Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/_A3h97zYaOe9pacdPN1vJj_XR94.roa
File:                     _A3h97zYaOe9pacdPN1vJj_XR94.roa (raw, json)
Hash identifier:          WtrHRUqt3/AqiEXByz4DGWqUzv5euniwE+Cpf/E5opI=
Subject key identifier:   FC:0D:E1:F7:BC:D8:68:E7:BD:A5:A7:1D:3C:DD:6F:26:3F:D7:47:DE
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       91
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/_A3h97zYaOe9pacdPN1vJj_XR94.roa
Signing time:             Tue 31 Mar 2026 08:24:37 +0000
ROA not before:           Tue 31 Mar 2026 08:24:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10000
IP address blocks:        126.52.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 14:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Mar 31 08:24:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FC0DE1F7BCD868E7BDA5A71D3CDD6F263FD747DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:99:de:e3:ce:d9:1c:2f:20:da:83:6f:92:a1:
                    a1:f3:34:bb:ea:aa:30:ce:9d:a2:0d:7c:27:c9:08:
                    e1:12:38:ed:d3:68:69:9a:d8:60:86:33:62:16:dc:
                    da:3e:57:fa:1a:70:42:45:12:1d:b7:d9:50:27:fd:
                    97:e7:10:ff:b4:18:4e:4a:80:18:ba:1d:42:a4:8b:
                    78:62:8b:56:65:13:2d:32:5c:66:57:05:ed:3d:43:
                    b8:f1:90:1f:67:fc:a8:d4:f6:a6:67:75:bf:47:ea:
                    d7:8a:4c:fe:13:b6:cf:00:76:52:39:d3:b7:80:51:
                    ab:b7:c7:42:10:3a:84:64:d1:59:6a:2e:79:8f:13:
                    eb:32:9c:84:d0:d4:06:2e:ce:6e:3f:5f:27:4d:b6:
                    f1:64:0d:1f:c4:68:0c:5b:15:43:e1:3f:0f:3b:ae:
                    88:03:2f:fd:00:bc:70:6f:d5:c4:cf:16:e4:5c:d0:
                    ed:3c:2a:a4:68:55:78:84:6c:84:43:2e:58:47:ac:
                    61:27:b9:49:5c:ef:36:db:25:16:52:51:bd:ee:36:
                    1f:01:b6:b2:54:b2:4f:71:2e:4b:a7:2a:68:4d:95:
                    59:4b:cb:a6:ea:0f:24:4f:eb:93:2b:bb:2c:44:77:
                    12:dc:1f:9f:e2:c5:fd:d4:73:12:00:4a:ef:49:dc:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0D:E1:F7:BC:D8:68:E7:BD:A5:A7:1D:3C:DD:6F:26:3F:D7:47:DE
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/_A3h97zYaOe9pacdPN1vJj_XR94.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.52.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:c5:61:3c:40:e1:12:22:44:49:04:12:27:81:6b:19:cc:fc:
         98:1d:d5:ac:4a:3b:c9:1f:1e:fa:41:8c:cb:10:33:a0:ff:1c:
         34:da:a8:a4:1d:a2:82:fe:cb:2f:66:db:9e:4c:f1:9b:2e:ac:
         d7:80:6c:9c:3d:c7:46:39:c0:25:ac:2b:d6:dd:e3:db:83:3f:
         a7:a8:ea:f6:69:3f:8d:25:42:c3:0c:37:7f:fe:f6:f4:30:13:
         94:1d:ee:79:91:0b:fa:03:0c:43:ae:64:46:db:ae:b1:e5:c3:
         87:56:f5:67:12:ba:6a:2f:e2:d9:8a:d7:26:e0:23:7b:31:13:
         5e:0f:cb:ce:c5:04:34:e0:aa:76:62:90:34:05:99:f4:85:de:
         d2:e7:59:d2:6d:fb:83:80:0b:b4:c6:e8:64:d9:43:ef:a0:2d:
         3e:c3:40:79:56:49:4f:94:3f:87:1f:89:d3:1b:9e:5b:f8:c7:
         a8:01:cb:45:e1:54:bb:f2:a2:c6:9f:4b:e6:a9:aa:e0:15:10:
         20:67:36:88:85:1b:af:51:83:f1:27:3a:ba:01:24:4a:a1:e1:
         9d:ce:6d:34:99:05:97:78:7b:c0:6d:2f:e5:f1:a0:67:3c:c7:
         a6:e2:62:c3:51:e6:b4:a0:46:e8:27:ee:d8:18:1e:7e:1f:1f:
         32:7f:0e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:55 2026 by rpki-client