Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/SV3SBKRsektaHGE74MLsF9aVI0w.roa
File:                     SV3SBKRsektaHGE74MLsF9aVI0w.roa (raw, json)
Hash identifier:          OyaTUluQ/JaZqvgxCod16g9G52W5BrpN9ODqpPZoW+4=
Subject key identifier:   49:5D:D2:04:A4:6C:7A:4B:5A:1C:61:3B:E0:C2:EC:17:D6:95:23:4C
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       94
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/SV3SBKRsektaHGE74MLsF9aVI0w.roa
Signing time:             Tue 31 Mar 2026 08:24:59 +0000
ROA not before:           Tue 31 Mar 2026 08:24:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9374
IP address blocks:        124.108.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Mar 31 08:24:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=495DD204A46C7A4B5A1C613BE0C2EC17D695234C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:21:62:e4:40:e6:17:49:2d:26:53:c8:05:c6:
                    60:fc:22:18:f8:19:07:b2:bc:7c:32:be:8a:ad:20:
                    1a:eb:7d:bf:f3:37:26:66:3e:5d:0e:ce:ec:7c:4f:
                    55:ba:25:c0:e6:d2:c5:4e:f6:ec:d8:87:e5:a4:36:
                    e4:41:f1:4f:4c:f7:9d:8a:6e:13:64:ee:13:e3:89:
                    59:4d:06:5d:72:31:0a:3f:9c:4a:ae:bb:3c:ee:04:
                    8f:b4:8d:fa:d5:80:7e:5e:84:af:47:d9:af:a7:58:
                    9b:bd:5a:59:28:fb:22:78:85:60:67:23:d3:0e:02:
                    d4:19:e0:74:31:db:17:7a:42:07:3e:0f:cf:3f:af:
                    e7:b8:cd:17:96:3c:93:62:53:6d:8a:81:81:cd:b4:
                    d2:0e:31:33:3e:bf:24:dc:78:0f:9c:fe:52:10:46:
                    61:87:1e:7b:9b:b5:44:43:3c:5c:67:05:b0:f4:37:
                    66:9c:36:a4:f9:f1:94:1f:ca:d7:7e:56:60:d9:57:
                    29:a7:35:30:39:85:a0:8b:5d:ec:c0:08:50:4d:79:
                    71:2e:0f:75:51:19:cc:d0:a9:25:ea:c4:dd:0d:e0:
                    15:c7:29:79:2a:04:96:38:ac:40:63:a5:20:94:fe:
                    46:60:06:83:df:90:8f:15:45:74:ea:3f:b9:1e:58:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5D:D2:04:A4:6C:7A:4B:5A:1C:61:3B:E0:C2:EC:17:D6:95:23:4C
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/SV3SBKRsektaHGE74MLsF9aVI0w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.108.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         47:6c:54:ab:ea:a1:9f:63:97:50:67:7a:37:0e:0f:84:1d:f4:
         b2:68:84:f7:b1:d0:e2:e0:8e:79:77:91:2c:50:ad:b3:e3:70:
         ea:73:1b:e6:c7:e1:f7:0c:f6:78:cb:16:d4:5e:c7:97:80:82:
         99:e2:33:44:fd:53:fa:0c:5c:93:c7:0f:e3:97:a7:48:b3:e3:
         e7:16:a5:18:02:25:53:e4:bd:e6:c1:06:bb:a4:58:47:60:02:
         29:08:b6:97:0e:e5:3d:5c:03:d7:1a:a2:88:8f:66:b4:65:11:
         84:3d:17:1f:df:fc:6e:74:b6:4e:18:62:91:28:7c:b0:b8:31:
         43:e1:dd:66:55:76:c1:47:d3:a5:55:7c:85:94:f8:c7:eb:40:
         a2:41:d7:fd:22:15:a4:dd:9d:20:52:00:d3:66:0e:49:4e:f0:
         16:d1:f0:bb:c6:e6:6a:73:84:87:00:4a:79:50:e1:25:89:3a:
         f3:37:76:1d:dd:2a:21:c0:1c:4b:46:84:42:fd:fa:b3:1b:dd:
         1a:24:6e:b1:ad:c2:8d:79:c1:22:b5:3a:d9:60:7c:fb:dd:ba:
         ed:c3:a7:4c:49:c2:da:9b:3a:d4:15:00:0f:f1:63:c4:74:38:
         39:7b:25:b8:c8:2a:7f:93:63:5e:e6:0d:44:07:c3:8a:28:1d:
         69:4f:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:40 2026 by rpki-client