Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/955/hTWaug2zVyH6V1g-Hx2lGrA9CU0.roa
File:                     hTWaug2zVyH6V1g-Hx2lGrA9CU0.roa (raw, json)
Hash identifier:          5FCwVo/Kc3+1w6lf0bBfSNkFl7jeCdHLTyCs0wBaTW4=
Subject key identifier:   85:35:9A:BA:0D:B3:57:21:FA:57:58:3E:1F:1D:A5:1A:B0:3D:09:4D
Certificate issuer:       /CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Certificate serial:       4E
Authority key identifier: 0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/hTWaug2zVyH6V1g-Hx2lGrA9CU0.roa
Signing time:             Tue 31 Mar 2026 08:15:28 +0000
ROA not before:           Tue 31 Mar 2026 08:15:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55385
IP address blocks:        119.47.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
        Validity
            Not Before: Mar 31 08:15:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=85359ABA0DB35721FA57583E1F1DA51AB03D094D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:69:50:96:ad:b2:32:de:c0:a5:ad:65:00:
                    96:fb:cc:a6:c3:a3:6f:ac:04:aa:26:3d:66:bc:08:
                    26:f1:ed:04:e9:9d:94:78:b4:0b:f9:4d:51:f6:f0:
                    47:33:72:a1:f6:53:55:51:bd:b4:c8:83:f1:c8:a9:
                    06:10:5f:f7:ff:5a:4c:ad:f4:68:67:f1:08:42:56:
                    b2:01:c3:e3:8f:c9:2c:04:60:81:09:69:38:64:35:
                    c8:e2:e0:f3:82:3f:ff:4e:83:60:24:5c:a7:50:18:
                    dd:1d:31:42:c2:c4:ab:75:e2:ac:4d:fa:17:88:77:
                    97:51:cd:7c:84:33:a4:ef:9d:b9:26:2e:28:84:4d:
                    64:8a:ad:97:86:7f:69:8e:9d:65:d6:de:7c:3b:f9:
                    29:a1:20:32:cc:29:3f:99:cf:fb:6c:a3:ad:ab:93:
                    ac:d4:17:db:dc:30:48:fa:cf:1a:33:89:d1:4e:8b:
                    9e:f5:39:df:19:13:35:7f:c3:f5:0c:67:2f:05:04:
                    66:bd:97:80:14:95:9e:fb:1f:e9:e6:3e:57:6d:08:
                    42:ea:87:6f:05:68:85:10:e8:a2:d0:51:9a:8b:02:
                    39:82:77:0c:5e:e6:35:98:e4:61:d2:11:a5:24:57:
                    05:75:54:f3:86:cc:ba:3f:bd:8e:91:81:68:1e:83:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:35:9A:BA:0D:B3:57:21:FA:57:58:3E:1F:1D:A5:1A:B0:3D:09:4D
            X509v3 Authority Key Identifier:
                keyid:0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/hTWaug2zVyH6V1g-Hx2lGrA9CU0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:04:2e:d4:8e:9d:78:64:6c:0a:bd:48:b8:69:40:ce:2b:52:
         2f:1f:90:5e:74:58:26:34:1f:74:80:69:a4:70:5b:79:50:c2:
         28:7a:dd:64:2b:17:76:e5:96:9b:ea:35:a0:b4:2b:67:12:e0:
         74:16:15:5f:1c:02:20:bb:3d:71:75:62:6c:d7:86:f2:c5:f0:
         34:f2:b5:4f:06:36:c8:5f:8d:2e:70:89:fe:55:1b:75:76:ce:
         77:bd:74:24:36:be:0a:31:b4:20:08:ac:5d:26:5d:ea:85:3b:
         e0:c5:72:36:fb:c8:72:65:e0:4f:7f:79:12:ab:4a:d2:cf:b8:
         61:26:58:9c:90:8e:6c:ab:23:f9:05:c1:14:25:0c:63:55:7b:
         f5:78:a0:eb:6a:90:8c:1b:ad:88:5e:26:5a:7c:b2:b8:1f:f4:
         57:ce:df:84:2a:37:1c:c5:94:ae:8b:ec:34:b3:ed:bc:a3:e1:
         4d:91:ab:21:aa:a7:37:93:e2:3d:53:17:51:97:36:ce:a3:61:
         39:63:72:f7:be:bc:54:c4:21:bc:c7:97:c9:d3:da:61:1b:2b:
         fa:b1:40:d6:e6:23:47:b6:a2:c4:f4:c5:93:7f:6d:21:97:76:
         99:8a:31:b7:44:85:35:74:32:0e:a1:92:dc:2c:56:fa:37:31:
         18:88:01:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:48 2026 by rpki-client