Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/v4s8n6DSVS_usBx9L3Sv6CAuvo0.roa
File:                     v4s8n6DSVS_usBx9L3Sv6CAuvo0.roa (raw, json)
Hash identifier:          YI2zKRMrDZqZLcw+z3iBBnRI3p1IPTBGAbxVJSMjQWM=
Subject key identifier:   BF:8B:3C:9F:A0:D2:55:2F:EE:B0:1C:7D:2F:74:AF:E8:20:2E:BE:8D
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       41
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/v4s8n6DSVS_usBx9L3Sv6CAuvo0.roa
Signing time:             Tue 31 Mar 2026 08:39:30 +0000
ROA not before:           Tue 31 Mar 2026 08:39:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18129
IP address blocks:        218.231.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Mar 31 08:39:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BF8B3C9FA0D2552FEEB01C7D2F74AFE8202EBE8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:43:a3:d9:ef:da:f2:e7:24:ae:f2:a7:87:c7:
                    0b:02:f2:80:fc:c2:60:56:1f:ba:ee:76:f4:78:fd:
                    ea:37:96:71:1a:c7:2f:b0:17:cb:0b:e9:a2:21:5c:
                    86:74:ac:7d:e3:46:0f:25:e4:7a:18:c4:49:ac:38:
                    44:22:96:e2:41:86:d7:62:1e:3f:15:9b:d7:06:ed:
                    62:74:7e:52:9e:ab:bd:c2:9d:f5:ee:30:6b:f2:0e:
                    09:95:17:f0:c6:50:30:a0:8a:ce:a5:e2:bd:70:15:
                    9e:2a:5b:f4:90:e4:98:85:7a:b2:1d:2a:09:ed:85:
                    17:17:f2:77:24:c9:ec:16:74:bb:09:fc:c1:71:39:
                    a7:29:a2:d4:72:af:9f:4f:46:81:00:b8:17:46:b1:
                    8e:13:ff:74:17:23:fc:03:4a:df:d3:d3:a2:0e:8d:
                    08:31:72:5d:5c:97:75:4b:65:84:b8:33:72:67:9d:
                    36:0c:1b:8c:53:7f:b1:dd:6e:6d:8f:af:21:9d:4a:
                    9d:69:b7:9d:3a:2f:c7:85:b4:82:bc:80:15:84:32:
                    dc:bb:07:eb:17:9f:e1:24:d5:c3:e0:09:ef:f4:d1:
                    bb:6d:b2:76:ca:9f:3c:43:c4:dd:50:80:8c:d3:62:
                    0f:56:26:9e:c8:b8:38:76:9f:56:08:06:7c:e4:35:
                    f5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8B:3C:9F:A0:D2:55:2F:EE:B0:1C:7D:2F:74:AF:E8:20:2E:BE:8D
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/v4s8n6DSVS_usBx9L3Sv6CAuvo0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.231.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:9c:65:2e:b1:f1:b4:a7:fa:6b:f6:b0:aa:53:18:96:7b:de:
         cb:50:e1:fb:b3:a1:7c:4e:40:43:07:79:e0:63:65:6c:56:d7:
         e3:30:1d:ed:3d:db:f6:eb:21:55:0f:03:58:4e:39:bd:90:48:
         e7:15:c7:a4:d6:59:9d:cd:e9:73:69:60:98:b5:0e:10:9d:42:
         f8:bb:f1:50:be:36:38:c6:8d:6c:9f:a7:62:20:69:03:09:dd:
         5f:ec:0f:07:2d:56:40:24:14:a2:19:10:31:62:d8:84:9e:69:
         0b:cd:0c:d7:8c:38:4e:d8:19:0d:fb:af:86:53:b4:c4:a4:a1:
         15:df:72:db:b9:2d:a7:de:bf:74:ba:75:7c:a4:7f:d5:c0:bc:
         93:1c:f5:ce:38:8f:ce:f6:f5:20:51:7a:27:f3:a7:ce:7e:f6:
         17:39:89:5a:f4:9b:bc:84:16:03:d2:c7:5c:19:0f:9b:87:31:
         0c:34:5f:dd:7f:c7:36:0a:8a:86:9f:b3:81:c1:70:37:1b:b2:
         55:ab:e4:e3:a7:32:fb:ca:df:00:3e:0e:ae:39:c0:01:30:68:
         89:e7:ac:eb:10:77:b8:43:85:48:9b:05:c4:34:9a:d0:16:4f:
         e1:bc:a7:7f:28:e9:7c:8c:30:af:72:84:0a:c8:84:a3:79:e6:
         66:73:bd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:57 2026 by rpki-client