Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/0XTA6CiAMmA_rHQhobH1C8bCRaI.roa
File:                     0XTA6CiAMmA_rHQhobH1C8bCRaI.roa (raw, json)
Hash identifier:          7L+tH303wAjeZ1LJkCQZQBOR+WMFfHxTHqz1Gs0Bf9w=
Subject key identifier:   D1:74:C0:E8:28:80:32:60:3F:AC:74:21:A1:B1:F5:0B:C6:C2:45:A2
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       98
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/0XTA6CiAMmA_rHQhobH1C8bCRaI.roa
Signing time:             Tue 31 Mar 2026 07:47:27 +0000
ROA not before:           Tue 31 Mar 2026 07:47:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10019
IP address blocks:        218.45.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar 31 07:47:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D174C0E8288032603FAC7421A1B1F50BC6C245A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:04:70:93:f1:e1:3e:09:55:cf:88:d2:94:
                    cd:ce:2b:2f:28:80:fc:04:15:10:54:e0:22:4e:01:
                    2c:a8:60:42:18:85:b7:6c:26:dd:60:4a:a2:be:8c:
                    b2:bc:ad:a5:a2:9b:8b:c3:b9:71:e9:92:d3:81:0b:
                    ec:83:f8:76:fd:4c:5a:4b:8d:9c:99:bd:4d:71:75:
                    9f:31:cb:9b:51:35:c3:79:c8:b6:d1:23:fe:bc:ae:
                    f4:99:bc:d6:63:da:39:28:a2:a9:d2:eb:53:3e:a5:
                    81:06:46:3a:f2:3d:f0:fb:5b:83:bb:ef:b9:b6:69:
                    b4:95:b1:49:93:cc:0f:40:91:2b:7d:d1:04:fb:ce:
                    5c:dc:38:d8:ed:3f:0a:dc:08:46:9e:72:18:04:68:
                    51:d1:f1:22:26:af:89:e8:67:70:3e:c8:fb:aa:8b:
                    61:71:71:ff:1f:97:24:17:19:57:f2:72:4c:03:7d:
                    00:c6:12:f0:58:ba:05:49:71:a6:d1:0b:a9:20:37:
                    23:af:45:e2:24:2a:d0:bb:27:6d:a9:a4:a2:9a:46:
                    9c:dc:73:10:b0:b8:1c:8e:13:1e:fc:85:d6:78:4b:
                    30:03:1e:4a:0f:da:ce:09:af:78:e3:43:a7:44:34:
                    c1:13:79:fc:cd:5d:20:74:f3:d3:4c:f0:8e:73:75:
                    2d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:74:C0:E8:28:80:32:60:3F:AC:74:21:A1:B1:F5:0B:C6:C2:45:A2
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/0XTA6CiAMmA_rHQhobH1C8bCRaI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:bc:65:33:3c:75:43:2e:83:51:c5:56:5c:dc:3f:38:59:61:
         73:c8:b3:c0:2a:8c:9a:c3:e2:11:2e:2b:4c:d8:43:c5:21:11:
         ef:d2:49:89:5c:f4:f3:eb:0c:d7:1e:e4:e4:06:70:0c:24:86:
         1e:96:81:94:f5:c2:a4:96:91:8c:7f:bc:34:d6:6f:1b:4d:91:
         f9:b7:17:5e:14:34:8b:68:97:0d:7a:8f:36:f0:5c:c0:6d:f1:
         49:2f:dc:da:a6:e8:2b:2c:15:d1:65:34:97:17:78:d3:34:17:
         bb:f8:f0:c9:fe:2f:14:1c:74:e1:0a:5f:05:b1:93:a7:a7:a0:
         2d:d8:04:00:60:e3:93:0d:fc:63:f4:26:59:d4:76:0d:46:41:
         60:13:3d:23:65:4d:a9:bf:66:32:8e:23:d1:a2:04:14:70:ba:
         48:8e:a8:3d:0b:00:dd:ae:02:74:d1:e4:6e:0d:04:bc:a9:7f:
         eb:08:22:d0:b6:75:4c:87:fe:9b:22:33:23:54:80:98:7c:34:
         2b:5a:25:e3:a5:db:e5:b4:ae:11:99:4d:72:46:90:6e:28:79:
         db:b8:d2:7f:a1:56:74:8c:f9:75:cf:d5:d7:a1:79:8f:39:7a:
         9d:fb:49:e5:35:3c:2d:e1:50:8a:08:55:cf:b6:70:e2:a7:bd:
         e7:fd:a8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:47 2026 by rpki-client