Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/QJHFhuCiV4iS_84OYwjw_Skgtpw.roa
File:                     QJHFhuCiV4iS_84OYwjw_Skgtpw.roa (raw, json)
Hash identifier:          0TT7Kw4NvNs1lP57tfIjQxRHLKDWp6S3/sRf5uXFYkc=
Subject key identifier:   40:91:C5:86:E0:A2:57:88:92:FF:CE:0E:63:08:F0:FD:29:20:B6:9C
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       8E
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/QJHFhuCiV4iS_84OYwjw_Skgtpw.roa
Signing time:             Tue 31 Mar 2026 07:37:50 +0000
ROA not before:           Tue 31 Mar 2026 07:37:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     37892
IP address blocks:        124.247.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: Mar 31 07:37:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4091C586E0A2578892FFCE0E6308F0FD2920B69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:91:42:e4:10:f3:dc:1d:9c:80:05:1a:fa:
                    9c:2f:24:33:e8:e8:bd:f0:30:73:10:78:a9:b2:10:
                    40:88:15:a5:c5:7f:5d:df:09:63:05:84:60:25:eb:
                    9b:f0:f7:f2:cb:65:e5:26:71:92:e0:a7:65:9e:89:
                    43:c4:c1:0d:da:96:22:b7:75:5c:81:ee:04:7b:5f:
                    46:4a:dd:8c:ec:c9:bb:ba:3f:0b:4d:8b:f5:db:20:
                    6f:ef:b7:ae:c2:f5:a8:13:da:4c:b5:94:f6:1b:6c:
                    43:23:c0:da:b8:92:bf:56:2b:d2:2b:12:06:3c:ec:
                    ad:40:4e:b9:81:7e:be:82:a9:91:f5:06:28:66:98:
                    bf:da:02:6c:1b:cb:63:ce:90:69:31:e7:17:3b:15:
                    bf:d8:a2:6a:f4:bf:d6:fd:cb:d6:62:01:82:88:10:
                    20:a9:19:68:0b:db:f0:37:9d:4b:83:1b:97:8c:7d:
                    63:1e:fc:56:f8:b5:71:40:71:d2:8e:dc:34:88:bd:
                    9b:12:44:96:3d:25:46:d3:e0:27:47:87:e3:83:6a:
                    84:52:96:be:71:50:22:a9:29:12:73:a3:16:8c:d8:
                    b0:a8:85:be:86:86:40:6c:dd:e4:de:ff:da:b2:11:
                    45:f5:14:d3:f6:c7:d6:d3:56:e3:a8:fb:f4:c2:1c:
                    6d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:91:C5:86:E0:A2:57:88:92:FF:CE:0E:63:08:F0:FD:29:20:B6:9C
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/QJHFhuCiV4iS_84OYwjw_Skgtpw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.247.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d0:c9:9e:9f:74:fc:9e:bc:16:d3:ab:09:28:f5:76:8d:ad:29:
         cd:ac:0b:6c:c9:a4:3f:12:1d:44:7d:e7:ec:c4:c3:2b:63:89:
         b0:82:25:df:64:8d:39:b9:bd:ca:f8:57:e5:44:4e:25:2d:53:
         66:94:03:b3:ad:69:e2:44:42:dc:ed:ec:0b:30:05:ca:8b:20:
         59:eb:6b:31:ce:99:8d:2c:45:a9:b9:4b:f3:d8:87:21:32:fb:
         df:8c:18:5d:01:e1:ec:a3:ad:02:17:da:cd:cb:d0:cc:08:4b:
         23:46:88:d1:d5:fc:00:4c:aa:9e:14:1b:c1:26:7b:ca:c2:74:
         23:5b:2f:29:57:c9:cd:23:91:ec:4c:d8:6e:1c:df:7e:75:64:
         8a:74:b5:1c:01:ee:44:15:65:57:a4:03:dd:5a:d8:12:00:0f:
         30:a7:57:0b:36:82:d4:e9:c0:d2:af:92:0b:01:b2:8d:ad:57:
         9d:d6:58:56:b9:c0:7f:21:27:5e:43:b8:77:5d:78:eb:54:17:
         1d:36:00:e2:7c:b4:ad:7c:20:4e:ab:1f:64:47:b7:55:52:f2:
         38:c2:34:9b:ad:12:5b:d3:0e:6f:7b:41:3f:7a:64:6b:39:43:
         1f:02:3e:31:e3:b8:32:7a:2e:0c:bd:5e:e6:9f:a3:6a:34:ff:
         41:e8:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:41 2026 by rpki-client