Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/dXzvRFW8Vmkvx68BmGbWFmzmCOo.roa
File:                     dXzvRFW8Vmkvx68BmGbWFmzmCOo.roa (raw, json)
Hash identifier:          EgA29+e+DMY+FVEY8DrU6IjNISGH02ylBXJoekHEW0o=
Subject key identifier:   75:7C:EF:44:55:BC:56:69:2F:C7:AF:01:98:66:D6:16:6C:E6:08:EA
Certificate issuer:       /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial:       59
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/dXzvRFW8Vmkvx68BmGbWFmzmCOo.roa
Signing time:             Tue 31 Mar 2026 08:24:08 +0000
ROA not before:           Tue 31 Mar 2026 08:24:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38628
IP address blocks:        115.84.184.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 13:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
        Validity
            Not Before: Mar 31 08:24:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=757CEF4455BC56692FC7AF019866D6166CE608EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:28:4b:85:99:ea:00:3e:b7:46:7a:83:49:
                    aa:6f:b6:4e:00:d3:c4:16:98:91:45:02:86:5b:30:
                    98:61:c0:30:23:9b:8b:f7:b0:39:f5:bb:89:e4:78:
                    6c:7b:34:70:45:82:7d:ea:07:c2:4e:eb:9a:00:7f:
                    16:02:57:32:b3:84:e9:21:20:e5:55:4a:c7:c6:ed:
                    e0:8b:a2:ef:8d:04:f4:b5:43:78:a1:f3:c0:37:d5:
                    51:56:35:76:a0:3c:6f:bd:f8:b2:61:c6:96:7e:25:
                    6d:80:cc:ee:76:b7:92:0d:94:a2:50:da:e5:d0:e6:
                    ea:fe:95:3f:c1:d4:68:49:42:d3:25:79:c0:4c:e4:
                    d7:f7:80:e7:9f:3c:6e:7d:b3:d1:62:8a:03:d9:08:
                    ad:a9:cb:89:a7:aa:66:33:0e:bc:40:c6:c2:2f:b1:
                    e5:10:43:ec:ba:39:d1:38:1f:65:0d:d4:d2:f3:ff:
                    0a:9b:39:f8:85:15:b3:62:15:b9:69:99:29:12:a0:
                    b8:c8:63:96:15:f7:e0:d1:f6:40:1b:87:e8:25:7d:
                    1a:9a:ad:cc:13:f2:fb:62:61:45:37:a6:f5:01:d6:
                    35:50:c9:66:54:de:d4:bf:dc:4a:a3:e1:63:66:88:
                    4a:b3:48:86:85:bd:41:6e:46:48:ec:1d:a9:d5:47:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7C:EF:44:55:BC:56:69:2F:C7:AF:01:98:66:D6:16:6C:E6:08:EA
            X509v3 Authority Key Identifier:
                keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/dXzvRFW8Vmkvx68BmGbWFmzmCOo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.84.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:51:a8:97:81:d8:27:5c:e8:5a:01:57:2b:c8:18:ff:29:7e:
         6f:f0:6d:dc:1b:4f:ab:3c:57:c8:0b:60:11:a0:72:ef:60:71:
         4f:54:e8:db:83:76:b1:63:aa:2f:e6:bf:b7:3b:ab:cc:5e:f0:
         1b:1a:bc:ce:0e:76:f8:08:eb:0b:34:ed:f2:5a:82:2f:43:a1:
         bb:5e:4b:67:da:aa:32:9f:85:30:29:4a:d8:93:bd:b4:15:6d:
         a5:82:02:1f:6f:ce:10:73:e4:c2:2c:d0:83:65:40:a2:9f:09:
         4e:4d:ee:c0:90:5c:02:1b:2f:23:f3:04:04:e6:25:96:dd:f0:
         b4:8a:cc:40:d0:8f:c5:42:e4:e1:6f:cd:93:2e:52:2f:3f:0c:
         c9:a3:a7:f2:03:2c:5a:aa:fc:4d:8e:c9:bd:88:de:14:fa:3e:
         28:5b:34:66:31:09:32:4a:a4:92:14:7d:fa:88:cf:e2:16:d7:
         2c:1d:f7:5f:48:ad:d5:6f:41:2d:9f:a1:ce:25:af:a8:c3:33:
         9b:31:17:50:12:00:e6:9a:c2:ac:b0:c0:51:36:09:74:dc:5b:
         38:a3:4f:ca:aa:72:74:30:d0:94:ac:cb:fb:e8:be:e2:4a:2f:
         1e:80:0a:37:fa:05:28:de:6f:7e:d5:7e:d6:0a:f1:ba:45:29:
         08:89:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:56 2026 by rpki-client