Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/OHn0dDrgTKSQTBa6w1hpLZX0zCs.roa
File:                     OHn0dDrgTKSQTBa6w1hpLZX0zCs.roa (raw, json)
Hash identifier:          h91vrOIkLmqmz474HrFrFnHmTGm+u9OYzEimi3VKMKc=
Subject key identifier:   38:79:F4:74:3A:E0:4C:A4:90:4C:16:BA:C3:58:69:2D:95:F4:CC:2B
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       72
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/OHn0dDrgTKSQTBa6w1hpLZX0zCs.roa
Signing time:             Tue 31 Mar 2026 07:33:19 +0000
ROA not before:           Tue 31 Mar 2026 07:33:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131971
IP address blocks:        202.1.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Mar 31 07:33:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3879F4743AE04CA4904C16BAC358692D95F4CC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:36:a8:7a:e8:dd:fa:fb:b9:c7:a5:c3:e9:
                    23:fd:5a:f4:fd:5a:c3:e0:0d:45:7c:a6:25:6b:55:
                    63:2a:d0:42:cf:af:0d:19:74:e1:21:52:76:28:69:
                    8c:d5:6b:bc:76:b0:b0:5a:fd:d5:8b:9c:8f:ac:97:
                    4b:02:1a:89:97:fa:6f:d4:05:77:e4:c7:db:e3:4c:
                    de:68:06:37:49:b3:cf:70:ed:6c:15:59:02:08:a5:
                    d8:39:3a:92:3d:1e:71:40:7f:70:11:2e:bb:84:5d:
                    a9:19:8a:8a:57:0a:9c:e5:bf:59:a3:bb:fc:1d:90:
                    e4:4f:b8:cc:51:4e:17:6e:61:3f:8e:f4:fb:72:19:
                    33:97:14:85:3c:72:23:24:d7:2d:68:c5:db:cb:30:
                    24:df:7a:38:75:8b:8c:5b:19:1a:c3:c0:1e:5d:3d:
                    b0:e4:ae:f3:64:cf:7c:20:7a:59:4f:13:0f:96:f2:
                    f5:3e:41:f2:4f:09:e3:d0:dd:1b:bf:b5:0c:48:5a:
                    8f:3d:5c:69:9b:7e:f1:bd:fe:0a:56:56:04:b1:dd:
                    58:4a:ee:76:b8:34:2f:08:6b:ad:4e:e3:10:c9:37:
                    e9:5e:48:74:c3:ec:a9:0d:77:66:a9:7a:4c:02:22:
                    ca:b6:1d:6d:1e:f8:b7:19:04:ec:c9:27:82:b5:2d:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:79:F4:74:3A:E0:4C:A4:90:4C:16:BA:C3:58:69:2D:95:F4:CC:2B
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/OHn0dDrgTKSQTBa6w1hpLZX0zCs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:91:00:bf:77:ab:85:f1:87:26:3d:84:f2:0b:f8:6f:59:ff:
         7b:6d:b5:32:cd:df:a9:b6:3c:a3:c5:70:a3:92:50:6e:63:63:
         e3:23:de:81:52:36:7d:ca:8b:42:f9:8f:ad:65:0b:64:93:6d:
         8d:5f:05:96:39:fa:da:4d:af:d9:9c:60:6e:a7:98:53:a1:30:
         ed:fb:80:2f:42:c8:ac:25:9d:10:88:17:cb:1c:77:b4:3e:4c:
         a7:6f:86:0d:8f:de:c7:b8:6d:26:0c:ee:1b:2f:3e:19:91:fd:
         2c:4e:ab:b4:05:ac:97:c3:e4:1d:1c:fa:3a:04:23:9e:fd:a1:
         ae:2c:14:b8:ff:b2:bd:89:08:f7:e1:d6:5b:f7:cc:89:b1:25:
         ed:31:ab:1e:6d:fd:2f:62:2d:56:b9:9c:4c:fc:d6:bc:70:e6:
         80:aa:29:1a:f0:8b:25:3e:c1:5f:db:fe:95:ab:a8:97:a4:ee:
         24:7b:25:f6:8d:93:db:c0:7c:20:31:d0:c5:69:9c:1e:bd:7c:
         e7:ce:7a:0c:36:ef:39:a0:5a:20:45:d4:84:02:2b:66:64:2c:
         dc:ea:29:a0:50:39:63:d8:2f:ee:07:ba:fe:5b:13:15:75:5c:
         d7:9a:a6:be:1a:ba:00:23:9d:f9:b1:4e:71:fb:aa:69:d4:df:
         14:05:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:23 2026 by rpki-client