Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20133/5--F3a5vB3-cGgfZxWcgIZ1EHSo.roa
File:                     5--F3a5vB3-cGgfZxWcgIZ1EHSo.roa (raw, json)
Hash identifier:          uxN25O5/2JrC18KdhTx8Ax9S2V3C+IoVrl1ObyvKjoM=
Subject key identifier:   E7:EF:85:DD:AE:6F:07:7F:9C:1A:07:D9:C5:67:20:21:9D:44:1D:2A
Certificate issuer:       /CN=08EC6E8AC170A7A96F7C4DF33F833332D32302B1
Certificate serial:       27
Authority key identifier: 08:EC:6E:8A:C1:70:A7:A9:6F:7C:4D:F3:3F:83:33:32:D3:23:02:B1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/COxuisFwp6lvfE3zP4MzMtMjArE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20133/5--F3a5vB3-cGgfZxWcgIZ1EHSo.roa
Signing time:             Tue 31 Mar 2026 08:39:10 +0000
ROA not before:           Tue 31 Mar 2026 08:39:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131970
IP address blocks:        126.52.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20133/COxuisFwp6lvfE3zP4MzMtMjArE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20133/COxuisFwp6lvfE3zP4MzMtMjArE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/COxuisFwp6lvfE3zP4MzMtMjArE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08EC6E8AC170A7A96F7C4DF33F833332D32302B1
        Validity
            Not Before: Mar 31 08:39:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E7EF85DDAE6F077F9C1A07D9C56720219D441D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:16:be:f1:62:2e:b3:d2:29:03:93:c6:6b:
                    d5:42:d6:97:e4:3f:db:ef:ba:61:06:01:59:43:e2:
                    a1:de:f1:96:75:ab:96:7b:93:34:d2:8e:df:2f:69:
                    37:45:a9:17:82:6c:58:e5:02:5a:2d:bf:d9:8a:34:
                    72:4d:33:57:f0:bc:43:aa:b9:9d:bb:06:c4:ba:9c:
                    5a:60:39:12:28:35:76:cb:a5:81:2d:c3:60:08:56:
                    6a:0d:5f:76:50:de:88:a8:29:05:0b:48:55:2d:50:
                    e1:06:6e:05:dc:59:27:0d:4d:93:a1:b2:94:cb:86:
                    bd:f9:f9:ff:81:cf:3d:7c:7b:75:4a:bd:81:00:c7:
                    87:11:ed:44:12:02:b2:06:fd:66:f2:6c:8a:29:df:
                    c4:c9:38:9b:fc:65:c5:b1:00:0c:ef:62:a3:3f:d4:
                    e6:16:4a:53:f6:d5:7f:17:60:e3:45:80:73:61:38:
                    2e:2e:2d:5b:65:0e:6f:cd:e6:d1:6d:2f:94:bd:46:
                    76:d8:2e:e7:bd:10:8a:16:59:ed:df:4e:e6:1d:b4:
                    da:9e:45:2c:e9:5c:18:c2:7e:d1:4f:99:dd:27:d6:
                    88:33:c3:a2:33:8f:44:0c:73:cc:01:47:c6:f7:b0:
                    3e:e0:27:13:f3:92:6f:cd:bb:07:98:29:4b:cb:13:
                    cf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EF:85:DD:AE:6F:07:7F:9C:1A:07:D9:C5:67:20:21:9D:44:1D:2A
            X509v3 Authority Key Identifier:
                keyid:08:EC:6E:8A:C1:70:A7:A9:6F:7C:4D:F3:3F:83:33:32:D3:23:02:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20133/COxuisFwp6lvfE3zP4MzMtMjArE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/COxuisFwp6lvfE3zP4MzMtMjArE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20133/5--F3a5vB3-cGgfZxWcgIZ1EHSo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.52.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:17:bf:af:24:56:68:40:c3:8e:a1:29:df:9f:15:86:2b:14:
         49:de:b7:aa:0c:1f:95:db:34:ef:cd:18:22:5e:97:2c:3a:da:
         21:a9:9f:b1:8a:c8:64:c2:6c:b7:fd:9b:ea:08:82:55:a2:91:
         79:7a:07:5c:10:be:1c:17:7b:97:e1:71:a5:e7:86:95:23:31:
         f2:61:d5:23:db:94:b7:ce:69:20:03:59:3e:03:17:41:74:c8:
         c4:d6:0e:75:a6:88:4d:54:b9:25:c2:3b:cd:8a:38:63:80:86:
         62:45:c3:2f:55:31:52:33:24:de:3b:95:ff:52:99:c1:91:9e:
         b9:aa:5b:c4:db:92:5b:16:c1:92:53:bc:76:97:c8:e0:ca:98:
         b7:d3:de:0d:35:37:ce:04:72:d8:ff:bb:56:38:be:38:89:f3:
         ce:74:8a:4a:7d:2e:0c:b4:ea:ad:d5:c9:3b:ff:d9:ec:a4:18:
         74:bb:fc:7c:83:e3:af:e9:c8:31:5e:62:4f:31:c8:bd:6e:1f:
         26:9a:3e:8f:0b:29:77:06:98:05:0a:17:f8:c9:fa:29:f5:37:
         94:6b:e4:8c:03:13:48:55:4d:c9:99:e0:f2:3d:79:0e:7c:94:
         5d:03:16:d7:ba:f0:bb:2a:03:28:c8:6f:a5:98:d1:02:0b:1b:
         42:8b:59:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:24 2026 by rpki-client