Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/--SGi4UnxqcjbJI1YQewsvyvYOo.roa
File:                     --SGi4UnxqcjbJI1YQewsvyvYOo.roa (raw, json)
Hash identifier:          LGkl7oAfvHnHSQWYy26DV859pFTwUvgMUzI8at7l1g8=
Subject key identifier:   FB:E4:86:8B:85:27:C6:A7:23:6C:92:35:61:07:B0:B2:FC:AF:60:EA
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       6E
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/--SGi4UnxqcjbJI1YQewsvyvYOo.roa
Signing time:             Tue 31 Mar 2026 08:31:23 +0000
ROA not before:           Tue 31 Mar 2026 08:31:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Mar 31 08:31:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FBE4868B8527C6A7236C92356107B0B2FCAF60EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:83:d4:51:d8:6b:e7:58:f0:23:43:6d:94:
                    70:db:f3:23:64:bc:36:dd:ef:b8:40:87:8c:28:e8:
                    7e:e7:ff:83:90:08:d8:16:52:45:9b:de:a1:40:a4:
                    3b:8d:fe:f8:e7:2b:ab:fd:a9:49:e9:29:09:5a:d0:
                    54:60:27:c7:39:ef:0f:85:ea:ec:8b:bd:10:85:b4:
                    88:0f:b7:32:5a:93:f4:00:2c:4d:a4:e7:b2:3a:76:
                    8c:e5:af:d1:7c:72:53:13:ca:8c:f3:88:1b:6b:fb:
                    82:2a:30:ae:01:e9:e1:c0:9a:58:77:68:8b:40:56:
                    8b:eb:aa:77:ec:e1:80:47:84:70:29:f9:53:bb:9c:
                    a5:fb:01:80:dd:94:b8:b7:df:e5:03:3b:aa:cd:8e:
                    8f:60:bf:91:8d:7f:04:78:6e:69:ef:6f:ab:87:99:
                    87:c4:c4:77:1f:a2:05:11:19:14:a0:3d:f4:9e:e8:
                    b1:a2:a7:57:e8:ec:f9:7a:83:22:be:34:3f:7d:fd:
                    98:87:01:c9:e9:46:15:71:7d:2d:d5:67:2f:1e:23:
                    d6:e6:2b:75:3e:d8:54:83:e2:65:66:61:0c:0f:3c:
                    13:12:7c:55:4e:e8:92:19:7b:1e:cf:ea:b0:6e:f1:
                    5f:d1:0e:39:2c:bc:d7:12:f1:a8:ad:b7:94:a6:15:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E4:86:8B:85:27:C6:A7:23:6C:92:35:61:07:B0:B2:FC:AF:60:EA
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/--SGi4UnxqcjbJI1YQewsvyvYOo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:c4:31:14:ea:24:2b:27:7a:7a:8c:b6:4d:3e:fc:7f:d9:f9:
         74:13:3d:54:6e:c1:93:2e:07:61:21:e0:e3:56:bf:06:39:b9:
         f9:77:83:71:41:d2:cb:42:1f:f7:e3:37:f9:5b:ad:9e:94:35:
         f6:cb:b5:67:66:5b:78:d2:55:83:1d:93:a9:a3:45:33:8e:d8:
         d5:b5:e1:57:e0:05:ac:40:71:f8:d9:6d:10:8c:0b:53:d3:63:
         e0:73:39:b6:f9:ea:73:1d:ad:f2:f8:7e:76:d0:08:b3:ef:83:
         e6:20:ec:81:ca:85:c4:87:fa:6b:cd:4f:0a:0a:13:a0:83:88:
         7f:d8:30:ae:b2:11:93:91:7a:6b:5f:93:d8:e6:c8:f5:8a:c3:
         9c:7c:98:73:3d:07:93:20:9f:70:5f:0a:4c:23:85:f9:d6:83:
         15:bb:b3:46:b3:5b:48:05:0b:8e:6b:3b:78:7f:01:92:7a:a9:
         f6:23:12:7d:30:0a:e8:76:9a:7d:65:e5:6f:87:df:7e:5a:88:
         5e:a7:be:89:b1:ae:14:66:a6:90:38:74:c6:88:94:57:a4:04:
         d7:af:f3:ad:11:15:e6:0d:44:8a:cf:08:29:55:84:ab:66:ad:
         c9:d7:5b:a1:9d:29:64:f1:c7:48:76:68:3b:f9:76:ac:fe:a3:
         6b:89:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:19:53 2026 by rpki-client