Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/sCGVR211dlO69E0bbqcfhqonsKI.roa
File:                     sCGVR211dlO69E0bbqcfhqonsKI.roa (raw, json)
Hash identifier:          2x5+qAivK8WFKMo7rPnv+iIAu5fEKqT5V131F1Hu/LY=
Subject key identifier:   B0:21:95:47:6D:75:76:53:BA:F4:4D:1B:6E:A7:1F:86:AA:27:B0:A2
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       5D
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/sCGVR211dlO69E0bbqcfhqonsKI.roa
Signing time:             Tue 31 Mar 2026 08:32:01 +0000
ROA not before:           Tue 31 Mar 2026 08:32:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        180.148.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Mar 31 08:32:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B02195476D757653BAF44D1B6EA71F86AA27B0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:ab:99:8f:b5:bf:28:25:5a:89:8e:57:9a:
                    4b:77:a9:fa:7d:98:98:97:ff:21:de:84:15:03:b2:
                    20:ad:2d:1c:95:54:93:bf:e2:5b:06:1a:2b:63:c5:
                    84:61:29:af:d8:20:a8:87:05:03:35:b8:21:44:cf:
                    44:07:a7:2a:da:c0:0e:ab:cd:96:ee:f8:27:d3:72:
                    b0:16:44:17:ad:d9:29:6f:b6:45:43:73:eb:9d:c5:
                    3a:16:7c:ae:00:3f:f2:79:42:b7:87:19:91:24:77:
                    b6:84:51:93:45:20:bf:9d:bc:5a:c2:77:f8:27:c9:
                    6f:b7:48:75:b1:da:b9:59:83:01:21:4f:a7:cc:01:
                    8d:b3:7e:e7:1c:cd:57:b7:e0:6e:57:74:3e:30:af:
                    33:3f:fe:a5:be:b0:80:60:87:b3:ae:bf:c6:24:53:
                    0a:03:97:be:91:3e:91:37:06:c8:22:de:d1:b5:2f:
                    c9:10:51:62:2e:4a:66:0e:eb:4b:ad:74:a4:63:6c:
                    0b:70:76:35:83:33:44:c5:76:a9:44:0c:14:01:d7:
                    6e:36:56:d2:43:5f:23:b4:52:26:ff:ae:63:4b:33:
                    6e:c8:19:12:f5:aa:c4:86:f0:bc:13:69:a5:80:b2:
                    5c:04:6d:7e:32:10:0f:e9:0a:90:ec:cd:7c:82:01:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:21:95:47:6D:75:76:53:BA:F4:4D:1B:6E:A7:1F:86:AA:27:B0:A2
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/sCGVR211dlO69E0bbqcfhqonsKI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:b8:63:2a:88:a4:c4:05:3c:d2:77:b9:eb:cd:63:16:03:67:
         bc:f6:64:c6:ae:6f:75:db:31:cf:7e:86:99:4d:32:df:db:50:
         87:1b:6b:04:1b:e4:e2:a4:7f:43:15:7a:52:af:90:d0:72:9a:
         94:a0:1b:7e:42:7c:3a:5d:e1:92:b6:12:23:1b:cf:76:11:2e:
         29:c9:d3:66:11:9e:b9:5e:3a:37:91:04:e5:18:7a:e0:cc:8a:
         1d:d1:6f:5f:44:5a:a2:e1:52:34:20:8c:a5:69:4b:35:39:b8:
         26:29:cd:30:8d:91:e4:6d:09:4a:d1:4d:5d:33:49:2f:eb:9a:
         36:e5:b1:9e:c0:75:7c:75:3e:25:b2:2e:76:86:e6:9b:2e:a0:
         cb:a1:2b:4e:69:9f:11:60:b4:ff:0c:9c:f4:14:6d:8d:9f:35:
         5d:2f:4e:c7:d6:23:55:f6:81:88:71:fd:28:5f:1b:a6:92:c1:
         bd:a3:4e:da:29:1e:a3:ea:eb:c8:0a:c2:36:dd:ed:80:c5:dc:
         c8:05:71:59:88:7e:80:44:26:5a:b6:04:2c:b3:53:0f:5c:2b:
         14:a0:9e:a2:6f:23:f8:b9:f9:f6:22:c3:43:71:9f:3c:cd:a0:
         dd:04:9a:8b:c7:ce:9f:80:92:ad:48:e0:52:e4:21:5f:7f:51:
         a6:0a:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:52 2026 by rpki-client