Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/3zbBvruxWE88FJZUOzqLizyawXg.roa
File:                     3zbBvruxWE88FJZUOzqLizyawXg.roa (raw, json)
Hash identifier:          90RJ/yzgb/DFkYNDi7hyu295NbOKjWXpsj5V7VxBh2c=
Subject key identifier:   DF:36:C1:BE:BB:B1:58:4F:3C:14:96:54:3B:3A:8B:8B:3C:9A:C1:78
Certificate issuer:       /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial:       50
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/3zbBvruxWE88FJZUOzqLizyawXg.roa
Signing time:             Tue 31 Mar 2026 07:49:44 +0000
ROA not before:           Tue 31 Mar 2026 07:49:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18068
IP address blocks:        133.88.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
        Validity
            Not Before: Mar 31 07:49:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DF36C1BEBBB1584F3C1496543B3A8B8B3C9AC178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1b:d0:34:b5:12:50:63:e5:a7:dc:42:0c:25:
                    74:ac:a9:30:41:00:c4:23:2f:78:a8:10:d5:a5:d3:
                    f0:6d:17:35:42:db:1e:cd:0f:8a:da:97:81:59:d7:
                    8a:dc:7e:b7:8d:ed:b6:f2:da:ab:5a:7e:64:b4:e6:
                    be:1c:74:0b:88:2d:1c:71:04:20:20:01:8f:0d:34:
                    73:fc:7c:71:3e:75:93:7f:82:a3:d5:03:62:c5:5d:
                    ba:30:6b:10:21:60:71:ce:34:63:c8:1d:c0:af:4c:
                    af:e7:2a:1f:8e:75:cf:8c:e3:69:0f:e1:e2:93:d1:
                    7b:4b:4b:f3:ed:1d:2d:70:89:66:1e:21:a5:a0:45:
                    32:a1:ad:e1:00:28:ff:4e:c0:61:e6:84:a2:10:09:
                    dd:a6:3f:e0:b2:eb:28:17:8c:78:8a:d6:f3:e1:ca:
                    d4:78:ee:1b:92:92:e9:c7:a3:df:8a:15:20:ad:af:
                    d8:a1:b9:23:ab:48:ea:66:3f:ea:58:34:44:3c:60:
                    50:ba:0d:2e:e5:17:2b:aa:44:0a:c5:97:7e:54:9c:
                    66:5b:8c:c9:d7:80:d2:64:9d:7c:fc:9a:95:ce:12:
                    da:57:48:5f:de:0c:c9:3a:cc:29:6f:ee:50:ce:99:
                    a6:36:9f:5b:b9:83:df:a9:11:44:06:7a:eb:41:27:
                    dd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:36:C1:BE:BB:B1:58:4F:3C:14:96:54:3B:3A:8B:8B:3C:9A:C1:78
            X509v3 Authority Key Identifier:
                keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/3zbBvruxWE88FJZUOzqLizyawXg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:ca:e4:71:68:cf:8a:c3:89:44:38:ad:c1:9f:71:81:82:c0:
         ab:37:af:54:0e:70:c7:ff:d9:d5:7c:21:62:1f:fc:83:da:88:
         bb:bc:cf:43:da:8c:b8:e5:36:43:33:48:77:71:35:70:90:8b:
         b3:22:8b:ad:67:0a:2c:6b:f9:0c:fb:d1:6a:48:27:56:13:5b:
         62:fc:63:e1:dc:1e:0d:19:90:48:93:5f:1d:69:38:8b:d8:00:
         7c:cd:bb:3e:0b:c4:ad:77:40:c6:f8:22:52:b1:13:59:00:a7:
         d9:dd:44:0c:6b:2c:32:24:e1:75:2d:8c:2b:ca:ef:37:c2:3f:
         75:e3:0a:ff:2f:01:78:44:d1:18:ce:77:c9:a9:67:d5:ea:74:
         63:3c:b8:bc:65:cd:62:3a:34:30:57:2b:25:00:24:84:b5:31:
         e6:20:b4:b0:10:e4:71:56:b8:b9:81:b9:5c:b7:e5:2d:43:d5:
         c1:79:ab:54:7b:54:37:e0:f8:41:bf:a9:59:7b:51:1c:1a:92:
         96:04:3b:df:9d:0d:ca:85:66:4e:cb:d3:ee:7c:f3:a1:78:8a:
         ed:25:63:c0:80:a1:4b:68:6e:b6:40:11:24:31:5d:66:52:7c:
         a0:da:a6:2d:ce:27:c8:6f:98:f8:61:89:b5:bb:bc:9b:9c:f8:
         67:7b:32:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:51 2026 by rpki-client