Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/ToqdcqBv9tPbzQm8uGl7eD-mtlU.roa
File:                     ToqdcqBv9tPbzQm8uGl7eD-mtlU.roa (raw, json)
Hash identifier:          2TlwIbbRNDSrJnMcrm9jxQKD+T26oSK8JAd473n++9A=
Subject key identifier:   4E:8A:9D:72:A0:6F:F6:D3:DB:CD:09:BC:B8:69:7B:78:3F:A6:B6:55
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       4C
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/ToqdcqBv9tPbzQm8uGl7eD-mtlU.roa
Signing time:             Tue 31 Mar 2026 08:32:56 +0000
ROA not before:           Tue 31 Mar 2026 08:32:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9997
IP address blocks:        133.226.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Mar 31 08:32:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4E8A9D72A06FF6D3DBCD09BCB8697B783FA6B655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:c2:44:16:c3:95:ac:0c:95:5d:2d:20:fd:
                    3e:4e:aa:7a:f6:13:f8:03:23:6c:44:d8:e1:e9:2b:
                    2d:86:97:7e:54:07:98:93:65:5f:78:ae:a4:69:a3:
                    3c:16:74:b4:5d:5c:e0:5e:1f:f3:62:b6:32:7e:93:
                    b1:22:9c:83:d9:e7:f3:18:51:57:fb:ef:f9:45:0a:
                    6d:51:73:03:cb:5d:e0:1b:bf:a1:59:13:2b:2f:bc:
                    a2:ea:a1:1a:51:ba:a1:d8:bc:8b:cc:c1:58:89:ab:
                    5d:cd:11:ee:20:72:81:42:bf:eb:af:9c:ee:50:25:
                    b8:59:8c:db:0d:f6:ae:ed:6c:fe:c5:8e:da:58:7f:
                    09:c0:83:66:da:97:ee:46:fc:87:de:13:6e:0a:e4:
                    a4:6a:a4:e6:7a:11:9d:81:be:ff:0a:c0:fd:ca:17:
                    5e:81:df:b3:6a:f8:02:51:be:90:3f:37:49:0a:d0:
                    c1:76:c5:34:23:5b:13:c7:f9:f0:bf:57:7c:99:10:
                    a1:5a:f2:b3:fb:30:97:2d:08:83:a4:e5:2a:8f:74:
                    b2:aa:de:51:88:9e:d9:db:96:15:e7:3c:b9:3d:af:
                    da:71:85:0e:75:48:23:98:c1:95:1b:b2:c6:09:7b:
                    49:c6:f8:b4:2b:d6:b0:68:14:1e:a1:d9:0e:d1:08:
                    aa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8A:9D:72:A0:6F:F6:D3:DB:CD:09:BC:B8:69:7B:78:3F:A6:B6:55
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/ToqdcqBv9tPbzQm8uGl7eD-mtlU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.226.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:4c:8d:9e:7c:e8:c7:4a:58:05:c0:34:ea:c5:8d:81:ee:66:
         03:d7:b2:58:6b:7f:94:ae:b0:2c:e1:6b:61:f0:41:79:ef:ee:
         e4:9f:b2:65:b8:15:f9:5e:28:5f:17:1f:35:f9:ac:8a:ae:9e:
         53:ea:c7:5c:2d:34:01:bf:4d:41:cb:e0:02:e1:cd:89:1a:cd:
         a8:7e:94:d4:bc:c4:27:d1:f0:d1:8f:68:20:5b:c6:a3:aa:fb:
         36:22:aa:f8:4f:a2:5a:53:8f:57:14:a9:57:34:ba:8d:d6:89:
         7d:eb:6c:c3:86:88:95:87:b9:3d:f9:60:74:72:96:08:f9:2d:
         7f:7a:20:ce:7b:73:59:7b:a1:a4:8f:98:ff:b4:70:29:2e:99:
         13:b8:ee:73:09:01:3e:e9:0a:9f:21:5b:be:4a:cb:40:8e:bd:
         a8:a7:01:20:ca:a6:a9:98:65:7e:50:bc:a4:29:eb:b6:8a:70:
         13:83:d6:3c:51:c0:d5:71:f4:3b:de:8c:68:f7:94:8b:67:db:
         26:8d:fa:1f:37:22:6d:b2:c3:30:16:c5:70:00:37:4f:d0:8a:
         ab:6e:3b:22:b2:89:df:59:68:2d:de:6b:78:a0:4a:8c:8a:5d:
         f4:a1:3a:73:62:f1:c8:df:ef:e6:63:a5:78:12:65:d1:7e:53:
         e8:b7:e0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:08 2026 by rpki-client