Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20095/OX28YijipgD9eA1eyMl_cz5xQu4.roa
File:                     OX28YijipgD9eA1eyMl_cz5xQu4.roa (raw, json)
Hash identifier:          1pKN6tyOJXhQMQBjVY72Unvz82rK1U5RB8Y6vuBVMG0=
Subject key identifier:   39:7D:BC:62:28:E2:A6:00:FD:78:0D:5E:C8:C9:7F:73:3E:71:42:EE
Certificate issuer:       /CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
Certificate serial:       28
Authority key identifier: 29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/OX28YijipgD9eA1eyMl_cz5xQu4.roa
Signing time:             Tue 31 Mar 2026 08:38:33 +0000
ROA not before:           Tue 31 Mar 2026 08:38:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63779
IP address blocks:        202.208.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
        Validity
            Not Before: Mar 31 08:38:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=397DBC6228E2A600FD780D5EC8C97F733E7142EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:59:d1:2d:ad:8c:a3:a5:08:ee:87:93:1b:
                    b8:9a:48:c6:9f:1d:b3:fb:71:3c:0d:ed:d0:e1:8b:
                    89:21:d9:b5:95:2a:b6:1e:bb:5a:f5:7a:9f:6e:c7:
                    60:a3:c3:f2:48:12:df:3e:8e:71:28:bc:9f:97:b3:
                    d6:81:fb:42:55:c0:4c:fd:a4:c9:7b:57:59:08:81:
                    39:8d:cf:f2:ec:6b:78:f9:0e:bd:14:f6:96:09:56:
                    bc:b5:94:95:5d:bc:0a:37:27:e9:75:6a:57:83:b0:
                    1e:8f:34:a9:fc:54:c2:19:db:6e:27:7b:b1:a6:89:
                    27:cc:0e:66:a2:de:a6:4c:98:88:6d:ad:af:3f:9e:
                    0f:52:0c:c8:6c:41:73:f6:53:3d:ba:57:38:4d:11:
                    16:e7:9b:c4:60:ec:78:e2:d2:36:83:1b:0a:48:44:
                    dd:43:55:4b:38:a6:c5:35:53:6a:ef:03:00:39:9f:
                    2f:83:9f:5a:aa:19:1b:c4:6b:ce:9b:eb:eb:bd:c9:
                    45:22:38:30:74:66:d1:b4:49:5a:5f:0e:cd:d3:30:
                    28:5d:d6:d2:10:aa:8d:6d:a3:e0:d3:49:a7:bb:a1:
                    8d:00:11:41:e3:c4:45:82:32:a0:be:6d:ce:15:92:
                    b2:fa:f4:57:f1:2d:85:3c:0f:a3:9a:54:6b:24:f9:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7D:BC:62:28:E2:A6:00:FD:78:0D:5E:C8:C9:7F:73:3E:71:42:EE
            X509v3 Authority Key Identifier:
                keyid:29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/OX28YijipgD9eA1eyMl_cz5xQu4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.208.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:61:56:ff:9c:01:8e:ff:c2:1f:bf:1a:3b:21:05:42:67:26:
         c3:34:57:f5:ef:25:d2:f8:87:69:5b:8b:c5:ea:5a:88:01:e6:
         ab:05:e4:de:27:a7:6e:38:30:57:5a:df:14:c4:07:62:69:0e:
         22:7a:f3:ab:d9:18:71:de:9f:4e:0a:2a:75:94:19:44:a4:cc:
         a0:b4:09:ae:4c:8a:ea:9f:9c:39:67:d8:d2:ba:5b:d3:19:41:
         22:ad:a6:89:15:e8:8a:4c:2f:7d:b5:16:0d:d8:2c:01:99:67:
         b5:a0:53:b1:3a:6b:ef:ab:15:17:9c:31:e6:a1:29:e7:1b:30:
         8c:b8:a8:75:f5:58:dc:06:73:1e:82:85:74:88:09:a4:5d:8a:
         9a:49:61:0c:cd:f6:98:be:8d:d8:aa:a8:83:f4:5a:c4:e8:37:
         5d:23:f8:c1:a9:00:53:3b:f6:69:ea:b5:82:65:37:7a:50:d0:
         73:16:65:ac:4a:11:7b:55:18:c6:5e:b7:d9:34:58:c1:85:12:
         16:43:84:07:be:f3:76:e1:85:f7:45:33:dc:41:c4:2c:c7:a9:
         43:12:8d:31:52:f5:c7:b4:d6:16:8f:b8:9e:dd:a9:81:4c:8b:
         5b:47:cc:3e:9d:44:59:9a:ee:51:62:97:20:da:c1:bc:bd:c1:
         8d:b2:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:20 2026 by rpki-client