Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/nM9bTF_MwIe7jrDrUAaA5qaIS80.roa
File:                     nM9bTF_MwIe7jrDrUAaA5qaIS80.roa (raw, json)
Hash identifier:          JbHmup/KNT0vp3/ggrTXa3DH5VFCx+0pPp8CFfDyx4Y=
Subject key identifier:   9C:CF:5B:4C:5F:CC:C0:87:BB:8E:B0:EB:50:06:80:E6:A6:88:4B:CD
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       9B
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/nM9bTF_MwIe7jrDrUAaA5qaIS80.roa
Signing time:             Tue 31 Mar 2026 07:50:45 +0000
ROA not before:           Tue 31 Mar 2026 07:50:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18144
IP address blocks:        116.81.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Mar 31 07:50:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9CCF5B4C5FCCC087BB8EB0EB500680E6A6884BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:8d:8c:04:32:b7:14:06:95:6c:99:35:1d:
                    c9:b4:77:e7:a3:d1:79:fb:8e:6b:ba:9c:50:9d:3c:
                    08:48:0c:6d:98:1a:32:e0:93:ac:8a:11:38:55:c4:
                    a3:74:c8:30:94:34:5a:1a:60:88:bb:a1:f3:3f:d8:
                    9f:e5:75:8d:dc:9b:f7:8a:51:fe:ac:12:a0:23:fe:
                    13:c2:a2:c1:86:2d:ec:3e:dc:fa:e9:85:56:7c:31:
                    22:51:0a:0c:32:03:d3:73:6c:1d:42:53:32:32:f7:
                    ec:58:88:0f:74:27:04:72:61:95:d5:b2:fa:1c:51:
                    6d:ab:48:f7:da:87:79:28:3e:5b:04:83:08:8f:93:
                    dd:0f:1d:5a:6e:cb:44:86:73:58:73:30:35:24:a5:
                    a9:72:a0:58:9a:0f:dc:59:79:87:46:ad:c8:d9:a6:
                    07:25:8c:60:83:4e:6a:ee:8e:77:e0:23:54:86:7f:
                    e1:27:2b:07:0f:80:d1:6e:0a:1d:c3:3b:10:f4:a6:
                    41:dd:f5:38:e7:ea:89:72:43:4a:18:db:54:50:bb:
                    ef:e1:55:7c:e4:20:5b:21:d4:ca:da:ba:15:bb:b4:
                    9d:20:e9:c2:cb:37:37:69:43:9c:61:a4:04:fc:65:
                    b7:51:d9:7a:3c:08:e1:31:d7:31:78:3e:7d:b4:21:
                    64:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CF:5B:4C:5F:CC:C0:87:BB:8E:B0:EB:50:06:80:E6:A6:88:4B:CD
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/nM9bTF_MwIe7jrDrUAaA5qaIS80.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.81.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:62:28:30:27:36:8e:57:d0:5c:48:78:ae:d0:bd:8a:ec:0b:
         2c:be:0e:46:b5:a1:91:ba:cb:73:55:66:73:88:06:76:b6:97:
         10:22:cc:6c:c8:ea:ac:04:e1:41:3d:c3:14:2e:b1:d2:74:18:
         40:f7:16:04:30:51:83:85:48:7e:39:14:fa:5f:fb:c0:08:2b:
         01:19:d3:16:dc:e8:87:6d:45:72:63:8d:be:01:0c:3e:2e:86:
         ac:2d:2f:a0:37:c4:a5:cc:58:f7:b1:f0:78:c5:63:cf:f1:b3:
         37:a7:87:10:22:4e:5c:47:8f:ba:92:bd:2c:eb:09:68:12:bc:
         56:48:57:9f:3b:75:ac:9b:77:50:79:d9:5f:d2:3b:2b:bb:e4:
         86:03:14:70:58:d3:fb:50:e3:ec:af:0b:81:57:70:4d:40:8b:
         7c:b6:28:7c:2e:37:24:d0:30:9c:ce:c8:01:36:50:04:80:01:
         b3:42:d8:2f:7a:b2:11:17:9f:04:ce:41:d3:28:35:41:9b:0a:
         93:1d:ff:8a:64:7b:8a:49:57:18:bd:7c:5b:97:f1:c1:5f:f7:
         83:93:8c:c3:2c:5a:7e:c8:85:2b:34:fc:35:9e:7c:e0:f0:b0:
         38:b4:40:93:be:26:8b:42:2b:f5:bb:40:ce:24:de:a9:14:fa:
         22:41:85:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:52 2026 by rpki-client