Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/NnHS3l0VVBU-K9C2b2lU3LavB-M.roa
File:                     NnHS3l0VVBU-K9C2b2lU3LavB-M.roa (raw, json)
Hash identifier:          lVRjnTo8XupXYJEVcWbVU8H8GA8U90yCSACpPu+53Q0=
Subject key identifier:   36:71:D2:DE:5D:15:54:15:3E:2B:D0:B6:6F:69:54:DC:B6:AF:07:E3
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       92
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/NnHS3l0VVBU-K9C2b2lU3LavB-M.roa
Signing time:             Tue 31 Mar 2026 07:47:23 +0000
ROA not before:           Tue 31 Mar 2026 07:47:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10019
IP address blocks:        61.122.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar 31 07:47:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3671D2DE5D1554153E2BD0B66F6954DCB6AF07E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:ef:67:08:b5:31:b0:5a:11:6a:a9:24:e7:
                    f2:e1:8e:39:81:09:5d:cf:c8:56:de:d1:df:b1:37:
                    36:5a:e0:07:dc:88:53:e2:e3:41:75:b7:38:bc:24:
                    96:4a:38:09:28:05:6e:c4:32:7a:18:68:37:75:fc:
                    e6:03:95:f3:c3:de:3c:e0:b0:6f:24:eb:a9:6d:88:
                    e2:77:4e:f2:ab:1e:11:00:b1:58:eb:62:a4:b9:62:
                    92:9f:ad:e0:50:0f:b7:1d:c8:f0:9b:96:29:38:d9:
                    ae:a6:84:43:25:32:78:c2:18:e0:a5:64:21:35:2e:
                    00:d4:32:85:12:a6:68:d2:72:a3:af:a3:eb:4d:8d:
                    70:b7:e6:d9:0d:7a:c6:b2:b6:70:53:7d:aa:a0:86:
                    d4:89:66:cf:3a:01:27:9b:98:9e:aa:b3:4d:ae:96:
                    8a:bc:a4:aa:21:c9:0b:b4:1d:14:e4:d9:d4:d2:55:
                    df:d0:16:c8:c0:aa:a5:be:b9:db:20:14:36:f2:87:
                    e6:40:4d:93:c4:4c:4a:d7:2e:61:28:e7:c6:6c:32:
                    63:4c:42:82:11:c4:56:52:54:ed:4a:15:31:95:23:
                    e7:f1:2e:9f:6b:c6:86:25:b7:78:fd:49:47:16:e5:
                    64:f8:03:8e:b3:7a:c7:5b:7c:a5:3c:ef:98:2b:a3:
                    cc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:71:D2:DE:5D:15:54:15:3E:2B:D0:B6:6F:69:54:DC:B6:AF:07:E3
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/NnHS3l0VVBU-K9C2b2lU3LavB-M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.122.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:45:c8:e2:00:7b:3c:66:ea:3b:38:56:1e:db:be:2c:a1:
         c4:b9:61:69:6e:6a:63:29:13:ad:54:02:5a:70:9b:65:08:c3:
         73:f1:36:2f:3a:f0:21:a2:d7:71:fc:28:9b:ac:c2:c0:e3:5a:
         06:ea:ed:2a:45:7a:4f:92:22:bc:32:2c:12:37:0e:f8:fe:c9:
         81:3f:73:a5:ab:71:28:73:29:30:a0:5d:33:a1:b4:e6:25:a9:
         82:44:35:8d:a6:84:06:9b:f6:88:b8:9a:5d:af:f2:19:fb:2e:
         0a:f1:f7:82:5d:28:dd:7b:59:61:67:ad:b3:55:be:5e:52:d0:
         c3:17:d7:9f:71:1c:7a:d8:3b:3e:c7:5b:fd:6d:ad:7b:ce:05:
         37:17:69:7c:08:86:72:a2:e8:bd:d8:61:7c:00:21:6b:29:67:
         05:0b:43:e2:36:9a:6e:42:08:f9:ba:ac:6f:2b:97:e4:47:20:
         e2:42:ef:a5:0c:bc:99:52:d3:b3:8f:4f:c0:cf:c4:59:2c:6d:
         65:b5:da:a8:41:9e:72:9e:9a:e4:8f:13:14:a0:d2:ad:72:8a:
         ce:9c:a5:97:f9:92:e0:d0:bf:1a:d2:73:65:5d:01:bc:f7:3a:
         c8:6f:53:3e:4c:d1:99:ea:bb:a3:7c:8a:e4:f5:1d:12:86:e9:
         62:1c:63:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:36 2026 by rpki-client