Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/4979LvpzV38HN7h_rSegRN-RbGM.roa
File:                     4979LvpzV38HN7h_rSegRN-RbGM.roa (raw, json)
Hash identifier:          LfKArFp71mKNaeHM7HGB4PBqdoyKS3tpR0UrRKdjpBg=
Subject key identifier:   E3:DE:FD:2E:FA:73:57:7F:07:37:B8:7F:AD:27:A0:44:DF:91:6C:63
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       68
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/4979LvpzV38HN7h_rSegRN-RbGM.roa
Signing time:             Tue 31 Mar 2026 08:15:37 +0000
ROA not before:           Tue 31 Mar 2026 08:15:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131934
IP address blocks:        103.28.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Mar 31 08:15:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E3DEFD2EFA73577F0737B87FAD27A044DF916C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:19:ae:e8:47:69:10:61:41:4d:b6:7e:4f:
                    8a:3d:50:8f:60:65:6e:26:d5:8b:f1:8e:cd:2a:23:
                    db:df:af:46:33:b9:bd:b4:e3:22:45:1d:7c:7f:c2:
                    22:e3:d8:70:f1:19:8d:40:6d:6c:1b:be:6f:f9:f2:
                    f0:81:15:9f:27:7b:41:99:7e:a5:b8:cd:8b:7c:13:
                    23:41:4a:73:6c:c6:62:7b:0c:ca:4a:08:15:7e:b2:
                    90:57:7b:00:dd:e5:42:67:14:6d:32:61:e9:c3:e6:
                    a0:12:29:71:28:59:64:17:4c:a1:ff:00:2c:25:a6:
                    56:19:8f:08:dd:04:ea:31:6f:1a:76:0d:65:ae:29:
                    b7:9e:6a:9d:20:cc:25:48:9c:0f:77:56:43:1b:ea:
                    b8:a1:09:2f:77:8e:ee:c4:e4:9a:d2:d0:32:de:bc:
                    c6:f5:99:ba:91:a4:ac:d0:ee:08:cf:89:aa:fa:2c:
                    ce:5d:63:42:ee:19:52:e3:9a:5a:fd:e8:dc:d7:19:
                    58:05:d5:9e:68:fd:21:a1:92:9a:b2:c7:9d:d5:21:
                    dc:69:85:46:17:db:d9:7b:0d:ec:84:fb:a0:9f:45:
                    7f:5b:12:25:54:f3:28:e8:f1:4c:13:b0:c8:e0:2f:
                    e3:c2:d3:4b:2d:57:4a:4a:b7:a4:5d:7f:73:9b:3a:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DE:FD:2E:FA:73:57:7F:07:37:B8:7F:AD:27:A0:44:DF:91:6C:63
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/4979LvpzV38HN7h_rSegRN-RbGM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:78:2b:3b:ec:f2:55:54:af:1a:a5:8b:86:6e:91:54:dc:18:
         f4:9c:a7:ae:a5:3e:43:2d:c4:8d:e6:d3:3d:0e:87:74:89:4c:
         6b:3f:0c:7f:d5:72:31:71:66:b4:49:02:26:5d:5c:5b:4c:a5:
         0e:44:e5:55:dc:71:6e:dc:a7:da:43:3b:cc:84:58:a7:f7:1c:
         52:3c:c5:15:44:bf:4e:41:b4:d6:b7:d5:a0:5f:35:35:47:e4:
         7f:21:c1:cb:9d:b1:24:00:cc:77:e0:98:ac:35:3e:58:cf:41:
         91:a7:98:a1:4a:82:b7:89:9e:bf:c9:bf:b9:cf:ab:a5:f2:d2:
         9b:6a:ef:19:67:33:46:c3:cc:da:fe:30:b2:21:e2:34:be:a8:
         9b:85:00:ac:47:d4:c9:e5:f3:b3:17:fc:5e:87:bc:2e:c1:ae:
         b7:88:32:23:37:56:15:cf:06:78:ae:bf:02:1f:7d:6c:ac:6d:
         24:b9:75:6a:c2:3a:d7:96:2e:ef:eb:b9:79:3f:2a:a3:40:1d:
         80:a3:f2:e6:ca:51:3b:c8:58:5f:4e:82:36:17:ba:59:42:5b:
         98:f1:cd:f8:f8:7a:1d:7e:32:5c:05:c4:76:c1:22:10:71:e4:
         9d:05:bb:fe:fa:ad:6d:21:e8:5a:3b:36:28:5e:ab:68:45:41:
         32:d2:c4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:52 2026 by rpki-client