Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/qtBLIf4fQ9dZDDQChW-_AFplLQg.roa
File:                     qtBLIf4fQ9dZDDQChW-_AFplLQg.roa (raw, json)
Hash identifier:          1PTsdUVfEyvA10hrOLRZ+yNXrDPcyTuAfUWVB8rL5oU=
Subject key identifier:   AA:D0:4B:21:FE:1F:43:D7:59:0C:34:02:85:6F:BF:00:5A:65:2D:08
Certificate issuer:       /CN=989E82672C98A627120ABA72DEBEBE22015849A0
Certificate serial:       31
Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/qtBLIf4fQ9dZDDQChW-_AFplLQg.roa
Signing time:             Tue 31 Mar 2026 08:35:27 +0000
ROA not before:           Tue 31 Mar 2026 08:35:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        113.197.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0
        Validity
            Not Before: Mar 31 08:35:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AAD04B21FE1F43D7590C3402856FBF005A652D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:55:53:f0:23:93:04:0b:b5:f8:22:85:dc:
                    02:cf:01:a4:14:66:59:d9:71:07:6c:33:9e:ea:f5:
                    0f:f0:ab:2d:04:b9:93:18:ff:fb:8e:ea:73:55:11:
                    3d:ef:66:f9:c4:00:7e:24:ef:68:db:a1:9c:8f:85:
                    90:43:42:c1:7a:6d:38:72:c7:28:aa:0f:25:8e:dc:
                    ba:d9:c9:b3:85:a1:91:55:f1:db:32:2e:23:98:90:
                    ce:c1:15:49:fa:d0:23:d1:af:45:c6:4a:31:af:5c:
                    88:d2:9d:99:7e:6d:cd:fc:10:59:8b:66:14:b5:9b:
                    c7:ab:2b:43:98:34:67:aa:13:a8:52:44:d2:cd:ca:
                    84:ae:09:79:d0:21:48:55:f3:b2:02:fa:6f:bb:20:
                    e8:ea:e0:74:d8:76:a8:bb:62:8d:2c:de:54:a3:92:
                    b3:7c:51:d7:04:7c:df:5d:15:1f:f2:1a:c6:e8:e6:
                    a0:18:f8:4d:d6:fc:a5:3c:c2:47:fb:56:8f:21:62:
                    01:19:ab:af:0c:50:48:27:c7:bf:e6:af:2e:77:4a:
                    d3:46:c8:4f:37:f7:d2:94:8b:80:37:d1:e3:90:c1:
                    d8:e1:a1:84:62:6d:2c:df:c6:35:f4:46:11:10:94:
                    14:41:ab:bb:c4:08:4e:80:52:37:b8:88:ce:13:40:
                    a4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D0:4B:21:FE:1F:43:D7:59:0C:34:02:85:6F:BF:00:5A:65:2D:08
            X509v3 Authority Key Identifier:
                keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/qtBLIf4fQ9dZDDQChW-_AFplLQg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d7:fc:bf:e7:73:99:42:fb:2e:49:11:a6:dc:dd:88:2b:73:88:
         1f:fa:fe:b9:0a:95:59:47:a5:79:48:63:50:08:c6:cf:90:cb:
         d5:93:3d:d0:b3:7d:03:6a:b9:bb:f5:08:32:57:d8:b4:48:a0:
         48:fd:af:09:05:62:e9:de:71:bf:ae:e6:6c:7f:57:36:29:03:
         ff:77:d9:7c:6e:d0:66:94:95:1e:d5:0e:31:79:a5:9b:ea:0e:
         7e:53:f6:17:08:f3:de:f9:6d:27:5f:10:68:1e:ba:8d:cb:39:
         c3:9c:77:84:43:06:92:e9:55:7c:34:e3:3f:dc:d2:c9:46:6f:
         dc:b6:c1:93:39:81:0b:08:25:82:aa:db:43:af:c2:08:63:c3:
         a3:60:3b:22:75:9d:08:71:62:e9:fb:94:88:76:df:a8:e3:3e:
         32:52:37:d8:14:89:25:54:c9:f1:76:36:92:43:f5:bf:80:3e:
         7f:63:93:75:93:f0:a4:54:1e:3e:a6:8c:13:6e:f4:43:47:80:
         64:da:52:a6:61:c9:e2:6d:87:ea:f7:80:a8:5e:4a:99:b1:e8:
         ac:98:3e:2f:2e:2e:fd:9b:99:2a:c7:fb:2b:75:60:ae:97:19:
         a7:d0:6f:4b:8b:79:68:3c:4c:3b:56:9b:1d:6f:19:f5:1a:30:
         b3:60:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:50 2026 by rpki-client