Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/9_VXatsk8sE58JrqjYQRkk5bYO8.roa
File:                     9_VXatsk8sE58JrqjYQRkk5bYO8.roa (raw, json)
Hash identifier:          PV3DrXuoBLbhNAkBpD4/nc5P9Ao6UNX+C7Ixo8Xj3bk=
Subject key identifier:   F7:F5:57:6A:DB:24:F2:C1:39:F0:9A:EA:8D:84:11:92:4E:5B:60:EF
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       3E
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/9_VXatsk8sE58JrqjYQRkk5bYO8.roa
Signing time:             Tue 31 Mar 2026 08:33:20 +0000
ROA not before:           Tue 31 Mar 2026 08:33:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23791
IP address blocks:        118.102.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Mar 31 08:33:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F7F5576ADB24F2C139F09AEA8D8411924E5B60EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:c3:77:15:48:e4:03:1e:2a:bb:e5:5b:ec:
                    67:a6:7a:07:60:59:d6:28:30:0d:8e:0c:2c:97:4a:
                    24:9d:d0:1a:7c:f6:24:a2:22:58:9b:aa:c9:ad:84:
                    11:f2:ac:87:c4:60:cc:9a:21:56:d3:10:67:9e:75:
                    3a:c1:65:d4:b8:c7:ff:b8:1d:73:bd:57:13:79:97:
                    71:32:d4:96:7e:03:10:53:74:4c:29:1c:8b:c5:8a:
                    f0:ef:36:cc:c4:b4:8b:18:ff:21:04:fc:22:c1:c8:
                    d4:66:3d:51:70:38:99:1f:d1:ae:49:4a:a0:98:c8:
                    97:30:4e:f6:fb:90:df:48:02:5c:77:de:dd:f7:63:
                    4b:dc:b7:df:bf:83:85:59:a9:29:08:ca:02:16:2c:
                    ed:c2:54:12:38:2f:ad:5d:ec:49:06:43:3e:db:d2:
                    2b:d3:00:72:89:3b:48:11:73:f0:d9:b7:8f:91:91:
                    35:66:15:53:1e:b5:8a:bf:91:fe:93:ea:1f:eb:c4:
                    e7:4d:02:ae:59:ce:dd:dc:18:61:ef:ab:58:13:11:
                    9c:67:f3:ef:e9:83:0c:04:97:4f:cd:ef:f7:28:ac:
                    26:7c:67:ac:f2:ef:e7:ca:e5:7a:fb:5d:c0:62:2d:
                    f2:22:b4:78:c6:91:97:8f:86:6c:55:ae:be:5a:7e:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F5:57:6A:DB:24:F2:C1:39:F0:9A:EA:8D:84:11:92:4E:5B:60:EF
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/9_VXatsk8sE58JrqjYQRkk5bYO8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.102.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:06:5b:ce:84:4c:97:2c:67:dc:e4:f5:8d:0b:ad:c4:2d:f2:
         95:6a:99:b2:d6:6e:36:9d:b2:21:97:b7:d3:82:b6:ca:16:a9:
         ce:ba:03:fe:77:bc:4a:79:9b:66:53:7e:e1:93:ee:92:b6:70:
         0e:84:68:15:20:ac:c5:e4:72:a4:2d:61:16:ad:cf:00:c7:33:
         f6:d5:59:f7:9c:be:9f:a1:21:40:c4:82:89:04:e9:16:2d:61:
         81:db:4e:7a:1b:9d:17:7c:92:48:fd:8a:f3:c4:81:ac:36:3c:
         46:19:4f:90:4a:82:fd:c5:10:56:d3:54:c8:5b:b2:7f:b6:db:
         78:59:0e:71:7e:07:d3:d3:b1:28:ff:0c:13:b4:d9:58:b0:d9:
         f5:69:33:bb:2b:1f:fd:9c:a9:ca:a5:90:a1:44:44:85:78:ae:
         53:14:4d:d4:2e:99:a8:20:3e:a3:f9:15:22:b5:82:9a:82:9a:
         50:19:8f:0c:12:ea:25:46:c8:eb:5f:d6:29:7b:cc:f2:66:c3:
         8f:c1:06:85:7f:a4:7f:b1:b4:1a:b2:5c:28:94:d1:5c:59:0b:
         42:38:ba:1c:e1:d5:b7:14:91:81:a0:16:eb:08:08:62:47:5d:
         81:91:96:eb:5a:1e:21:d7:19:1f:12:73:82:19:a1:9a:02:63:
         69:ae:ca:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:17 2026 by rpki-client