Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/KGmsN6hf2Si08tgHYfxUA1JbhJQ.roa
File:                     KGmsN6hf2Si08tgHYfxUA1JbhJQ.roa (raw, json)
Hash identifier:          p2Dnm9jjUHluPfz1OB709ORmdb8f1elzXd3HYhKNZok=
Subject key identifier:   28:69:AC:37:A8:5F:D9:28:B4:F2:D8:07:61:FC:54:03:52:5B:84:94
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       014C
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/KGmsN6hf2Si08tgHYfxUA1JbhJQ.roa
Signing time:             Tue 31 Mar 2026 07:30:21 +0000
ROA not before:           Tue 31 Mar 2026 07:30:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9607
IP address blocks:        203.141.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Mar 31 07:30:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2869AC37A85FD928B4F2D80761FC5403525B8494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:35:61:57:e4:1c:fd:42:26:f1:f3:0b:a6:
                    15:f1:5f:20:a0:e0:c4:20:1d:ae:e1:c6:a2:ea:dc:
                    87:ab:9d:8d:b3:aa:02:bd:c0:29:d9:67:1d:ca:e2:
                    e0:86:8e:d3:92:d4:f0:a1:b1:5a:31:04:60:3f:79:
                    7b:6f:92:2f:a0:cd:55:51:af:21:41:72:e7:87:62:
                    65:b2:e7:ff:70:a8:33:aa:de:7c:47:bf:56:7f:37:
                    69:51:58:51:e9:6f:8e:a9:31:42:2f:a1:d4:85:57:
                    b9:8c:04:90:19:26:97:d8:1c:20:e3:32:97:0c:09:
                    d6:5a:66:ee:46:04:46:6d:ef:73:cd:02:9f:66:27:
                    33:d4:5a:83:e8:f8:b5:70:bb:3b:b7:59:e4:2e:bd:
                    d3:14:13:1a:07:cc:90:ad:78:91:71:fa:69:b2:c7:
                    eb:69:6f:a0:8e:5b:29:72:b8:e8:f1:89:c3:41:69:
                    de:50:a8:74:41:ff:ca:76:13:65:d3:f6:9c:9c:58:
                    1d:c6:ca:b4:db:ea:9f:a7:86:b3:01:1f:56:4b:db:
                    5a:07:8e:03:20:00:28:9e:ce:2e:d0:12:65:37:f7:
                    77:b6:09:a5:d7:51:38:d9:2b:87:6c:2a:b8:fe:0f:
                    fa:50:37:6d:e6:67:c8:36:73:30:b1:bc:51:06:76:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:69:AC:37:A8:5F:D9:28:B4:F2:D8:07:61:FC:54:03:52:5B:84:94
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/KGmsN6hf2Si08tgHYfxUA1JbhJQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:e6:2c:29:cf:ac:f4:f1:3b:a4:91:24:3d:df:77:8c:40:6f:
         a1:f0:a1:19:64:40:2f:25:62:a8:be:51:e3:7e:8e:97:ce:d5:
         b1:43:47:1e:9f:f4:15:41:f1:0c:c3:f6:66:1c:79:4f:2e:ec:
         9b:64:ef:44:92:a9:0b:b7:5a:a7:0e:7a:59:ef:3d:b8:df:f3:
         c5:ca:eb:53:36:55:a5:8a:08:88:37:dc:d2:8f:a5:22:7e:24:
         4c:e7:5d:e2:31:c9:8c:35:9d:bb:07:95:5d:b1:7d:3b:2a:a2:
         18:7a:1d:99:f3:c1:17:e9:2d:de:99:e0:30:e8:a5:07:32:f0:
         bf:bc:d9:76:f8:b0:85:a8:d0:e0:60:93:71:70:c3:2c:68:4e:
         fd:da:7d:cf:91:83:75:43:4c:d2:2d:b8:4c:9e:90:5e:18:3a:
         40:ee:1a:75:bf:36:78:73:be:8d:35:2b:d8:99:95:b4:0c:a1:
         ef:5b:b5:cd:53:c2:dd:63:7e:e5:82:72:77:62:46:12:ba:75:
         ac:6c:48:59:a7:d8:fb:91:0e:ab:7e:b6:7f:40:15:45:cd:b6:
         3d:30:72:20:9f:9d:b6:cf:6f:41:f8:72:0c:65:6e:d7:d9:a8:
         69:e3:00:3d:d7:a6:03:cc:fe:f2:5e:3c:63:d7:c3:d2:62:28:
         d5:61:ec:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:58 2026 by rpki-client