Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/ltP_9vvBp0qxsmMdM_v1sFQISKU.roa
File:                     ltP_9vvBp0qxsmMdM_v1sFQISKU.roa (raw, json)
Hash identifier:          hsmqadfMbTA3pUTCuq77/zXl7lyjB/ol9y3GAHGGzkk=
Subject key identifier:   96:D3:FF:F6:FB:C1:A7:4A:B1:B2:63:1D:33:FB:F5:B0:54:08:48:A5
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       58
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/ltP_9vvBp0qxsmMdM_v1sFQISKU.roa
Signing time:             Tue 31 Mar 2026 08:16:00 +0000
ROA not before:           Tue 31 Mar 2026 08:16:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18094
IP address blocks:        175.111.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Mar 31 08:16:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=96D3FFF6FBC1A74AB1B2631D33FBF5B0540848A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:ba:0d:65:4e:69:f1:99:d0:da:e4:a4:42:
                    a0:98:af:5e:2e:18:89:25:2d:e3:76:23:96:9c:22:
                    91:fe:83:14:e8:fc:fd:b2:bf:af:46:d9:45:7e:36:
                    fe:da:74:d9:71:5d:64:82:2f:5b:98:d9:76:1e:ef:
                    cc:ef:57:b7:73:6d:e5:fa:d5:80:f8:13:e4:b1:26:
                    ea:03:7c:96:aa:cd:dd:91:fa:d8:3c:99:fc:25:ec:
                    e5:fc:56:ec:cc:98:61:e9:09:4f:38:0f:0b:d9:ab:
                    81:f6:56:50:5a:a1:ad:bf:8b:22:29:bb:e2:0c:3d:
                    6f:54:39:c5:ab:3f:6f:28:55:45:e7:d2:9a:10:5e:
                    9f:7f:4c:09:72:b6:1e:8d:6f:52:5d:df:97:5f:b3:
                    04:ec:8e:5f:84:3b:9b:09:d7:b3:c1:fd:a7:fe:e5:
                    51:de:ab:e4:c4:a1:78:86:f1:9b:97:54:55:c4:3e:
                    36:a3:c5:e9:29:a2:b0:65:eb:5f:7a:3b:1f:f4:ef:
                    49:21:28:8f:b5:b4:ce:10:6a:cc:6e:a0:7e:7d:4b:
                    5c:b9:24:44:ef:07:4c:45:18:30:e1:12:02:7f:c4:
                    77:9f:59:20:c7:b3:2c:d6:ea:01:ca:17:58:40:73:
                    e8:56:97:b2:96:28:6f:02:e1:0c:41:4a:6e:e2:3b:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D3:FF:F6:FB:C1:A7:4A:B1:B2:63:1D:33:FB:F5:B0:54:08:48:A5
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/ltP_9vvBp0qxsmMdM_v1sFQISKU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:f9:9c:f8:fe:c3:a0:c1:16:81:14:d2:a9:92:bb:7d:e1:cf:
         32:d5:e7:fa:8b:cd:58:ee:4f:c6:43:a1:76:3c:9c:d5:27:5b:
         9d:67:fe:d0:0a:46:af:ba:b6:13:1a:f1:0b:5c:f1:2b:de:17:
         63:48:5f:6d:87:12:26:88:d8:7b:9b:29:0a:77:6c:45:21:14:
         e2:f7:5d:3d:6e:9a:05:12:65:12:5d:54:06:bb:78:16:07:46:
         b0:a3:2c:5f:4e:b0:ea:84:c6:0b:67:46:7a:a8:a5:d4:cb:ce:
         f0:4f:bc:40:a4:2e:6a:eb:d2:f3:9c:c2:13:0f:e8:4b:82:d3:
         a8:ee:08:c1:d7:79:da:f3:88:2d:5c:96:46:5f:7b:66:35:a2:
         52:a7:ca:e1:ee:00:93:42:fd:dd:4f:ac:26:ef:11:89:40:57:
         1f:76:57:11:43:7f:23:08:0c:c9:9d:ec:06:11:b9:40:0e:26:
         e3:d6:c4:b6:8f:86:63:0d:ad:31:c1:b8:ff:fe:df:e4:fb:8f:
         19:97:d3:4a:9e:dc:6d:39:be:fa:de:a6:86:82:d8:29:cf:51:
         41:59:c9:1e:92:90:fb:55:19:b7:bd:38:74:9c:7a:b5:e9:60:
         08:74:00:b7:43:63:15:78:73:9f:8f:c3:b1:db:a9:57:8c:4c:
         86:b2:e5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:03 2026 by rpki-client