Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/977/XnHA30ocr8FDZSwa2RcozvANlls.roa
File:                     XnHA30ocr8FDZSwa2RcozvANlls.roa (raw, json)
Hash identifier:          WWI6yHt4XH5pYJVGl8YHefMlpbzofN6a6fA7jAjkmvU=
Subject key identifier:   5E:71:C0:DF:4A:1C:AF:C1:43:65:2C:1A:D9:17:28:CE:F0:0D:96:5B
Certificate issuer:       /CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
Certificate serial:       3B
Authority key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/XnHA30ocr8FDZSwa2RcozvANlls.roa
Signing time:             Tue 31 Mar 2026 08:34:27 +0000
ROA not before:           Tue 31 Mar 2026 08:34:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23784
IP address blocks:        202.67.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
        Validity
            Not Before: Mar 31 08:34:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5E71C0DF4A1CAFC143652C1AD91728CEF00D965B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:97:82:03:e9:52:ac:48:4d:d7:e4:ea:19:f0:
                    be:27:fa:82:41:a9:35:3c:b7:53:04:db:ac:70:52:
                    4f:87:17:8d:08:2a:01:af:13:ea:3a:9d:ea:d0:d8:
                    c7:98:af:21:08:db:33:63:99:be:77:8d:79:44:28:
                    93:07:5c:c7:13:88:ea:66:35:21:ff:0e:c7:67:d7:
                    b7:c7:be:1f:df:23:61:08:5c:3b:02:3f:e2:e8:f5:
                    82:30:d4:1f:51:60:78:3e:f2:b4:80:6b:e9:d6:8e:
                    d8:54:62:66:8d:50:d4:d7:05:3d:27:ff:d1:33:0e:
                    0a:e1:23:39:3e:eb:a3:9e:86:3d:1e:10:c5:84:76:
                    24:73:98:b5:e8:47:67:b1:06:6e:f2:26:da:c3:53:
                    d6:41:81:14:d8:84:bb:20:df:66:96:0a:71:4c:da:
                    2f:9b:1a:de:84:30:7a:de:12:5f:d1:03:c5:67:bf:
                    50:83:eb:cc:74:46:e5:2e:d2:5c:0a:94:7e:d3:0e:
                    da:84:36:ea:3d:47:c8:94:8f:7d:2c:30:5d:98:4d:
                    d5:5e:e9:d7:81:db:39:c1:79:9f:01:dd:57:7c:a7:
                    e5:af:b6:6c:67:42:60:85:3a:4c:4f:d3:0b:e7:9e:
                    c5:e0:d0:2b:69:a3:be:53:74:93:5b:3f:0f:02:0f:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:71:C0:DF:4A:1C:AF:C1:43:65:2C:1A:D9:17:28:CE:F0:0D:96:5B
            X509v3 Authority Key Identifier:
                keyid:BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/XnHA30ocr8FDZSwa2RcozvANlls.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.67.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:fa:d4:c2:05:f6:55:3f:97:5d:69:52:13:8b:ca:c7:d7:05:
         f1:dd:85:84:91:79:48:04:bc:c3:55:e9:fe:0c:bc:77:08:bd:
         e2:2a:c8:28:9d:54:76:20:63:b7:a0:1b:42:23:bf:9f:6b:87:
         bc:4a:d6:18:bc:36:0b:fd:77:a2:40:fc:a0:ae:19:e3:26:35:
         c9:ad:e1:0d:4e:f2:d0:5e:04:ff:5d:63:9a:7c:2d:ec:28:94:
         f4:93:f8:2a:87:f8:bc:cd:20:f8:36:5f:7e:67:ff:a9:9d:a8:
         f9:bf:43:6e:84:a5:25:8b:eb:ed:98:5b:dc:f9:ba:b2:65:bf:
         bc:66:53:78:d0:01:0c:7d:c6:e7:c9:de:de:36:cf:40:fb:02:
         2f:4c:8e:d5:32:91:43:f1:e3:8b:67:9c:68:ad:7b:75:17:59:
         c4:c5:a5:3a:60:7e:35:ba:a1:c0:ef:d3:f6:43:6e:f6:64:b2:
         77:3c:72:0f:6a:81:1a:27:d9:88:16:26:9d:f3:04:1b:4c:31:
         a8:3e:ed:cd:25:86:85:16:96:83:0f:62:55:c6:59:2e:a6:10:
         ad:4b:02:1b:4b:c1:3e:07:d8:bf:e1:bb:82:86:5f:0b:0d:28:
         0e:a1:4d:fa:5f:b1:51:08:8a:6e:c8:ba:7e:98:b8:5b:53:e7:
         e5:01:20:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:48 2026 by rpki-client