Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/cSmoLGpowP0jrgXYjkHoOZyCVCY.roa
File:                     cSmoLGpowP0jrgXYjkHoOZyCVCY.roa (raw, json)
Hash identifier:          C90uOvyXXcBeFEnXSkRgaS156wVSB4IxERq3Dqbmooo=
Subject key identifier:   71:29:A8:2C:6A:68:C0:FD:23:AE:05:D8:8E:41:E8:39:9C:82:54:26
Certificate issuer:       /CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF
Certificate serial:       20
Authority key identifier: A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/cSmoLGpowP0jrgXYjkHoOZyCVCY.roa
Signing time:             Tue 31 Mar 2026 08:43:56 +0000
ROA not before:           Tue 31 Mar 2026 08:43:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        164.46.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF
        Validity
            Not Before: Mar 31 08:43:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7129A82C6A68C0FD23AE05D88E41E8399C825426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:69:df:43:6a:eb:93:f5:4a:4e:39:32:5c:
                    72:c4:19:d2:f6:93:7b:9f:94:10:2e:fa:4d:ba:4b:
                    55:28:38:74:93:85:f6:25:b2:81:ce:23:47:a0:46:
                    41:a3:60:c6:7d:51:ff:77:8a:ac:b1:64:00:06:d3:
                    bf:37:57:59:2f:e4:93:35:07:06:37:32:bb:9e:29:
                    1d:51:17:8d:6e:a4:81:99:91:75:d8:09:75:5c:e6:
                    f4:b0:5d:c0:e1:b2:47:44:24:55:ea:f4:f3:b8:f8:
                    31:4f:42:dd:b3:0f:7f:b8:cb:fa:22:9a:0b:8e:ed:
                    c0:cf:86:99:7d:ff:8c:54:80:b8:2c:43:57:8f:f9:
                    f1:35:d1:2a:75:02:68:01:92:3e:3c:5e:9a:98:cf:
                    c1:43:56:c4:38:a8:24:70:ec:97:eb:5c:33:53:0a:
                    18:0e:ba:1f:e4:d9:8d:dc:58:b7:83:d4:57:6a:3a:
                    5c:78:e2:a8:e0:ba:08:7c:f9:51:8a:fe:0b:95:7d:
                    e2:1e:78:56:33:a6:7c:56:c6:f4:10:f1:b7:30:da:
                    53:df:16:8a:7c:44:28:a9:1c:93:1f:9f:c6:29:2d:
                    ac:bf:c8:65:4e:65:be:0c:92:53:d8:89:2e:17:b5:
                    7f:fc:b2:58:38:ba:51:62:60:de:17:fe:55:1e:77:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:29:A8:2C:6A:68:C0:FD:23:AE:05:D8:8E:41:E8:39:9C:82:54:26
            X509v3 Authority Key Identifier:
                keyid:A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/cSmoLGpowP0jrgXYjkHoOZyCVCY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:8d:58:f6:0a:b4:90:b0:46:1a:d5:91:99:b6:6e:57:d3:25:
         18:78:12:d4:0d:92:12:1d:e5:0f:bb:01:c1:fe:bb:07:9a:bf:
         86:13:4d:fd:ed:3a:02:c5:74:a8:19:7f:8f:bf:87:34:84:12:
         5b:14:97:eb:bd:55:15:22:e8:9b:6b:99:60:ab:c1:c9:cd:20:
         db:f5:10:4e:c7:81:24:0f:1b:64:3d:c9:fb:ae:6f:96:38:79:
         c5:51:9e:24:ed:23:c4:33:ab:e1:f9:58:b4:72:b5:57:7a:9f:
         81:72:31:ab:ec:a2:f8:1c:a4:ed:ae:b1:8f:f1:9a:e0:46:44:
         a1:64:da:c6:9e:76:a1:7d:75:6f:51:04:87:63:bd:df:ea:3b:
         03:e5:4a:85:e3:16:a2:83:6b:3f:d4:6c:36:a6:f4:08:30:77:
         57:e3:fb:42:07:e3:0e:7c:6e:29:73:31:08:02:5f:f4:18:20:
         69:13:4f:ec:96:55:de:6c:87:bb:df:8e:ef:46:b9:54:fb:28:
         35:24:32:5f:34:59:d1:7a:ce:ec:58:62:c3:2a:a8:1b:32:15:
         28:37:1c:df:cd:4d:db:54:97:67:ba:19:f7:23:0f:71:a7:5f:
         42:59:43:58:93:b2:4a:ed:4f:f8:d2:28:23:ae:17:63:c4:b0:
         f7:f7:b5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:56:20 2026 by rpki-client