Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/568/wTdc-fWgs3IweBf94dGKPDF3jd0.roa
File:                     wTdc-fWgs3IweBf94dGKPDF3jd0.roa (raw, json)
Hash identifier:          CJd0LjoMSoBAJg5KuBQEQksRwf2WIbz4jLOCUI3wxD4=
Subject key identifier:   C1:37:5C:F9:F5:A0:B3:72:30:78:17:FD:E1:D1:8A:3C:31:77:8D:DD
Certificate issuer:       /CN=E125B43A75AE313269A60638E66317970B50B5D3
Certificate serial:       25
Authority key identifier: E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/wTdc-fWgs3IweBf94dGKPDF3jd0.roa
Signing time:             Tue 31 Mar 2026 08:41:20 +0000
ROA not before:           Tue 31 Mar 2026 08:41:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59093
IP address blocks:        133.247.104.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E125B43A75AE313269A60638E66317970B50B5D3
        Validity
            Not Before: Mar 31 08:41:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C1375CF9F5A0B372307817FDE1D18A3C31778DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:eb:21:ce:74:0c:5e:41:da:79:ad:84:e2:
                    83:2e:8a:9e:00:52:7e:63:7c:e4:a0:ec:cc:27:f5:
                    59:cc:b7:03:89:08:17:c1:93:49:a4:57:a2:2b:0f:
                    0f:71:4d:36:81:c4:0b:87:a7:50:d4:a4:4d:66:c4:
                    21:8d:6a:5c:30:07:01:53:34:c5:1b:cf:db:10:05:
                    49:fa:b5:a7:40:ae:14:88:ce:07:31:c8:e5:1e:7b:
                    c9:2b:5f:69:cf:e7:67:d1:d0:72:ad:6f:5a:a3:7f:
                    09:94:75:ad:33:a0:cc:7e:c6:f8:77:47:9d:12:50:
                    54:96:44:da:4a:50:81:a2:2e:d2:79:a5:e2:c1:7c:
                    5c:c9:46:c8:4d:fd:75:d6:30:2c:c4:2e:0a:93:b5:
                    3d:77:9b:f4:70:ec:0e:dd:aa:ff:c2:3d:2c:a6:1e:
                    45:c7:0f:0c:b8:e2:93:eb:09:88:a9:af:f7:4e:e4:
                    1a:9a:27:eb:63:cb:9d:54:00:fb:35:a7:fa:91:e7:
                    82:e6:f7:88:a9:54:eb:e8:db:90:76:11:60:a4:ce:
                    7c:43:0f:6c:9a:ab:e7:92:21:19:39:0e:d0:d6:1d:
                    30:3a:a1:44:02:95:cc:a7:0b:aa:dc:f6:e1:87:31:
                    53:c6:22:18:9a:e5:e9:03:10:4d:60:40:30:be:f8:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:37:5C:F9:F5:A0:B3:72:30:78:17:FD:E1:D1:8A:3C:31:77:8D:DD
            X509v3 Authority Key Identifier:
                keyid:E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/wTdc-fWgs3IweBf94dGKPDF3jd0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:f1:1e:eb:37:27:4d:33:15:5e:8b:27:c8:d2:2f:e5:83:62:
         b5:22:30:7c:c7:c0:1b:53:3e:e5:2f:50:77:25:0a:0d:76:92:
         1d:79:ac:33:7d:fb:7e:5a:5a:26:6b:5c:ef:93:ea:e5:91:1d:
         82:25:b1:9f:28:2f:57:e3:ae:29:7f:c3:99:9c:73:8c:6e:5e:
         eb:0d:17:0f:c4:53:c2:69:f8:3e:a0:a2:af:61:a3:c4:27:7c:
         27:42:d5:01:3c:7a:67:d8:c9:d5:c2:c4:2c:48:86:d9:8f:00:
         b0:a7:4f:1d:82:a4:f4:42:0b:6b:a2:80:83:81:e3:ea:22:f3:
         54:18:25:42:14:e8:3b:76:28:7f:e5:e1:4d:63:00:45:c7:4a:
         41:5d:4a:12:7e:23:ba:d2:18:ce:10:e9:4a:24:f2:2e:b4:81:
         5b:f8:bf:45:c3:76:ba:51:25:92:89:6a:ce:fe:93:b7:5b:12:
         99:52:4c:e0:ac:5d:30:a7:bb:dc:4b:3a:8f:dd:2d:73:1e:1a:
         0d:2a:36:65:5a:cb:94:7a:3a:4b:68:77:8d:3c:f2:79:43:d0:
         e4:2a:b2:ac:cd:77:5a:08:2d:56:5a:1b:b2:ca:6f:7f:85:b4:
         a4:48:ce:c8:03:1b:af:07:96:a1:dd:ad:51:8a:11:7b:df:33:
         fd:3b:a8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:49 2026 by rpki-client