Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/941/1OXeXwn8VqDmTjufCuNSpw5QVfY.roa
File:                     1OXeXwn8VqDmTjufCuNSpw5QVfY.roa (raw, json)
Hash identifier:          L9Y7suZHlXfOEORFN6Z6qiDlcO6OCCFkkA5UpvpnKJ0=
Subject key identifier:   D4:E5:DE:5F:09:FC:56:A0:E6:4E:3B:9F:0A:E3:52:A7:0E:50:55:F6
Certificate issuer:       /CN=6E1F0F4AF6B7888826FFEF74D386EB678903ABDD
Certificate serial:       09
Authority key identifier: 6E:1F:0F:4A:F6:B7:88:88:26:FF:EF:74:D3:86:EB:67:89:03:AB:DD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bh8PSva3iIgm_-9004brZ4kDq90.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/1OXeXwn8VqDmTjufCuNSpw5QVfY.roa
Signing time:             Tue 31 Mar 2026 08:48:44 +0000
ROA not before:           Tue 31 Mar 2026 08:48:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7690
IP address blocks:        123.103.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bh8PSva3iIgm_-9004brZ4kDq90.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1F0F4AF6B7888826FFEF74D386EB678903ABDD
        Validity
            Not Before: Mar 31 08:48:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D4E5DE5F09FC56A0E64E3B9F0AE352A70E5055F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:74:8a:f2:e3:b0:f5:12:84:6d:94:2d:cf:
                    e0:bd:84:18:73:2e:2a:a7:9c:30:b1:10:3e:c4:95:
                    19:c7:b4:0b:fb:62:45:68:29:d0:76:43:05:ad:55:
                    f8:ec:39:ec:88:af:f2:03:ed:6d:59:18:3a:52:18:
                    b0:e6:8d:71:98:6d:40:56:7e:63:13:7b:30:01:65:
                    d8:7c:ae:93:15:ad:94:0e:06:58:d8:b3:b6:ce:8c:
                    0d:2e:8d:e7:08:3c:69:87:2c:f5:ce:c9:cc:77:ec:
                    ca:5a:59:b6:e5:d1:e3:39:d2:4c:b8:ed:ff:7a:2d:
                    61:28:5a:5c:cf:d1:d0:60:dc:92:98:bf:6a:f8:5e:
                    27:60:fc:c8:00:7d:c0:80:93:43:a1:5e:cf:a6:7b:
                    57:7b:e2:56:06:c9:30:f8:c7:e6:79:97:e7:67:b9:
                    87:90:b3:31:97:03:2d:e3:5d:51:9a:2f:62:01:69:
                    71:f6:0e:76:f8:59:1c:88:99:a4:b2:f1:1a:c0:9e:
                    85:54:22:29:71:0e:0a:b7:50:de:e4:05:1b:cc:35:
                    99:9f:c8:a3:c9:cc:91:92:b9:75:45:3c:66:89:93:
                    2c:73:1a:1b:d7:9a:77:b3:e9:87:34:ca:68:63:a5:
                    ec:ba:fa:bc:32:03:97:89:41:46:55:11:38:e9:ef:
                    0e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E5:DE:5F:09:FC:56:A0:E6:4E:3B:9F:0A:E3:52:A7:0E:50:55:F6
            X509v3 Authority Key Identifier:
                keyid:6E:1F:0F:4A:F6:B7:88:88:26:FF:EF:74:D3:86:EB:67:89:03:AB:DD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bh8PSva3iIgm_-9004brZ4kDq90.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/1OXeXwn8VqDmTjufCuNSpw5QVfY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.103.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:da:83:7f:b3:c6:66:88:db:8a:fd:1c:c7:9b:d8:98:5d:
         91:bf:a8:36:47:6e:11:5a:20:86:eb:4d:22:12:49:d5:03:58:
         2e:b3:24:9f:16:30:ac:a3:3a:bd:86:be:81:77:ce:d5:05:37:
         d5:53:f2:ab:77:b4:f8:01:23:60:9a:51:d8:74:9b:a2:07:2c:
         ae:e6:b6:71:fb:c6:80:65:0e:e8:b4:e1:70:7f:55:8d:8f:9b:
         43:07:75:cd:1f:bf:85:62:c6:b9:0c:3c:3b:8a:b2:22:89:a6:
         35:21:68:b9:c3:b5:ae:f7:4e:5c:3e:c8:0d:4b:18:13:4e:dc:
         ce:01:ac:df:98:7d:80:41:86:5c:18:5c:b0:12:e4:dc:83:6a:
         89:37:b1:1b:2b:75:1d:c6:fd:12:3a:52:d1:47:55:5b:89:27:
         80:52:73:1a:71:71:da:b6:0d:81:ad:67:18:b0:ee:86:c5:ac:
         a7:8a:ac:ec:fc:b1:fa:af:1f:31:c5:1d:25:c6:17:ad:50:7b:
         73:32:89:2e:f2:c8:45:c1:1d:c3:92:ff:80:9c:62:b2:68:83:
         3a:1b:88:3d:79:ea:d7:6c:23:c8:d0:2f:51:8b:0b:81:84:b0:
         69:e6:be:36:24:fc:fc:31:e1:6b:50:67:fb:bf:82:68:87:2d:
         ca:ac:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:56 2026 by rpki-client