Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/rY7GmP7c0Tnkd8jjxW_L0BLPzGI.roa
File:                     rY7GmP7c0Tnkd8jjxW_L0BLPzGI.roa (raw, json)
Hash identifier:          HyUIeMjrbDgtHQVUIaaxNBRhTtRnGlrOoQAeViuJ22Q=
Subject key identifier:   AD:8E:C6:98:FE:DC:D1:39:E4:77:C8:E3:C5:6F:CB:D0:12:CF:CC:62
Certificate issuer:       /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial:       55
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/rY7GmP7c0Tnkd8jjxW_L0BLPzGI.roa
Signing time:             Tue 31 Mar 2026 07:49:46 +0000
ROA not before:           Tue 31 Mar 2026 07:49:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131969
IP address blocks:        133.88.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
        Validity
            Not Before: Mar 31 07:49:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AD8EC698FEDCD139E477C8E3C56FCBD012CFCC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:d0:f6:78:84:19:b7:1b:bd:aa:14:b4:fa:
                    19:62:7d:87:2e:9f:bd:6a:cc:93:1f:d3:3d:e0:b6:
                    f7:5e:a1:6b:64:eb:d5:e9:7e:83:93:11:06:5f:62:
                    b8:26:47:66:d7:a3:d7:4e:d9:f3:5b:63:af:dd:44:
                    11:eb:34:04:4c:2b:4d:8e:f2:eb:a5:3e:e9:e2:4c:
                    9a:23:da:37:e6:6c:b1:74:0e:e6:37:c3:04:7e:0e:
                    38:aa:b5:f6:45:1f:37:7d:39:c4:9c:7e:e3:7c:40:
                    1c:fe:87:f1:8f:60:2b:a6:e7:9a:63:2e:90:b9:3c:
                    3b:fd:ab:c1:10:44:e2:28:a5:60:d7:e3:18:dc:db:
                    1c:96:7f:7b:2c:be:0c:f0:ab:e6:1d:8e:fc:9b:ad:
                    91:16:dd:00:b0:8d:6a:43:06:ee:0a:f3:b6:10:11:
                    59:ed:75:5d:a1:da:93:19:97:16:db:f5:54:f9:55:
                    cc:13:7e:17:4d:1f:39:f5:1e:02:d7:67:18:f3:65:
                    76:ac:2e:36:fc:7b:ae:ef:7f:f6:20:d6:da:96:7e:
                    c8:6c:02:17:1f:70:c6:3a:eb:36:1c:db:30:5f:f0:
                    7c:0e:72:01:ed:a4:ec:b2:30:b0:f5:0c:c3:1b:eb:
                    49:d8:17:38:8d:e5:73:78:99:9e:06:2f:67:c1:5e:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8E:C6:98:FE:DC:D1:39:E4:77:C8:E3:C5:6F:CB:D0:12:CF:CC:62
            X509v3 Authority Key Identifier:
                keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/rY7GmP7c0Tnkd8jjxW_L0BLPzGI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:3d:c8:d0:4d:64:d7:8b:9a:e7:a3:71:6d:c8:ae:98:7d:8e:
         e9:d7:b4:af:73:17:2c:dc:b8:92:4c:9b:dc:1e:1c:49:2b:7e:
         16:29:c7:39:0e:25:4e:4e:7a:f4:7b:bb:37:8a:18:d5:81:bd:
         bf:69:f7:c2:d7:92:b1:1a:72:45:6d:fb:a1:a0:47:a2:c4:4d:
         88:a4:64:d1:82:14:d7:4a:59:c1:2f:fd:91:31:1b:c2:f8:ce:
         a1:c3:1f:88:cc:1d:ee:c1:19:ca:52:3d:4d:ef:b4:77:6d:ce:
         54:ea:b7:f7:b8:e6:93:e5:a2:f9:91:3a:0e:19:48:79:6b:30:
         19:d0:4c:6e:b4:85:15:ed:37:5a:c2:5a:a7:fa:7b:48:9e:a1:
         8d:59:7e:82:99:58:44:62:86:70:7c:51:00:9a:96:e1:1b:de:
         9b:32:17:1f:56:89:82:2f:21:b5:34:f4:59:d7:4a:fc:ee:73:
         40:4c:c5:1b:8c:f7:58:8b:58:62:03:d0:ed:93:03:89:86:8f:
         ba:d6:06:a3:86:71:54:0f:15:fc:9a:b9:56:84:f4:5c:2c:cd:
         c9:8b:5f:75:9d:03:93:55:7f:57:56:47:65:22:a7:d3:42:d4:
         dc:96:3b:f0:b2:10:fa:94:f1:ea:4f:f0:a7:e2:ca:2e:23:9d:
         55:bd:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:09 2026 by rpki-client