Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/rvQ79ObMC689enSaQsZr25lpxxk.roa
File:                     rvQ79ObMC689enSaQsZr25lpxxk.roa (raw, json)
Hash identifier:          mp6TVQMiAtOZnx+mbJXEFRhD9J8QEVoZJvJP7bl/jp8=
Subject key identifier:   AE:F4:3B:F4:E6:CC:0B:AF:3D:7A:74:9A:42:C6:6B:DB:99:69:C7:19
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       97
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/rvQ79ObMC689enSaQsZr25lpxxk.roa
Signing time:             Tue 31 Mar 2026 07:50:43 +0000
ROA not before:           Tue 31 Mar 2026 07:50:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18144
IP address blocks:        61.195.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Mar 31 07:50:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AEF43BF4E6CC0BAF3D7A749A42C66BDB9969C719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:ec:ba:1a:23:91:81:98:95:88:11:fc:13:
                    ff:d9:60:b6:07:6e:e8:b5:72:3a:74:73:16:4d:62:
                    5e:f0:01:58:af:cd:1c:66:b1:78:5c:ea:57:02:6d:
                    ba:af:4b:fa:c2:52:76:32:b5:ac:2f:b2:cc:de:4b:
                    eb:b0:85:cd:7f:fc:d6:f8:59:ec:c2:54:cb:04:b4:
                    a7:70:b5:b6:e7:78:60:e6:4d:72:f2:43:70:3b:97:
                    6d:b3:56:9e:b1:be:ef:2b:b3:fc:a0:21:78:e6:c9:
                    50:18:cb:23:9a:46:cb:83:eb:23:36:16:ef:ed:f9:
                    63:67:99:2e:f5:9e:63:17:2f:43:a8:85:86:8d:0e:
                    83:f0:f3:da:30:ad:be:1a:03:96:a7:58:cf:7a:c2:
                    25:46:38:07:f7:e9:78:58:65:d0:9d:2a:91:20:51:
                    33:88:0a:30:71:93:48:99:be:7b:90:9d:37:b3:e4:
                    05:52:39:bc:18:81:a5:7c:70:34:b0:b2:6a:8f:53:
                    ef:ca:95:db:6a:51:81:19:4d:63:c2:c1:f6:7c:33:
                    dd:57:8e:ea:e1:0e:18:77:93:09:92:d3:39:00:02:
                    41:80:dd:2a:38:d5:83:ff:12:f1:de:67:18:d6:d8:
                    18:15:2e:36:7b:db:45:7d:69:ce:f7:db:c4:dd:45:
                    65:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F4:3B:F4:E6:CC:0B:AF:3D:7A:74:9A:42:C6:6B:DB:99:69:C7:19
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/rvQ79ObMC689enSaQsZr25lpxxk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:73:2c:a5:9f:16:58:7a:90:8b:c6:a5:12:8d:f5:be:d5:c7:
         75:a8:9d:5d:80:c7:1a:4d:b8:16:91:17:d7:c4:7c:f0:66:9f:
         5f:08:0e:a3:07:74:ff:0d:bc:3b:a1:c7:7f:a4:4b:2a:21:34:
         77:43:b9:ac:63:a6:b2:91:fa:83:ef:38:65:ff:4f:5d:f6:de:
         3c:22:59:57:91:c6:ec:5b:2f:e7:2c:3c:73:01:fb:f3:4d:47:
         60:5f:c5:6c:9d:5b:a8:f7:e6:a8:8e:9c:91:01:35:e8:cf:7f:
         41:88:d4:d2:0c:c3:b6:1f:78:c6:5e:86:4d:a3:ca:e0:a3:8c:
         3b:5d:91:98:91:4b:51:43:c7:93:44:ce:ef:6e:63:4a:2f:23:
         0a:28:3b:9c:b4:be:64:74:30:9a:b2:a9:21:ed:23:c4:d1:03:
         30:b9:f2:0a:dc:b8:3a:06:a8:77:59:6b:cf:5f:a1:40:bf:aa:
         d0:53:8f:52:72:c6:5b:ec:db:49:ae:e6:51:91:69:2c:b2:4d:
         14:79:0f:35:69:1e:6f:59:b3:48:39:ec:8d:79:86:c3:57:e9:
         d8:1b:d3:1c:0d:a1:49:0f:00:72:1f:a9:05:24:c9:ea:4c:21:
         bd:41:c1:50:5b:e8:77:82:28:f6:75:d4:02:19:50:db:ad:9a:
         d8:3e:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:31 2026 by rpki-client