        Validity
            Not Before: Mar 31 08:15:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CD017FC31EDFF63811FE55AE7F7B622857EC09E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:e7:c7:35:7d:dd:84:dd:1d:d2:2f:6c:fc:
                    e1:e4:10:e5:3f:2e:88:92:31:c7:59:1b:38:00:43:
                    bc:1c:5e:69:73:fd:d0:b3:5a:fc:44:00:25:9b:79:
                    a4:69:b1:0d:98:c8:62:c4:9b:ee:cf:a3:ae:89:44:
                    6b:d5:e3:95:e6:43:a4:88:4a:0c:39:58:a1:ae:a3:
                    1b:6b:55:20:b4:3d:11:4a:0a:80:8d:18:b8:17:61:
                    49:33:71:8b:e8:a1:e8:dd:f1:f7:3a:4c:91:ce:90:
                    02:ff:bd:15:8c:26:de:07:5a:3b:38:fd:71:b3:5d:
                    15:6e:ee:a7:62:90:58:27:a4:95:24:8d:9c:ac:c2:
                    27:bb:83:92:74:46:cd:91:d0:98:ed:9e:1e:1f:ef:
                    e6:54:22:73:8b:74:96:7e:3b:82:f1:aa:97:12:7a:
                    97:28:b1:08:1d:72:b4:eb:a4:d3:73:77:97:fe:5e:
                    80:a2:60:20:3d:04:c3:8a:2d:57:ff:00:a8:20:e8:
                    ef:09:f2:0d:0d:a8:50:4e:ac:1e:d9:00:9b:f8:e9:
                    a6:7c:d9:78:6f:19:e8:7b:76:67:52:c2:5d:50:7d:
                    88:af:3b:7c:07:a9:4b:61:93:65:6b:d9:68:5d:66:
                    17:c5:4a:40:b9:54:84:78:36:e8:95:a3:b7:b3:02:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:01:7F:C3:1E:DF:F6:38:11:FE:55:AE:7F:7B:62:28:57:EC:09:E6
            X509v3 Authority Key Identifier:
                keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/zQF_wx7f9jgR_lWuf3tiKFfsCeY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:07:a1:5a:ab:22:51:b7:9e:6a:ed:11:fe:4f:ad:34:0c:3b:
         74:44:47:7b:e2:cf:72:1a:d3:80:6a:14:4e:ab:86:2f:1b:a8:
         c9:bc:11:9e:b1:e5:71:f5:c3:17:59:94:2c:2f:6c:6a:de:e9:
         fc:4a:44:bc:44:10:9d:e2:f8:0e:32:05:b4:70:13:2e:e6:81:
         80:bb:2f:85:02:ac:49:ed:eb:d0:a0:1c:87:a9:cc:70:43:6b:
         25:89:15:a4:2a:e8:c5:f6:a5:b3:2c:d2:09:7b:ba:26:19:c4:
         ad:80:ae:4b:cc:0f:d2:1a:6c:96:7b:7e:5d:3c:da:6d:db:d0:
         ce:16:25:10:6f:6b:f9:7f:9a:62:8d:09:d2:65:a4:a7:63:8f:
         7e:6b:f2:50:c6:08:86:61:a7:79:b7:6e:37:75:16:19:e8:ea:
         b9:dc:72:2a:17:8b:32:16:0e:66:c6:f3:02:ab:70:5d:8e:09:
         45:fd:bc:89:69:d2:de:b7:02:4f:bb:e7:28:3b:ff:29:2e:06:
         13:5b:0d:5a:6e:88:13:21:24:a1:8c:57:3f:cc:68:e9:cc:10:
         b5:47:ee:ff:de:c0:8e:9e:21:e8:d1:d0:d8:01:6c:92:ed:08:
         eb:f2:b8:89:38:aa:e7:57:4e:8e:81:91:0e:71:13:42:71:94:
         b4:fa:f1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:04:28 2026 by rpki-client