Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8F_hEJynvwYiiwoHKGWouNM2ytA.roa
File:                     8F_hEJynvwYiiwoHKGWouNM2ytA.roa (raw, json)
Hash identifier:          MyyBMQGk4aNSaT0Hd2AA1GqeZvdHH6RMmpNC6S8KIy8=
Subject key identifier:   F0:5F:E1:10:9C:A7:BF:06:22:8B:0A:07:28:65:A8:B8:D3:36:CA:D0
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01D0
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8F_hEJynvwYiiwoHKGWouNM2ytA.roa
Signing time:             Tue 31 Mar 2026 07:54:11 +0000
ROA not before:           Tue 31 Mar 2026 07:54:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        61.115.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:54:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F05FE1109CA7BF06228B0A072865A8B8D336CAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:4f:02:7a:71:5d:18:50:31:cb:e5:ee:8a:
                    c8:66:5f:04:5b:b5:32:a2:10:c3:2d:ec:13:79:8f:
                    8b:97:23:ce:30:14:eb:48:89:71:08:71:ef:1a:ef:
                    4b:3a:f9:bb:ce:52:54:dd:fe:1c:cb:1b:ac:26:a7:
                    aa:b0:17:1a:38:73:8a:bb:8d:12:fa:30:60:a4:36:
                    39:75:f1:a9:68:fd:3e:a7:dc:f1:33:3d:4f:df:28:
                    51:9e:24:d7:f1:36:48:23:b2:58:2a:96:ee:67:78:
                    36:99:07:af:9f:15:09:d0:92:95:bb:a3:b9:91:05:
                    4d:0b:17:b8:cc:f9:e6:0b:46:98:1d:a2:d6:63:ad:
                    57:2a:08:69:46:2d:bd:8a:b1:08:5e:46:05:1f:c9:
                    12:38:fd:30:59:9d:25:55:2e:ae:4a:c4:a2:97:8a:
                    b2:7b:a0:8e:0e:57:b7:ec:cb:a7:0c:92:21:8e:43:
                    a8:23:69:3c:7d:fb:9f:4c:4e:2d:22:a9:b5:2a:a2:
                    33:16:22:6b:c4:9b:da:c9:1b:0a:1e:12:6b:15:43:
                    00:0d:56:ba:6c:fb:6d:88:f2:26:ec:56:5b:a9:0d:
                    46:96:0f:c0:1a:f3:99:f0:9b:3a:a9:b6:d1:1b:c6:
                    db:c6:a3:1e:06:58:bd:c4:3c:3a:15:ed:58:93:06:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5F:E1:10:9C:A7:BF:06:22:8B:0A:07:28:65:A8:B8:D3:36:CA:D0
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8F_hEJynvwYiiwoHKGWouNM2ytA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.115.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:13:36:77:83:fc:2e:70:7b:1b:c6:27:93:3b:9e:26:7b:
         bb:fd:f5:c7:ec:66:f1:0c:20:67:a4:f5:d1:15:78:f7:20:b0:
         b9:9a:79:c1:19:f2:d3:45:29:a4:4d:2f:fa:55:8a:1c:cb:1f:
         2c:de:db:ab:68:9d:c8:de:33:ed:a0:a5:22:ce:8a:9d:b3:6a:
         2c:e8:94:eb:cb:72:68:97:9c:e4:4e:a8:6d:66:d5:c8:21:c6:
         cc:1c:b5:10:e9:14:ba:0d:b4:0b:e2:4a:32:52:79:ec:35:05:
         f0:12:72:44:cb:6d:a4:64:f9:37:77:77:20:67:f4:c1:cb:76:
         eb:c2:2b:6b:5b:8e:0f:bc:64:16:48:2c:a5:0f:e3:f5:84:e3:
         fd:a3:1b:33:10:d5:06:f4:38:86:2e:da:a4:38:4a:7d:71:d3:
         ce:ee:35:4b:9d:3b:e8:fa:5f:7a:d7:7c:0c:93:c7:f1:eb:b3:
         73:47:91:8e:99:5f:62:7c:5b:c7:7c:6e:75:73:87:e2:89:78:
         b7:1d:31:75:5a:27:ff:27:5d:be:06:ff:e4:45:e4:f8:c0:d4:
         b7:68:9a:c9:93:46:a4:54:b7:c9:3c:2f:4d:49:76:37:f6:9f:
         57:09:ed:f5:f6:72:db:82:32:42:d1:ab:19:6e:16:66:54:73:
         79:4d:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:03:36 2026 by rpki-client