Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/0pC_zJxPE0PjpcgLfR0fPwHfQHc.roa
File:                     0pC_zJxPE0PjpcgLfR0fPwHfQHc.roa (raw, json)
Hash identifier:          9ZdbFZi7Xhx9+Q9/8uSxeN46l+c8b3kRWsOuuy8+c1c=
Subject key identifier:   D2:90:BF:CC:9C:4F:13:43:E3:A5:C8:0B:7D:1D:1F:3F:01:DF:40:77
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       65
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/0pC_zJxPE0PjpcgLfR0fPwHfQHc.roa
Signing time:             Tue 31 Mar 2026 08:15:36 +0000
ROA not before:           Tue 31 Mar 2026 08:15:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131934
IP address blocks:        180.94.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Mar 31 08:15:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D290BFCC9C4F1343E3A5C80B7D1D1F3F01DF4077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7a:f7:ed:92:45:96:94:09:a7:5c:8b:0a:7e:
                    7c:cf:bf:4b:25:80:85:d6:aa:48:4b:a4:27:35:e4:
                    20:10:2c:ad:d6:0d:1f:d4:b4:2e:1a:37:4b:f8:2f:
                    16:01:40:ce:53:c6:fd:8d:70:db:7c:b1:81:b4:69:
                    61:32:2b:5e:0f:b1:81:d4:02:34:3b:0d:44:1d:e9:
                    2c:00:d3:9f:56:7e:df:e5:65:6a:56:2c:81:1f:1b:
                    46:53:4f:56:f1:63:11:eb:f4:ef:c2:66:76:57:4a:
                    40:66:1e:a2:ac:7c:9c:f1:7f:f5:77:09:8e:69:e8:
                    1d:79:c1:c5:5f:4a:b6:02:7e:63:0c:71:c4:fd:c9:
                    75:e3:82:b6:fb:24:18:39:24:f6:62:09:92:8f:bc:
                    73:26:b6:07:0d:e8:f9:03:ce:62:98:23:c2:85:62:
                    ab:a9:22:de:28:6b:dd:f9:e0:5d:30:6f:8b:d4:76:
                    6b:a3:8e:cc:51:26:d4:de:a1:d6:7b:28:a8:e3:e0:
                    99:8b:7c:22:97:95:45:63:08:31:32:cc:b8:c0:64:
                    5c:c7:6b:d8:fd:b8:a4:a2:44:75:3b:bf:3d:d3:fd:
                    09:58:d0:1f:dc:3d:82:67:f2:d9:ab:a8:b8:9c:5d:
                    c6:9c:33:56:9e:d8:ff:a8:70:de:33:85:7f:58:7e:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:90:BF:CC:9C:4F:13:43:E3:A5:C8:0B:7D:1D:1F:3F:01:DF:40:77
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/0pC_zJxPE0PjpcgLfR0fPwHfQHc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:83:19:ef:1d:09:70:9c:dd:e9:31:dc:f0:2e:00:ef:d7:70:
         11:5d:a5:7e:ee:de:40:90:73:ab:c2:c6:18:7c:6e:b3:77:6b:
         21:2f:95:7e:07:9f:fa:68:e9:0f:66:26:2e:67:cb:50:89:d0:
         3f:51:3f:b5:2b:49:53:dd:8b:22:58:31:75:0b:c0:24:76:b6:
         a4:7f:0a:d9:0f:6d:6a:91:6a:d4:0c:53:69:a7:ac:67:62:28:
         c5:d2:cd:36:31:af:c9:ff:8a:d1:be:6c:6a:ad:b4:6b:19:91:
         4c:48:fa:d7:f3:87:40:1e:c2:f7:ce:76:ea:28:72:ab:7e:70:
         ea:f1:cd:4f:6a:8d:6c:32:bf:14:46:68:a0:ef:d3:32:83:b2:
         b6:39:86:ab:13:5c:d3:b2:22:e1:dd:3e:ce:60:35:42:c9:04:
         51:0c:e0:61:26:1e:b3:d5:1e:48:13:a9:d1:e2:15:c2:e3:3a:
         f3:23:2d:f4:43:76:e7:dd:87:1f:ec:8b:b3:6a:76:96:eb:06:
         41:54:a5:36:d5:99:e8:2e:c6:d2:df:b6:2f:31:6e:f5:ba:ee:
         37:c5:53:cf:a8:a9:e7:3c:78:a4:e2:85:c0:8e:03:00:50:e7:
         a2:50:c0:cd:3e:4e:20:de:94:f7:98:2b:3c:e3:95:e3:8c:35:
         7e:61:0d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:44:41 2026 by rpki-client