Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/l4ws_jML83SFRuW8y6gGovM-h4c.roa
File:                     l4ws_jML83SFRuW8y6gGovM-h4c.roa (raw, json)
Hash identifier:          Bx0fn9Jdg/Fls0mXjZlL+fJ5B5/4DHQW+FV8dETry0Q=
Subject key identifier:   97:8C:2C:FE:33:0B:F3:74:85:46:E5:BC:CB:A8:06:A2:F3:3E:87:87
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       98
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/l4ws_jML83SFRuW8y6gGovM-h4c.roa
Signing time:             Tue 31 Mar 2026 08:25:01 +0000
ROA not before:           Tue 31 Mar 2026 08:25:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9374
IP address blocks:        202.165.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Mar 31 08:25:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=978C2CFE330BF3748546E5BCCBA806A2F33E8787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:52:88:1b:9a:f7:08:97:13:2f:cd:2f:f6:
                    65:d5:5a:d9:37:3d:b0:53:2c:df:cc:4d:7d:5b:bc:
                    f9:4e:02:19:d2:d8:1f:2e:13:2e:93:9c:f5:94:f8:
                    c4:70:aa:b6:0a:d0:58:e9:db:2a:73:38:60:9c:b1:
                    f0:94:b4:28:07:b9:63:f9:0b:78:c2:73:9d:19:b9:
                    39:7e:98:39:70:35:2e:cc:2a:21:bb:0a:07:5c:01:
                    b2:1a:2d:ad:6d:d0:15:2a:80:b2:19:eb:b3:04:9e:
                    fc:17:db:05:d5:c9:b1:2c:f1:0e:2a:9f:40:02:a6:
                    da:92:9a:ce:a2:29:3d:73:4d:c6:38:ad:c2:d4:7b:
                    03:e1:4e:02:a5:2b:82:d7:03:38:d7:d7:56:cf:91:
                    f0:e9:c6:9a:32:46:f2:7f:18:6d:29:88:73:6b:4a:
                    e6:ff:dd:02:88:6a:67:1e:d9:5d:f2:88:25:ce:ef:
                    b4:90:06:d0:84:21:fd:ac:45:e1:96:14:59:06:5a:
                    8f:62:f9:aa:a7:84:92:37:11:31:71:ee:c9:5b:fa:
                    73:9c:56:9b:c0:5a:99:b9:70:ec:81:82:38:c4:08:
                    24:d0:82:60:45:e4:e1:19:85:50:7c:e9:3b:55:fc:
                    0b:7d:3a:5e:c0:19:28:63:a3:9c:bb:45:44:c0:d6:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8C:2C:FE:33:0B:F3:74:85:46:E5:BC:CB:A8:06:A2:F3:3E:87:87
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/l4ws_jML83SFRuW8y6gGovM-h4c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:90:d1:ca:ce:62:35:dc:a5:57:fc:81:d0:f9:9d:da:74:8a:
         84:3c:39:07:93:ab:41:46:b6:4a:aa:06:1c:68:86:d0:11:68:
         0c:5e:c6:5a:fc:a6:33:43:31:29:70:2d:e8:f1:50:51:8c:13:
         c8:11:18:12:9b:b5:80:70:83:20:63:64:f7:6b:13:70:28:e1:
         29:49:7b:dc:7f:34:62:0b:6f:95:10:e8:cd:37:ff:e6:8b:cf:
         71:11:ba:fe:c3:30:ad:9c:28:f2:01:ac:dc:ae:88:4c:2e:cd:
         e8:dc:17:f4:ad:da:6f:0e:df:2a:91:f3:77:e2:69:62:79:3e:
         e8:41:92:93:69:bc:1f:da:28:9f:9f:74:d0:ed:7d:df:31:60:
         50:c2:78:64:93:8a:21:6f:16:c6:79:33:7c:c6:15:6c:9e:d9:
         70:aa:93:fd:74:f2:2e:80:ea:e4:c8:da:cb:15:24:d4:99:c0:
         57:8a:fb:c9:bf:c6:fe:41:83:ae:5b:fa:d0:38:6e:08:be:38:
         81:ff:6f:b2:82:c5:a3:f2:22:46:bf:92:e3:c7:f8:e1:ba:07:
         fe:4d:2e:3e:60:d9:93:ce:9c:36:63:4b:1d:26:83:d8:4a:26:
         b3:cc:f1:8c:da:26:e4:3e:8c:7e:af:60:2c:79:7c:d0:af:b9:
         16:5c:59:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:59 2026 by rpki-client