Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/pJ3P2LJVX96lE-AM-d_d6tmYvs8.roa
File:                     pJ3P2LJVX96lE-AM-d_d6tmYvs8.roa (raw, json)
Hash identifier:          p3AUtT1YjZkt2tZBfNH6njnRUtEkotUq+ErMgTeg2R8=
Subject key identifier:   A4:9D:CF:D8:B2:55:5F:DE:A5:13:E0:0C:F9:DF:DD:EA:D9:98:BE:CF
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       AD
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/pJ3P2LJVX96lE-AM-d_d6tmYvs8.roa
Signing time:             Tue 31 Mar 2026 08:37:17 +0000
ROA not before:           Tue 31 Mar 2026 08:37:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        218.40.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A49DCFD8B2555FDEA513E00CF9DFDDEAD998BECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e0:08:3c:9e:7d:80:36:6b:fd:cc:c7:a8:d6:
                    bf:b6:2f:bd:d1:5b:fb:a7:b2:09:18:d6:68:95:b3:
                    d4:62:3b:3f:b8:ee:61:50:95:f4:d6:77:5f:d5:ca:
                    92:2d:8f:75:b1:2c:72:37:40:1f:17:54:de:f9:6f:
                    f1:75:dd:b6:03:ab:d5:f2:be:66:70:32:1c:2b:99:
                    da:87:df:a6:89:73:cd:48:59:95:5f:46:a1:ec:8c:
                    11:de:87:08:a9:90:93:46:00:73:62:51:53:d7:dd:
                    9b:84:ac:5b:e6:22:4b:c4:2c:85:ca:b4:b1:63:20:
                    fc:e2:5e:88:02:c6:82:4d:b0:ab:b5:13:c1:21:f9:
                    69:58:dd:f2:14:9a:f9:07:0d:f6:c0:c8:6e:26:37:
                    66:7f:8e:74:d9:43:47:ff:73:ad:e8:0a:30:83:c3:
                    a1:af:89:e9:85:78:e3:cb:ad:22:d1:3e:27:29:ee:
                    89:8d:6f:77:47:fc:bb:17:11:3c:3b:f4:a3:67:41:
                    fa:99:79:1e:fb:f9:f3:ae:d1:f4:0e:61:a7:e9:72:
                    42:5d:a1:1d:5f:60:62:e9:54:db:b1:68:cf:dd:1c:
                    40:08:62:1a:85:22:b3:59:af:7c:9e:9d:b4:63:fc:
                    e7:b4:38:43:8d:8d:c1:8f:8c:1c:b0:16:35:b5:f1:
                    19:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9D:CF:D8:B2:55:5F:DE:A5:13:E0:0C:F9:DF:DD:EA:D9:98:BE:CF
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/pJ3P2LJVX96lE-AM-d_d6tmYvs8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:12:f0:6c:bc:e2:93:31:93:67:04:c8:0f:7f:71:ac:27:ea:
         b7:e5:79:fa:a7:ec:ce:63:21:b9:8b:a9:cf:0f:74:5c:fd:f8:
         79:d8:c1:16:d5:2d:6d:ae:71:4d:b9:5f:6c:32:11:56:9f:f2:
         43:ee:dc:7d:fe:f2:82:82:42:91:6e:9c:68:bd:10:3a:64:5f:
         b7:5e:49:46:31:e1:68:82:13:f8:3a:ba:ca:81:c3:b0:90:c6:
         78:94:92:ad:d2:e3:07:b1:f2:e7:54:28:ed:61:77:22:e2:85:
         da:bb:4b:b6:f2:99:20:d5:ec:d3:39:07:82:f4:5a:a4:43:a0:
         04:a3:67:94:81:65:95:52:4a:d0:97:eb:07:d4:05:30:59:d3:
         78:40:e2:ab:a1:56:70:df:00:40:8b:77:b9:4f:8c:55:92:0e:
         2f:96:81:a8:d1:61:3e:07:f2:86:04:86:fc:9e:6e:53:2d:d8:
         71:3a:ef:5c:7e:79:a5:0c:96:f6:60:97:9c:ff:7c:27:00:60:
         a3:bd:03:18:4c:ad:e9:9c:00:ed:45:c1:10:41:23:07:9c:f7:
         bc:c1:98:2a:22:c5:73:ad:27:83:f4:54:75:1f:75:d5:18:e3:
         86:e8:ed:83:40:50:ae:1b:4d:59:8e:01:16:7f:f1:73:cc:cc:
         54:bb:fe:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:56 2026 by rpki-client