Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/u4rVppi-QlFPiRTuFppzBmxFIeY.roa
File:                     u4rVppi-QlFPiRTuFppzBmxFIeY.roa (raw, json)
Hash identifier:          7W7I2gvGck0cyiM0cN+dFKMHXR+GIERUsi3gDNsiOXE=
Subject key identifier:   BB:8A:D5:A6:98:BE:42:51:4F:89:14:EE:16:9A:73:06:6C:45:21:E6
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       A9
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/u4rVppi-QlFPiRTuFppzBmxFIeY.roa
Signing time:             Tue 31 Mar 2026 07:52:33 +0000
ROA not before:           Tue 31 Mar 2026 07:52:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        180.148.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 22:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Mar 31 07:52:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BB8AD5A698BE42514F8914EE169A73066C4521E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:09:be:11:8f:d6:ef:37:33:cc:48:50:34:
                    b8:df:7f:12:75:07:94:41:f7:f4:78:2f:9e:ab:43:
                    5f:19:31:ca:52:95:f6:9c:4f:ce:76:00:63:40:af:
                    54:f8:7a:47:1d:33:0c:1d:51:cc:a7:45:8d:4e:85:
                    b7:a1:80:b5:e5:21:8d:cd:a7:43:16:95:bd:7d:d1:
                    94:46:df:ff:54:75:c1:13:9f:02:97:cd:96:49:67:
                    e0:0f:12:15:96:96:88:32:1a:b8:0e:9c:d4:30:a5:
                    55:ee:a1:22:51:78:24:ed:2f:c8:75:33:43:51:c8:
                    e2:cc:5b:1c:3a:9a:f9:03:ca:08:1c:e2:41:f2:dc:
                    e0:ca:37:87:25:1d:c9:48:04:b7:b7:e5:10:12:43:
                    ac:85:86:c5:8f:c1:c5:52:e3:78:bc:1b:9c:ff:15:
                    21:c6:43:23:4d:84:f0:c5:7e:5e:24:ca:2e:ef:5a:
                    d5:ed:d4:c2:29:4e:d9:a7:30:a8:d5:9c:51:8e:77:
                    c3:e2:34:ce:8f:3e:a7:6b:cb:86:a6:ce:2c:bc:05:
                    9a:0e:28:35:cb:76:6d:ed:6f:9c:bc:eb:e8:6f:bc:
                    58:3e:c5:ae:ec:70:7b:e4:4b:6e:e2:77:f0:c1:6e:
                    5c:d9:7c:34:20:51:2c:fb:65:80:69:2c:e4:e8:9f:
                    37:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8A:D5:A6:98:BE:42:51:4F:89:14:EE:16:9A:73:06:6C:45:21:E6
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/u4rVppi-QlFPiRTuFppzBmxFIeY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:1c:1f:67:cd:a6:2c:1b:21:3a:74:13:22:2a:75:70:b3:
         91:21:c3:38:65:23:b1:d8:23:32:7b:c0:65:1b:f4:a5:03:00:
         da:ee:0d:c3:5f:3c:af:e8:75:fa:db:57:c3:2a:16:aa:64:5d:
         96:86:53:bf:53:80:be:01:fd:bb:d0:70:4e:d5:a4:fb:d6:98:
         6e:ea:7e:1c:11:a1:42:18:67:6f:35:fd:58:81:a4:cb:12:40:
         43:03:bc:8a:91:89:15:08:ff:80:9e:10:ab:68:e8:18:18:32:
         e5:e9:83:e2:74:c4:dc:98:8a:1f:3b:cc:96:a0:25:32:2b:29:
         42:4d:53:26:55:72:49:92:4c:47:a4:08:3e:74:f7:f8:8f:2e:
         9f:1f:19:4a:5b:1d:75:e9:92:46:56:3e:48:d0:15:f3:be:82:
         6b:48:63:74:77:9d:dd:e0:ef:89:72:f1:be:63:c5:f2:ac:f7:
         d7:27:62:ef:bf:b1:6b:eb:1d:b2:72:25:74:61:b1:a3:68:50:
         8f:1f:0a:67:36:16:1e:9b:30:55:95:f1:bd:1e:68:6f:48:c9:
         35:83:30:70:3f:8e:72:dd:93:97:df:2a:93:ba:df:f3:43:f3:
         3c:61:50:fe:fb:5c:7a:40:ab:7d:22:93:0a:02:9d:59:a7:4a:
         6c:41:82:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:19 2026 by rpki-client