Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/w0T4eyQO7Yiu7XHBRl3zS9JPAXc.roa
File:                     w0T4eyQO7Yiu7XHBRl3zS9JPAXc.roa (raw, json)
Hash identifier:          J3AKkOSall1VthYvbjdBmOey3tnE15sBqE3wR81j8DE=
Subject key identifier:   C3:44:F8:7B:24:0E:ED:88:AE:ED:71:C1:46:5D:F3:4B:D2:4F:01:77
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       3F
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/w0T4eyQO7Yiu7XHBRl3zS9JPAXc.roa
Signing time:             Tue 31 Mar 2026 08:33:20 +0000
ROA not before:           Tue 31 Mar 2026 08:33:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23791
IP address blocks:        118.102.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Mar 31 08:33:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C344F87B240EED88AEED71C1465DF34BD24F0177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:18:7d:b0:2a:dd:75:40:65:61:6c:05:1d:
                    fc:90:4f:77:1d:f7:0d:9a:ca:a1:60:8a:b9:64:7b:
                    c7:60:9b:21:e1:19:c0:82:54:27:e9:71:79:3d:97:
                    7e:e4:da:96:ba:af:db:30:8b:9e:1e:c1:c8:57:2b:
                    41:96:e8:91:8a:17:b0:d9:a5:5a:74:54:06:76:67:
                    a8:c8:ae:d6:42:8b:37:ef:e4:86:41:13:d4:89:74:
                    b3:ee:41:11:43:fe:77:fc:3f:65:12:c0:9f:b6:13:
                    4f:b1:15:12:c4:9b:c6:d0:3d:ac:c1:0a:d3:4c:44:
                    c0:37:6a:62:78:db:92:68:a1:aa:87:b5:c6:91:4d:
                    01:1a:83:d9:1c:25:d9:b7:af:be:26:ad:8d:01:68:
                    2b:16:ae:59:81:af:89:33:f3:aa:45:2d:de:38:4b:
                    f2:a3:9b:61:62:04:9a:fc:ef:fc:44:22:93:36:82:
                    1c:00:a6:50:06:90:84:66:1f:5e:d7:bf:b5:d0:d6:
                    92:a8:ad:55:6f:84:ef:8f:ce:d8:e8:2f:1e:4d:4a:
                    aa:1f:89:47:45:06:1e:2c:1e:4e:bf:a8:61:08:3f:
                    6e:fd:65:70:bf:83:6a:c3:e0:9c:13:16:b8:82:06:
                    5b:ac:ac:78:a5:87:57:51:c5:40:fe:1f:48:41:fe:
                    d0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:44:F8:7B:24:0E:ED:88:AE:ED:71:C1:46:5D:F3:4B:D2:4F:01:77
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/w0T4eyQO7Yiu7XHBRl3zS9JPAXc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.102.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:ca:12:fc:aa:e4:4c:ea:1a:40:07:cc:55:68:fc:0d:ce:
         9e:f1:65:f9:15:9d:ff:fb:c5:ba:7a:78:f7:ec:2a:4a:4e:62:
         f4:3c:08:c7:41:6b:cc:1e:46:09:ed:c9:de:1e:fb:73:fc:40:
         f0:9e:3f:3f:e0:7b:67:e0:bd:bf:7c:b4:d2:ec:83:6e:4f:07:
         3e:a1:b6:1e:97:41:e7:06:6f:20:2e:45:dc:87:10:ef:1a:fd:
         08:18:5c:d0:02:dc:ed:12:81:87:fc:87:73:81:d6:7f:94:62:
         04:bb:48:4a:8c:d4:1b:08:e2:e6:be:06:b8:b8:46:68:b0:6f:
         a0:77:d1:37:9e:3e:de:99:4a:b8:35:93:71:6b:12:ea:98:fc:
         32:4d:87:16:f4:d6:59:f8:72:78:ef:be:9d:6e:79:b8:40:cb:
         bf:b8:4d:35:7b:ea:68:21:38:1a:ba:e1:47:05:7b:10:bb:22:
         56:d3:d5:1a:40:2c:cd:ba:44:02:5b:a8:d6:19:b0:b9:ab:4c:
         75:29:52:3e:3b:5a:2d:8a:1e:da:8f:83:16:e6:c3:d8:85:76:
         76:29:d8:64:08:ba:86:c4:e3:e5:40:89:f9:4c:76:4f:75:01:
         a6:2e:68:1f:e9:68:10:bf:20:9a:41:2a:71:1f:21:9a:1f:bd:
         f3:8b:33:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:32 2026 by rpki-client