Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/c2MCU0tW7ofBBpGe5Obrr2jqIMs.roa
File:                     c2MCU0tW7ofBBpGe5Obrr2jqIMs.roa (raw, json)
Hash identifier:          oFiLCkzyx/U5+sAl7DZ5NbnDlFeYEw0beFm8dU6GcLE=
Subject key identifier:   73:63:02:53:4B:56:EE:87:C1:06:91:9E:E4:E6:EB:AF:68:EA:20:CB
Certificate issuer:       /CN=989E82672C98A627120ABA72DEBEBE22015849A0
Certificate serial:       33
Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/c2MCU0tW7ofBBpGe5Obrr2jqIMs.roa
Signing time:             Tue 31 Mar 2026 08:35:28 +0000
ROA not before:           Tue 31 Mar 2026 08:35:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        180.92.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0
        Validity
            Not Before: Mar 31 08:35:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=736302534B56EE87C106919EE4E6EBAF68EA20CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:53:e7:e2:ac:3c:a8:8d:92:42:59:f5:08:
                    7e:ff:3b:65:d2:37:27:99:f1:29:c7:3a:bc:12:04:
                    42:d1:3a:31:b5:3d:57:47:ae:f7:44:7e:ee:5f:57:
                    fe:86:6a:0f:ca:12:19:e8:8c:f0:69:e4:57:9d:cb:
                    9a:4c:1c:e7:df:fc:85:a2:f0:01:a9:4d:7d:42:45:
                    c7:62:3b:3a:d4:23:4e:10:c3:0b:39:c8:3f:29:cc:
                    f1:14:d3:6a:04:3d:67:ef:9e:a9:01:59:a6:45:af:
                    37:52:cb:16:1f:8d:02:14:44:d1:18:72:77:66:e9:
                    1a:4e:f9:df:fc:b0:b9:84:05:a8:1e:98:f9:65:2c:
                    bf:b5:74:07:2f:1a:2d:53:3a:5b:82:b4:46:e4:23:
                    3f:17:29:a0:92:c8:b4:92:1c:71:3a:4d:07:c1:30:
                    43:84:62:1c:f7:8e:f4:95:4f:75:4d:9c:ea:f4:1e:
                    9f:5a:e7:c3:8b:06:62:33:54:c2:f8:6a:fb:d6:f8:
                    c8:b5:6d:a0:68:04:58:8b:16:db:30:38:e7:5a:91:
                    d7:69:33:b4:cf:43:08:f6:1e:ee:02:4c:69:e6:2d:
                    97:49:68:be:4d:fb:98:0d:d7:5f:7b:cc:3c:9f:29:
                    a2:d6:34:7c:07:0b:e0:6e:86:0a:5c:5b:64:df:6f:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:63:02:53:4B:56:EE:87:C1:06:91:9E:E4:E6:EB:AF:68:EA:20:CB
            X509v3 Authority Key Identifier:
                keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/c2MCU0tW7ofBBpGe5Obrr2jqIMs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.92.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:4d:47:11:d4:ee:fc:dd:b1:e5:c2:d9:81:10:53:fb:be:a4:
         e6:46:68:cc:a9:ba:a7:95:23:3a:95:ce:e7:09:c6:f5:a8:24:
         e0:8a:a8:ef:9e:ea:c0:5b:be:ae:a7:21:8b:85:cf:cc:66:d6:
         6a:56:80:72:e2:32:7f:d9:66:c1:84:9c:26:89:89:b1:d3:f8:
         55:b0:40:d8:e6:1c:64:5d:c3:39:f3:2b:17:1d:22:61:42:e8:
         6e:8b:8a:24:45:97:3e:86:59:31:f4:b3:9b:55:b4:4d:07:dd:
         7a:cf:a6:f5:aa:78:bb:8b:c5:bb:eb:84:ac:8e:c5:ea:e7:97:
         c7:23:5a:c2:76:ea:a9:2d:85:10:6d:1f:33:78:b7:16:6d:bb:
         e5:17:29:57:24:f7:45:b2:d6:0c:f9:f0:c1:be:18:c5:43:e2:
         59:e7:d1:0c:45:2d:9b:e3:49:99:22:0d:e8:09:2b:db:3f:4f:
         2e:8c:ed:97:1c:3a:ba:bb:4d:67:ab:9e:90:97:77:0f:cc:f6:
         b7:ab:18:61:96:d2:b8:2a:9b:de:84:f9:76:a8:b8:62:71:13:
         99:f5:04:0a:73:0b:b5:2a:82:d1:6e:ca:ab:08:2f:f9:71:3c:
         d6:ea:ac:9c:81:33:6b:1c:ab:30:4c:dd:18:b7:76:95:41:10:
         d4:e1:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:57 2026 by rpki-client