Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/jNaNMuqbP5IGqqn3dPjIqXpMRvc.roa
File:                     jNaNMuqbP5IGqqn3dPjIqXpMRvc.roa (raw, json)
Hash identifier:          Mgtm11Sh2UI58FGPRRPlz1ujz/Dt9R5wDiN6Yat8Wv0=
Subject key identifier:   8C:D6:8D:32:EA:9B:3F:92:06:AA:A9:F7:74:F8:C8:A9:7A:4C:46:F7
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       47
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/jNaNMuqbP5IGqqn3dPjIqXpMRvc.roa
Signing time:             Tue 31 Mar 2026 08:35:37 +0000
ROA not before:           Tue 31 Mar 2026 08:35:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18278
IP address blocks:        183.91.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Mar 31 08:35:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8CD68D32EA9B3F9206AAA9F774F8C8A97A4C46F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:ed:1f:72:be:e7:f7:3a:e7:3e:3e:3a:26:
                    65:dc:33:c0:0b:41:7a:e1:61:fa:f8:3c:50:94:64:
                    90:05:22:13:25:12:e0:71:e9:e6:37:17:f0:e8:a7:
                    15:fd:ba:4f:49:90:aa:54:5d:be:77:c0:2d:a8:3f:
                    b3:db:2b:5e:67:86:af:56:2f:b8:de:76:8a:cd:63:
                    65:39:26:0c:b3:96:fb:d7:c3:45:e3:b7:19:a2:f9:
                    f3:a9:ae:f9:c2:cd:be:39:c4:2b:6e:1a:f4:59:df:
                    f5:72:af:b2:e0:65:6a:aa:6f:79:da:78:07:e2:a3:
                    30:e2:14:e2:75:63:ca:cf:82:7a:7d:ef:00:d5:3b:
                    4e:85:4a:30:d9:24:cb:ce:2e:5d:02:7a:57:50:11:
                    40:ba:ef:16:fa:75:b5:69:1c:15:02:0a:5c:ba:1d:
                    18:ae:77:bc:32:1d:d6:76:a4:45:36:49:d7:a4:66:
                    5e:fa:d5:00:5c:61:0d:db:d7:a8:b3:2a:c7:8c:de:
                    e7:11:81:79:ca:b1:1a:d0:22:4d:2c:e8:79:98:ce:
                    3e:4a:ff:fd:0a:ed:9e:ff:90:39:eb:62:49:ef:7d:
                    04:65:09:41:f2:9d:0b:e0:06:f2:c3:fa:aa:ab:80:
                    79:5c:3d:e1:f1:92:1a:26:c8:ba:2b:5e:7e:e2:57:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D6:8D:32:EA:9B:3F:92:06:AA:A9:F7:74:F8:C8:A9:7A:4C:46:F7
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/jNaNMuqbP5IGqqn3dPjIqXpMRvc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.91.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:f4:2a:0b:f1:5f:e1:1c:88:ec:8c:fc:1e:79:f4:14:9d:37:
         ab:26:b6:0a:61:fe:4f:52:a1:16:93:2d:23:4b:89:5f:e7:45:
         b1:5e:5b:5e:96:66:7b:93:36:53:e3:72:55:e5:75:44:3e:af:
         b1:6a:e6:34:b2:0f:5f:c2:76:73:8a:46:8e:13:33:d3:9b:b7:
         92:2d:57:3f:b0:2f:8d:fd:4d:c8:6f:67:eb:50:9b:88:3d:7f:
         a6:63:92:15:6f:ef:fd:4a:4b:8d:18:69:82:52:3f:eb:52:b0:
         31:99:10:c4:2e:cd:1e:95:45:d7:ba:4f:e2:e8:94:1e:22:a0:
         20:ad:9f:b1:f0:c8:6b:09:41:34:b7:09:4a:4f:d5:3a:e9:6c:
         28:6e:d1:be:8b:64:f4:79:41:07:2a:2e:0a:71:eb:ff:fa:2d:
         f8:67:09:25:fd:9d:92:17:1c:f4:dc:ec:de:e3:6a:59:94:0a:
         9e:d8:e2:18:99:6c:df:1d:5e:5c:f3:a7:03:35:87:3d:97:71:
         ff:26:f3:82:21:52:98:b2:50:c9:e7:39:45:e3:9c:13:ea:79:
         79:7e:db:90:6c:c1:3e:1d:21:82:cd:91:0d:d9:11:ca:9b:aa:
         85:c3:34:0d:b3:f4:d2:b9:61:94:64:23:63:74:34:91:38:3f:
         9e:17:b9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:49:45 2026 by rpki-client