Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4098/DJU4rxHwIslJdH3FrryKsengje0.roa
File:                     DJU4rxHwIslJdH3FrryKsengje0.roa (raw, json)
Hash identifier:          +TQpq+giN2fevJtflHKpp+o+GP+GRiQ8iuSmcT8X7Hg=
Subject key identifier:   0C:95:38:AF:11:F0:22:C9:49:74:7D:C5:AE:BC:8A:B1:E9:E0:8D:ED
Certificate issuer:       /CN=4867E40A23D097EA0025F6DDEB062F7B53D51B27
Certificate serial:       0F
Authority key identifier: 48:67:E4:0A:23:D0:97:EA:00:25:F6:DD:EB:06:2F:7B:53:D5:1B:27
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SGfkCiPQl-oAJfbd6wYve1PVGyc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/DJU4rxHwIslJdH3FrryKsengje0.roa
Signing time:             Tue 31 Mar 2026 08:46:49 +0000
ROA not before:           Tue 31 Mar 2026 08:46:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     14618
IP address blocks:        202.244.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/SGfkCiPQl-oAJfbd6wYve1PVGyc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/SGfkCiPQl-oAJfbd6wYve1PVGyc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SGfkCiPQl-oAJfbd6wYve1PVGyc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4867E40A23D097EA0025F6DDEB062F7B53D51B27
        Validity
            Not Before: Mar 31 08:46:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0C9538AF11F022C949747DC5AEBC8AB1E9E08DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:ec:f3:2b:6b:0b:af:ea:36:ec:09:ef:86:
                    de:db:76:e7:43:90:7a:b8:18:86:53:85:fa:83:5d:
                    20:de:15:87:f0:b2:c0:ef:39:ac:3b:04:41:06:ce:
                    fb:2d:e9:ea:0c:87:15:a1:c1:19:ba:41:fb:18:ae:
                    3a:56:75:9a:4c:bc:a7:e8:81:50:4f:7d:ad:5e:27:
                    74:d5:a4:18:1b:47:4d:c8:2f:20:83:99:73:2c:c8:
                    b2:a3:80:f8:b1:a0:96:d1:e6:1a:b8:f2:41:63:a6:
                    7e:5c:4a:bf:3c:de:c2:e9:46:e9:69:8f:aa:a8:4e:
                    c0:e5:07:88:af:7e:07:53:57:e4:b5:1a:61:bf:51:
                    6c:cf:11:40:d0:2b:7a:f7:b8:79:f9:c7:06:e4:4c:
                    4d:a9:24:93:20:fa:79:33:87:5c:6d:2e:ea:29:ce:
                    9f:4c:b3:84:25:bb:f6:23:16:67:23:4f:a7:a6:8f:
                    2a:22:24:d0:85:2e:b9:60:0d:30:d0:f0:00:f7:1d:
                    3f:91:3d:d1:f5:92:5d:0b:31:a7:b1:6a:62:00:7b:
                    04:07:7e:69:84:58:be:44:f0:42:3f:4c:b8:29:3e:
                    88:d3:b0:ae:93:b3:47:3c:fc:38:84:37:ee:0a:ea:
                    a1:43:4d:fb:76:78:ba:c4:66:a3:24:22:70:46:d0:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:95:38:AF:11:F0:22:C9:49:74:7D:C5:AE:BC:8A:B1:E9:E0:8D:ED
            X509v3 Authority Key Identifier:
                keyid:48:67:E4:0A:23:D0:97:EA:00:25:F6:DD:EB:06:2F:7B:53:D5:1B:27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/SGfkCiPQl-oAJfbd6wYve1PVGyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SGfkCiPQl-oAJfbd6wYve1PVGyc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/DJU4rxHwIslJdH3FrryKsengje0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.244.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:e9:76:2d:28:2c:87:3a:df:c3:c4:ed:72:ef:e3:8e:82:99:
         e1:39:30:2c:5c:00:a1:3b:68:7b:0a:cc:75:1c:ee:05:dd:af:
         24:3c:e8:f7:46:c2:46:3c:33:3c:d9:47:3d:28:65:4c:9c:ca:
         69:62:38:25:0f:2e:27:64:1a:26:05:f8:98:e6:a3:04:9c:0a:
         b3:52:d7:a7:1f:3e:18:d7:5f:36:0a:1c:9d:fe:5a:13:b7:83:
         74:f7:56:cb:84:c9:f4:9d:a9:9d:7d:ef:34:05:f7:6e:85:ef:
         e1:3c:8d:b3:3f:dc:98:a7:50:b4:20:9f:95:03:94:b5:87:b1:
         55:c9:ef:7c:87:68:3b:7b:86:6b:73:f2:44:bd:c5:06:c3:f4:
         b1:01:e8:e6:d8:35:12:e0:ef:3a:75:31:d8:89:36:09:68:a3:
         74:64:20:45:1b:5a:68:6a:f1:0c:87:18:1d:01:25:4d:7e:39:
         f2:c0:4c:37:38:2f:60:a1:f4:0f:e7:5d:eb:9e:30:57:b8:e5:
         cb:14:eb:3d:e4:b8:f2:05:b4:23:ec:1f:d0:62:33:15:e2:33:
         67:f8:9b:ba:d9:28:80:b8:15:31:d7:eb:17:50:b6:6a:f7:21:
         f9:3b:9f:af:7f:2b:10:e0:6e:2c:72:dd:5a:fb:9d:c0:89:0e:
         ac:14:41:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:09 2026 by rpki-client