Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/AMyMmAK8r1Ymmfqg-nREQnxzbbQ.roa
File:                     AMyMmAK8r1Ymmfqg-nREQnxzbbQ.roa (raw, json)
Hash identifier:          NmsSGoyiVyqjd/kgyxxK3tuNmGQFfaDD7bLy+UzXrwI=
Subject key identifier:   00:CC:8C:98:02:BC:AF:56:26:99:FA:A0:FA:74:44:42:7C:73:6D:B4
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       5E
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/AMyMmAK8r1Ymmfqg-nREQnxzbbQ.roa
Signing time:             Tue 31 Mar 2026 08:32:02 +0000
ROA not before:           Tue 31 Mar 2026 08:32:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        116.199.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Mar 31 08:32:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=00CC8C9802BCAF562699FAA0FA7444427C736DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4b:67:eb:d0:1e:de:38:c4:8f:08:37:4e:59:
                    fa:2b:a9:62:1a:5a:42:b3:a4:be:00:1b:ee:fb:ad:
                    8e:c5:80:87:da:24:41:bb:52:92:7a:0d:7c:30:3a:
                    a8:49:db:79:ba:40:40:9e:7e:08:8f:29:64:09:f6:
                    fd:7f:92:da:b3:12:bf:fe:67:aa:8c:36:d3:59:f5:
                    4a:e1:bd:1c:73:b2:87:3f:f1:55:1f:20:96:5d:66:
                    58:3c:ad:18:8f:23:1a:8b:b1:d6:35:4e:bc:37:88:
                    26:7c:4e:f5:63:f5:66:aa:3b:6e:b2:83:4e:34:43:
                    1c:db:6d:04:a5:d2:9f:8b:fa:3c:50:cd:d1:04:f6:
                    b8:04:28:31:ea:a3:1a:e4:6a:e7:1a:b9:2d:b4:d7:
                    9f:a6:1b:e6:65:52:b5:62:71:96:61:c8:90:f3:25:
                    1f:c8:af:dd:ef:af:f1:a5:70:54:02:49:a1:bb:5c:
                    67:6b:dd:5d:76:8c:f9:d4:00:77:05:61:49:fe:9a:
                    3c:56:47:8e:06:1b:5d:71:30:3d:0d:91:7f:97:cf:
                    98:bc:ca:62:d5:5c:9f:25:36:97:73:6b:ec:c7:eb:
                    92:18:d1:45:c0:e4:c0:94:23:ad:1f:5f:8a:60:12:
                    50:2e:97:e1:6e:de:aa:46:9d:59:1a:d2:c5:bf:d0:
                    9f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CC:8C:98:02:BC:AF:56:26:99:FA:A0:FA:74:44:42:7C:73:6D:B4
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/AMyMmAK8r1Ymmfqg-nREQnxzbbQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.199.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:e0:b0:f5:01:2c:7c:7f:aa:fb:5a:f0:2b:b9:6e:86:81:
         b7:b5:5f:35:4d:fe:02:da:39:41:01:a7:52:03:fd:8f:ce:96:
         d8:e3:35:20:23:0d:2d:10:88:b0:f1:36:7e:0f:8d:63:3c:ee:
         29:04:b3:c3:2e:07:01:48:b7:1a:a7:73:b6:3a:66:14:56:b3:
         93:ad:17:47:7d:45:57:85:97:c3:1c:28:74:8c:33:ca:6c:60:
         34:79:f9:dc:b2:37:40:e7:e3:da:2e:d9:c9:a3:15:96:80:03:
         2d:49:3f:57:1b:69:e8:91:b9:b9:ac:58:a5:a8:a2:fd:00:8c:
         c1:21:05:e0:ba:42:a3:6e:fd:03:33:06:6d:d3:88:51:e8:f9:
         52:57:c4:13:2e:e6:f2:87:24:04:f0:05:67:00:c7:25:af:bb:
         a9:ce:22:44:80:b9:44:40:65:d4:bd:3d:60:d6:4b:8f:3a:4a:
         2a:d7:53:7b:f4:59:b5:53:2f:1b:f9:7b:5d:70:8b:90:6b:52:
         e7:d2:1d:2d:2f:a1:78:27:85:1b:bf:b2:36:ae:4d:1b:45:64:
         81:b6:14:af:a7:ea:1b:34:ae:40:72:e6:38:aa:ea:47:ad:ee:
         eb:87:ff:de:38:c3:7b:9d:1b:48:da:62:fa:72:ca:da:4f:4f:
         c4:00:4c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:00 2026 by rpki-client