Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/941/1ubv5seAifcupuEDFJLS_JCLHmY.roa
File:                     1ubv5seAifcupuEDFJLS_JCLHmY.roa (raw, json)
Hash identifier:          bsxyDEYXXKuaXCj49B1x+haLTSrYJwKMFrod4qCfxp8=
Subject key identifier:   D6:E6:EF:E6:C7:80:89:F7:2E:A6:E1:03:14:92:D2:FC:90:8B:1E:66
Certificate issuer:       /CN=6E1F0F4AF6B7888826FFEF74D386EB678903ABDD
Certificate serial:       08
Authority key identifier: 6E:1F:0F:4A:F6:B7:88:88:26:FF:EF:74:D3:86:EB:67:89:03:AB:DD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bh8PSva3iIgm_-9004brZ4kDq90.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/1ubv5seAifcupuEDFJLS_JCLHmY.roa
Signing time:             Tue 31 Mar 2026 08:48:43 +0000
ROA not before:           Tue 31 Mar 2026 08:48:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7690
IP address blocks:        123.103.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bh8PSva3iIgm_-9004brZ4kDq90.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1F0F4AF6B7888826FFEF74D386EB678903ABDD
        Validity
            Not Before: Mar 31 08:48:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D6E6EFE6C78089F72EA6E1031492D2FC908B1E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:b3:9d:e1:e3:30:ef:9a:bb:c4:27:16:9f:
                    35:2a:04:ce:34:43:a4:66:c8:77:96:56:f3:53:33:
                    1a:67:7a:e5:b4:3c:50:c5:1e:d6:9e:75:f1:d4:d0:
                    58:a6:9c:32:57:84:97:02:5f:54:fe:c6:c8:3d:2c:
                    5d:c4:68:84:ed:94:00:b8:59:2c:74:1c:8d:fe:72:
                    cd:26:98:26:11:63:31:bd:fe:70:d7:ac:52:54:4c:
                    5c:3e:07:55:fc:bd:33:a3:29:b6:b9:a0:d5:b0:fa:
                    c4:8f:f7:5e:9f:d4:93:f5:e3:5e:a0:78:80:74:4e:
                    81:6c:77:4a:13:1b:b4:2f:10:77:f8:23:c0:53:00:
                    04:0d:4e:dc:4d:cd:4c:0b:71:85:9b:02:3d:19:bc:
                    c8:c9:05:6c:b0:f2:cc:60:f3:50:0c:09:29:07:f5:
                    a1:a1:7f:62:21:c2:ec:31:1e:17:e7:40:a2:89:36:
                    11:ad:aa:48:e1:1c:50:a4:03:cf:d8:da:a5:32:35:
                    61:a0:b0:ad:4c:c3:7f:8d:79:43:15:9a:2d:03:88:
                    aa:d0:0f:7d:89:f9:46:c3:74:fa:9b:32:7f:5a:55:
                    0f:84:9c:09:95:f7:b4:46:57:e5:22:5d:53:c0:14:
                    a4:35:d1:27:f5:36:5c:2d:e2:01:18:e3:1a:ff:2d:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E6:EF:E6:C7:80:89:F7:2E:A6:E1:03:14:92:D2:FC:90:8B:1E:66
            X509v3 Authority Key Identifier:
                keyid:6E:1F:0F:4A:F6:B7:88:88:26:FF:EF:74:D3:86:EB:67:89:03:AB:DD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/bh8PSva3iIgm_-9004brZ4kDq90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bh8PSva3iIgm_-9004brZ4kDq90.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/941/1ubv5seAifcupuEDFJLS_JCLHmY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.103.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:44:9a:74:37:18:38:99:59:40:2a:88:28:b4:a3:94:ec:82:
         69:e6:75:44:ae:84:34:01:60:0d:ef:47:1a:66:13:46:43:a8:
         a5:55:0f:bc:31:6f:88:98:d5:2b:10:86:35:ef:9f:67:da:00:
         66:f0:bc:1d:85:26:2c:4f:69:a7:25:7f:d7:bc:8f:59:ad:1c:
         bf:ad:4e:6c:3a:23:ab:3b:8d:d2:20:37:93:82:8e:e5:2a:4f:
         93:52:42:c8:02:09:f0:8b:b1:70:4c:3b:1c:10:76:b6:b0:61:
         b4:9a:35:69:5d:49:d2:20:bc:cf:75:ec:81:63:03:57:cc:32:
         c6:77:ad:b6:c3:dc:ef:7c:cb:5c:48:51:83:3b:48:5f:4e:95:
         b6:d0:31:30:5b:ab:66:41:98:cf:3b:81:7c:f5:8b:7e:2f:3e:
         4a:75:f5:a9:16:79:68:16:83:7b:4a:e0:a8:56:f6:ce:cf:ac:
         b0:27:df:ba:05:76:d6:bc:8d:fd:e2:7c:57:9a:36:c9:50:1d:
         31:c7:21:2f:6c:d7:e1:0d:17:e4:60:84:ff:6c:ae:f7:7c:88:
         70:a7:a3:83:85:38:b6:c6:ae:1c:2b:bb:33:b9:15:9c:c3:51:
         70:33:2a:65:d4:08:ca:7b:20:fa:ac:91:8f:15:6d:e9:5a:a0:
         36:dd:4f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:56 2026 by rpki-client