Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20093/qX6-1CA24MqkmL3soVGCIloKF98.roa
File:                     qX6-1CA24MqkmL3soVGCIloKF98.roa (raw, json)
Hash identifier:          4MUHdyAUH58HTeAxDg1klhX5TCwD45uv8Q/OrdncRog=
Subject key identifier:   A9:7E:BE:D4:20:36:E0:CA:A4:98:BD:EC:A1:51:82:22:5A:0A:17:DF
Certificate issuer:       /CN=711F626595BDEABE9334C61D729C4DA254CED91C
Certificate serial:       61
Authority key identifier: 71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/qX6-1CA24MqkmL3soVGCIloKF98.roa
Signing time:             Tue 31 Mar 2026 07:38:40 +0000
ROA not before:           Tue 31 Mar 2026 07:38:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131949
IP address blocks:        133.247.144.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711F626595BDEABE9334C61D729C4DA254CED91C
        Validity
            Not Before: Mar 31 07:38:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A97EBED42036E0CAA498BDECA15182225A0A17DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:df:96:52:fd:fe:24:9b:0b:0a:a0:55:e4:
                    13:8e:1a:3c:c6:6d:04:d0:c4:46:72:f4:fc:d1:22:
                    b4:cf:97:c6:62:49:59:f4:be:c7:8a:3b:ab:38:52:
                    01:e6:8a:3b:ab:29:46:c5:e3:a6:01:61:b8:06:7d:
                    5d:a4:98:b5:01:c1:f9:71:5e:8e:2d:f6:41:08:23:
                    89:2e:72:2b:13:b3:36:0c:af:95:b8:da:85:4f:ef:
                    96:f3:69:99:33:5a:3a:34:ed:f7:35:4d:21:84:63:
                    dc:a3:f0:72:8e:3d:11:bd:8d:28:2f:e1:80:c5:37:
                    e9:b4:69:67:6b:c6:5f:11:d1:5a:e3:d2:0a:ab:4c:
                    ce:8a:84:55:dd:6b:93:2c:ad:d9:2f:28:73:2b:ec:
                    03:ce:35:84:ca:e9:6c:51:1a:56:f7:1f:f0:1b:f9:
                    89:48:2e:5c:6f:04:87:86:18:96:d8:a5:85:20:db:
                    b0:bf:35:d4:13:4b:f9:6c:ed:76:03:2e:dc:74:32:
                    73:79:96:2b:d9:01:ad:f5:5e:87:b4:f2:13:83:1a:
                    1f:49:9f:15:61:8b:44:1a:14:8e:ff:4d:17:f7:f1:
                    9c:1a:ee:16:bf:df:7f:81:fa:47:b0:77:04:f4:a4:
                    0d:de:74:9e:63:cf:b1:54:0a:98:43:e1:06:f2:3e:
                    1e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7E:BE:D4:20:36:E0:CA:A4:98:BD:EC:A1:51:82:22:5A:0A:17:DF
            X509v3 Authority Key Identifier:
                keyid:71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/qX6-1CA24MqkmL3soVGCIloKF98.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:49:84:f0:c3:96:2d:68:5b:b4:b9:c4:d2:a5:4a:6f:b3:83:
         e9:99:68:40:4f:fe:0e:a8:dc:37:07:36:f0:aa:ad:57:48:f3:
         98:92:fe:df:83:68:a7:4b:79:51:0a:f7:94:23:fa:ce:f7:45:
         a0:6b:4b:00:2e:d1:43:8d:d4:68:c6:00:83:c6:63:dd:25:9a:
         b4:31:77:33:e1:74:3b:af:63:dc:8d:42:ec:f4:30:57:ca:25:
         90:f7:1d:45:b0:e4:e9:a1:d6:12:05:e7:79:62:79:45:5e:96:
         6a:6a:68:ec:08:d3:2d:ce:c5:d0:d6:4c:c6:84:51:75:a6:66:
         84:f3:3a:2e:58:3c:78:70:a5:90:31:1b:05:11:55:12:70:d2:
         ca:ec:95:a0:76:b2:22:3c:51:16:1b:50:9a:08:93:39:c9:aa:
         26:53:d3:88:44:5f:23:c5:a3:c8:c0:b7:70:05:1c:ca:8d:e8:
         7f:2e:4f:ee:d9:23:22:91:63:7c:72:2a:b0:4c:69:e0:ff:16:
         f5:49:25:fd:34:17:ee:c9:4f:8b:4a:34:92:89:25:fb:12:fa:
         c9:67:07:fb:43:62:d7:fb:2c:cd:d3:94:4b:4b:51:c3:4e:c7:
         30:c9:dc:82:85:10:d4:db:34:e6:74:f8:46:fc:24:4a:b0:c4:
         5f:1c:93:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:49 2026 by rpki-client