Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RigMR2sM04s-cXAmVVsnzDD_kZI.roa
File:                     RigMR2sM04s-cXAmVVsnzDD_kZI.roa (raw, json)
Hash identifier:          pkJaGxxqQ7lokAEOOkPm0Cna8sL3/zWYzN4DSb1pQWM=
Subject key identifier:   46:28:0C:47:6B:0C:D3:8B:3E:71:70:26:55:5B:27:CC:30:FF:91:92
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1562
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RigMR2sM04s-cXAmVVsnzDD_kZI.roa
Signing time:             Tue 31 Mar 2026 07:59:33 +0000
ROA not before:           Tue 31 Mar 2026 07:59:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5474 (0x1562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=46280C476B0CD38B3E717026555B27CC30FF9192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:c1:88:94:86:57:90:9f:21:9e:c8:15:bd:
                    4c:11:48:d2:bf:bd:19:49:f0:1a:44:80:6a:00:cb:
                    34:6c:53:da:a5:6e:2c:b6:ec:45:6b:92:bf:ee:53:
                    02:52:e9:f6:06:ab:f5:14:3e:d0:b4:73:45:f5:bc:
                    5a:22:84:25:51:53:ec:19:1e:54:24:90:12:5c:39:
                    57:3f:32:74:1a:44:ce:b0:b7:94:2d:28:75:07:2e:
                    74:34:39:1c:d3:56:8d:c0:56:f9:f3:31:17:f1:a3:
                    0b:0c:41:b5:31:77:29:55:02:d4:e1:56:54:a4:67:
                    6a:c2:af:3b:7b:c6:f2:5a:fd:61:f8:40:ef:13:d7:
                    2a:de:c1:93:f5:e2:49:f6:49:97:45:22:f3:69:0c:
                    13:7a:f0:3b:5e:41:19:be:29:98:6b:19:b7:57:d8:
                    50:ec:c4:b1:04:dd:a3:b8:96:77:ad:6f:7b:7b:4b:
                    85:c1:2a:de:0d:62:d5:d9:a4:88:cb:fa:51:12:b3:
                    65:54:67:56:89:bc:a3:ee:79:ca:80:54:fb:78:38:
                    74:b7:f5:1b:98:d2:23:b9:5b:f7:d0:03:8d:18:b4:
                    4a:91:eb:c9:d7:93:13:83:b0:35:37:aa:1c:e2:31:
                    88:7f:dd:f2:d8:53:81:98:d3:9b:ed:cc:52:3d:89:
                    73:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:28:0C:47:6B:0C:D3:8B:3E:71:70:26:55:5B:27:CC:30:FF:91:92
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RigMR2sM04s-cXAmVVsnzDD_kZI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d8:19:cd:e4:0a:cc:94:14:a4:68:f2:30:b2:c2:8b:74:06:21:
         fb:41:8f:11:9e:ee:2a:cd:7c:27:47:ac:b9:c5:28:5b:49:c1:
         56:63:34:b7:28:72:59:6f:92:1a:46:6d:4d:5c:dc:3d:f3:7e:
         ec:39:ed:d7:1d:23:ea:f5:54:72:6b:83:d0:69:bd:70:be:bd:
         c0:6a:89:b0:2b:b5:6d:6d:16:40:c5:34:ed:8e:11:1e:34:d4:
         31:81:d0:b9:a7:de:d9:66:d6:84:af:2a:50:83:07:5e:c9:d8:
         96:1a:ad:ba:8b:27:91:87:f7:7a:49:1b:2a:ec:f2:62:a2:58:
         95:ba:e8:04:08:da:0f:8d:56:d5:b0:c6:d9:64:8a:c7:db:d9:
         3c:7b:60:1d:5f:a4:8d:e7:57:97:15:c9:9c:70:73:6a:65:b1:
         61:b8:5d:a5:e8:93:ea:01:31:33:f9:88:b6:54:3a:c8:5c:9d:
         21:9b:3d:6a:e8:d3:b7:9c:0c:21:f5:24:f7:da:8f:13:24:8c:
         d3:ee:db:b0:86:8d:e4:d3:4d:ea:2b:08:62:bd:ae:82:76:b7:
         cf:82:a8:f7:87:d2:9a:5a:13:f2:2c:15:39:b3:7e:fc:7c:02:
         fd:70:3d:b4:13:5d:76:5a:35:05:7a:63:0f:d1:36:2a:4b:e2:
         73:c4:e2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:48 2026 by rpki-client