Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/pvBmzHHanJyNGNGTdeo0I2o-fTI.roa
File:                     pvBmzHHanJyNGNGTdeo0I2o-fTI.roa (raw, json)
Hash identifier:          JhQLoXVBgPKt2NKlb+NCh4VHu7cG3gSTO55y4qR/A8I=
Subject key identifier:   A6:F0:66:CC:71:DA:9C:9C:8D:18:D1:93:75:EA:34:23:6A:3E:7D:32
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       9D
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/pvBmzHHanJyNGNGTdeo0I2o-fTI.roa
Signing time:             Tue 31 Mar 2026 07:50:46 +0000
ROA not before:           Tue 31 Mar 2026 07:50:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18144
IP address blocks:        202.208.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Mar 31 07:50:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A6F066CC71DA9C9C8D18D19375EA34236A3E7D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:ca:70:ec:a6:0f:c6:12:5a:fb:18:2b:1b:
                    44:eb:3e:9b:92:a3:45:ce:30:76:e4:c6:25:b1:b3:
                    a2:14:1f:97:5a:3e:ae:eb:1f:d8:ee:f7:95:a9:bc:
                    60:a3:12:cc:aa:68:f8:02:68:f2:98:56:12:52:f1:
                    99:dd:cf:96:ba:16:58:f8:17:ed:b3:69:25:0b:3b:
                    96:37:53:e6:5c:b1:66:ae:24:86:70:ab:6f:bb:f0:
                    e1:c6:1e:7d:39:f9:4b:fe:bd:d7:bc:52:8c:82:93:
                    ad:a6:89:a3:01:fb:0f:e7:0a:30:05:b0:40:b7:eb:
                    75:dd:32:bf:f0:1e:7d:24:29:44:bc:6f:8e:0a:56:
                    98:b7:92:02:d7:d1:63:6e:8c:32:60:8b:dd:ef:06:
                    d4:48:a0:43:de:1a:2c:90:73:0d:42:b1:90:5c:78:
                    78:ee:c7:b5:45:cd:e5:a5:e3:5e:f6:08:8e:a1:e1:
                    6d:b1:2d:e3:a3:f6:95:c4:b4:44:7f:8e:e8:40:fd:
                    e5:15:cc:d5:ae:c9:88:79:97:0f:e9:d2:71:72:cf:
                    6d:d6:a2:1d:40:ce:09:d3:0c:6b:f1:0c:0f:d5:a0:
                    09:7a:63:39:03:dc:c4:e2:40:c1:6d:23:24:a9:3d:
                    7a:65:14:a2:3d:7a:a6:51:0e:29:03:f0:66:61:35:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F0:66:CC:71:DA:9C:9C:8D:18:D1:93:75:EA:34:23:6A:3E:7D:32
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/pvBmzHHanJyNGNGTdeo0I2o-fTI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.208.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:78:31:03:da:3e:8c:83:1c:1d:d8:75:ce:8f:0d:37:b0:3a:
         9f:49:8f:2b:40:46:a3:2c:62:45:3b:84:59:b6:9f:c5:01:a8:
         7b:72:4c:a4:f6:4e:59:e3:c9:71:36:50:22:d3:73:8f:1d:97:
         a7:d6:c4:67:52:c3:63:d0:d9:de:08:5a:d1:69:ff:2d:6d:d4:
         e5:94:0e:17:a8:8a:45:95:dc:dc:6b:88:d7:8d:07:ee:eb:ae:
         b6:9e:29:a2:57:49:37:8d:82:8b:e9:06:cd:25:a7:ae:08:80:
         62:f0:c4:dc:5f:f4:f4:2f:4f:b3:e1:d5:d6:ff:44:2c:22:a5:
         75:79:4b:77:8e:b0:ba:99:25:be:7c:da:1f:7c:e3:f3:c8:2f:
         6d:f2:db:31:91:39:ca:cf:c1:a5:51:64:8a:86:29:05:11:ff:
         38:81:17:16:ad:48:9b:db:03:c3:c5:46:bf:e9:9d:e3:bd:79:
         f4:3f:2b:93:91:fb:99:b6:7a:d8:0b:79:8c:fe:22:b2:c2:52:
         c3:34:f8:b1:2c:d7:47:f9:83:1a:a1:5f:f8:c1:45:95:77:04:
         df:6f:85:91:f7:d9:b0:4f:dc:2a:c7:f0:f3:ad:74:0b:67:a8:
         6b:1f:f6:37:ad:31:9c:11:92:29:90:7e:eb:de:00:cc:d7:c4:
         8f:b3:eb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:35 2026 by rpki-client