Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/-Dlzmj3-ETleVkEQ_3rCp0d-iUY.roa
File:                     -Dlzmj3-ETleVkEQ_3rCp0d-iUY.roa (raw, json)
Hash identifier:          MJyumGNDURhXgZ+EjiTBgupReW1x6jmDNmHoeeSH8so=
Subject key identifier:   F8:39:73:9A:3D:FE:11:39:5E:56:41:10:FF:7A:C2:A7:47:7E:89:46
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       30
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/-Dlzmj3-ETleVkEQ_3rCp0d-iUY.roa
Signing time:             Tue 31 Mar 2026 08:49:19 +0000
ROA not before:           Tue 31 Mar 2026 08:49:19 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        61.195.96.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 31 08:49:19 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=F839739A3DFE11395E564110FF7AC2A7477E8946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:d6:41:6b:38:19:44:cc:82:98:0b:30:d8:
                    1c:bd:87:96:ab:ec:5d:18:a7:59:b5:6c:8d:89:66:
                    cb:2b:73:f4:7f:53:08:92:f4:21:0b:09:c7:ec:fe:
                    4b:c6:9e:14:25:d1:b2:30:ed:69:d8:e0:e7:b3:92:
                    2f:44:b3:f3:4d:68:f4:c9:58:7b:37:87:65:42:53:
                    03:b6:37:83:d1:5c:0f:fe:8d:43:18:69:99:8f:94:
                    f5:bf:35:8c:73:77:74:13:84:33:51:b1:21:df:69:
                    98:f6:d0:b7:9b:c4:80:f0:75:28:4b:50:4c:8d:61:
                    05:61:3e:57:12:ef:27:22:ce:61:3b:64:da:54:d6:
                    42:e0:be:82:28:9b:80:0f:26:fc:8c:3d:80:7e:6c:
                    26:53:40:e7:23:c3:b7:03:6f:f1:bb:44:a5:b3:4f:
                    09:05:41:00:0b:b4:17:a6:ee:2f:e1:2a:a8:10:23:
                    b8:b8:27:15:02:57:6c:5c:0e:21:26:86:6c:c2:34:
                    8e:b6:cf:70:63:94:f6:ad:b5:64:55:ac:e5:cd:50:
                    9b:56:9b:09:32:b9:30:4c:79:84:a2:9b:be:4c:a6:
                    5d:4a:6e:32:42:37:58:e0:37:4d:38:a1:8d:04:21:
                    8e:d2:1c:02:22:08:d9:2e:ee:6a:db:cd:d2:42:45:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:73:9A:3D:FE:11:39:5E:56:41:10:FF:7A:C2:A7:47:7E:89:46
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/-Dlzmj3-ETleVkEQ_3rCp0d-iUY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:8c:54:04:6a:ad:a4:00:7f:49:cb:a9:19:b0:a9:a3:36:
         fb:3d:24:10:57:d3:f6:49:45:3a:5c:c8:7d:cd:a5:82:0e:10:
         97:27:fb:48:76:6f:db:a0:39:c2:21:9e:b3:bd:fa:b6:1d:3d:
         fc:2b:90:1f:49:43:a3:17:f6:9d:d0:5f:9b:7b:c0:cf:dc:63:
         8b:e0:97:41:48:d5:79:37:7b:1b:dc:ff:33:f8:88:91:9c:a5:
         9d:81:d2:0b:b6:5e:2f:bd:d1:65:ef:a9:23:3f:f2:92:1f:2e:
         df:ac:4e:f9:4b:a1:d7:14:bc:c8:21:cb:42:4b:59:02:5a:57:
         0d:a4:58:b3:05:59:b1:f8:c5:fc:ff:b3:96:37:09:fc:06:95:
         e1:01:1c:95:a7:0b:de:eb:10:27:9d:0a:52:52:0e:ac:19:7c:
         4b:bb:a8:c6:d2:5a:21:76:41:6e:8e:b6:ca:d5:cc:87:63:df:
         a3:48:e7:e7:b1:49:19:ad:a5:48:3c:95:44:6c:eb:66:e7:3b:
         2f:cd:c4:22:dd:bf:f8:5d:ef:d4:16:dc:eb:a6:e3:c3:43:87:
         ca:9e:e2:19:c9:da:e9:18:9b:c3:2e:c9:55:8a:d4:42:54:1e:
         d5:d3:56:bb:a2:e6:f8:48:25:e5:50:92:34:67:d9:8a:d6:6e:
         82:4f:c2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:25 2026 by rpki-client