Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/retHF8LbE22XEZUt--uFb43UMMY.roa
File:                     retHF8LbE22XEZUt--uFb43UMMY.roa (raw, json)
Hash identifier:          6gxuRHOotGJAwCdHjwq5qYKcj4ZrPQ69JQkUZ762sX4=
Subject key identifier:   AD:EB:47:17:C2:DB:13:6D:97:11:95:2D:FB:EB:85:6F:8D:D4:30:C6
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       44
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/retHF8LbE22XEZUt--uFb43UMMY.roa
Signing time:             Tue 31 Mar 2026 08:35:36 +0000
ROA not before:           Tue 31 Mar 2026 08:35:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18278
IP address blocks:        118.82.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Mar 31 08:35:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ADEB4717C2DB136D9711952DFBEB856F8DD430C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:ff:bf:29:46:e0:57:32:b9:d5:8f:5f:d5:
                    be:e3:da:85:64:ef:93:1b:59:38:b7:5d:64:1b:9b:
                    92:e3:fa:a9:46:a9:37:14:88:df:8a:0f:97:79:a9:
                    2c:e1:e3:06:4b:f6:56:45:ab:0a:32:b7:fd:7a:b6:
                    b1:29:67:0b:d3:e0:e8:b0:67:86:90:a3:e9:f5:d6:
                    2d:7c:b4:ae:67:f6:fb:8b:fb:e2:a0:7d:96:e8:21:
                    64:88:f1:44:81:71:da:da:96:cb:d7:fe:63:25:69:
                    46:6e:a7:d8:00:e3:ed:45:a3:3a:c5:1f:c6:64:9c:
                    08:47:a0:63:8b:e1:89:9e:02:1f:b8:36:a1:b9:81:
                    c1:f4:7b:1f:bd:e8:d7:48:68:66:e3:2c:12:e8:89:
                    34:98:5b:ce:1a:6d:c6:cb:20:e0:79:ad:a0:b0:21:
                    98:b1:85:ff:1b:a0:77:db:1e:6a:e3:3d:87:c3:18:
                    9e:80:a4:b9:65:12:d2:0e:68:64:f7:d1:13:89:e2:
                    01:98:df:e7:69:1d:66:54:82:31:f5:1f:c0:20:85:
                    7a:a8:2d:b9:1a:4d:5f:11:12:44:53:54:f8:4b:b9:
                    57:c4:68:30:cf:17:f0:03:83:69:da:4e:82:68:ee:
                    93:7d:1f:e6:80:17:02:60:e3:2f:86:36:4b:1a:c8:
                    c4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EB:47:17:C2:DB:13:6D:97:11:95:2D:FB:EB:85:6F:8D:D4:30:C6
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/retHF8LbE22XEZUt--uFb43UMMY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.82.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:2c:7b:ed:38:90:cd:fc:20:77:0c:40:55:5d:72:40:0c:25:
         66:94:59:dd:66:20:9e:93:ff:54:0f:bf:07:81:0c:45:3c:d1:
         74:62:a6:6b:bc:2b:5a:c4:c7:9f:d0:f4:53:ac:1e:b0:e7:c3:
         4a:b9:83:de:7e:e3:a3:61:24:72:3e:53:db:f3:20:4a:2b:23:
         4d:38:00:49:f3:bd:f4:46:1c:9e:ec:23:bf:1a:ce:ed:2a:7a:
         cc:fc:59:6c:81:81:fa:f6:95:b3:43:be:6a:95:fa:6c:59:85:
         18:a3:82:29:44:92:ae:8a:1e:34:06:bc:c3:67:89:17:be:aa:
         f0:7b:7e:82:74:d8:93:b1:83:af:55:c3:0a:65:6f:68:0f:54:
         07:9e:5f:7f:e5:9e:25:e9:36:97:45:25:cc:b6:e8:d5:1e:b9:
         20:f8:fe:e0:56:66:70:5b:3f:0c:8a:bd:bf:8d:26:af:5d:ec:
         a3:93:32:00:05:bb:8d:be:e6:a3:94:cc:16:25:51:5d:7d:35:
         98:5d:ae:5c:5a:34:cf:38:6b:9a:bc:74:bc:66:1d:41:f2:3e:
         4b:3c:9b:b0:2d:1f:b6:0f:83:92:da:39:cb:aa:a0:5f:d3:6a:
         e1:c1:97:ed:f5:3d:50:96:02:11:9f:4d:54:3c:a1:7e:c9:0c:
         81:68:c0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:52 2026 by rpki-client