Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/gTemnTrNbKJ1S5HAKajIcgIXsp8.roa
File:                     gTemnTrNbKJ1S5HAKajIcgIXsp8.roa (raw, json)
Hash identifier:          vlY9KXYxZZb4BjHJBZ1n+1WhcZ55X0EH5DjjGbFxX1M=
Subject key identifier:   81:37:A6:9D:3A:CD:6C:A2:75:4B:91:C0:29:A8:C8:72:02:17:B2:9F
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       A7
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/gTemnTrNbKJ1S5HAKajIcgIXsp8.roa
Signing time:             Tue 31 Mar 2026 07:48:54 +0000
ROA not before:           Tue 31 Mar 2026 07:48:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38631
IP address blocks:        43.223.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Mar 31 07:48:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8137A69D3ACD6CA2754B91C029A8C8720217B29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:b2:64:38:fe:1e:69:51:b7:ba:f1:b9:91:
                    ce:01:5c:ce:f9:a3:99:b1:e5:28:a8:a9:6b:e8:c6:
                    d8:11:26:e0:94:fe:93:1e:bb:db:58:a2:af:bf:b7:
                    1f:77:bc:d9:d1:1e:9b:04:3d:71:20:39:48:38:64:
                    80:ac:bb:c2:c6:ab:16:43:a9:a3:8f:1b:e9:ca:8f:
                    fc:33:c1:94:69:22:55:06:b1:e3:41:1f:54:37:06:
                    49:f9:25:57:28:8a:4e:1b:bb:70:e8:ff:cb:f4:28:
                    c1:b7:7e:e1:70:32:87:20:92:05:61:f9:2b:2b:6c:
                    1c:22:8f:e5:c0:85:76:6d:4d:64:3a:03:17:4e:17:
                    37:67:c4:be:e5:c3:f5:a0:fe:ee:a8:49:58:09:31:
                    af:c0:cb:a5:ec:c6:d7:d0:f8:2a:9c:bb:61:81:6b:
                    c3:27:96:85:36:14:8a:8d:d8:c3:59:7b:05:04:ae:
                    75:30:4c:19:d1:9c:2a:48:bb:32:ec:c3:41:11:7f:
                    c7:ea:cf:37:64:18:cc:13:f7:7c:11:36:4e:9c:fd:
                    12:f5:b9:63:8f:43:3b:f7:8e:a7:73:9d:ab:66:94:
                    81:2f:b8:cd:9a:eb:55:76:20:d6:5f:cc:e2:0a:fc:
                    e7:b0:a1:a3:86:6d:ec:cc:a2:ce:bc:d0:98:8f:05:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:37:A6:9D:3A:CD:6C:A2:75:4B:91:C0:29:A8:C8:72:02:17:B2:9F
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/gTemnTrNbKJ1S5HAKajIcgIXsp8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.223.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:98:9c:83:e8:01:3b:3c:c8:e2:71:6b:3e:83:82:24:80:bd:
         c2:0b:b1:02:c7:52:bd:56:a4:51:83:92:32:07:17:f1:d9:10:
         05:24:73:9c:6a:71:90:c4:e0:ae:89:64:c2:a2:2e:f7:fb:ed:
         d6:b2:58:e3:90:6b:53:de:d6:3a:c5:03:c8:4d:e6:ad:6b:e1:
         4d:29:74:ea:55:c6:18:8e:3c:67:32:5d:f2:74:3c:24:6f:30:
         8d:9d:34:fd:8b:cd:ad:42:93:f8:ac:02:05:a3:67:15:9b:6d:
         24:6e:ac:f7:07:56:8a:c3:17:6d:1a:4f:af:a8:98:2b:f6:2b:
         9d:82:ec:4f:bf:6a:55:ee:56:a0:ad:31:9e:71:19:f7:f6:86:
         2b:f9:a8:e7:8c:d2:2c:fa:92:da:95:60:1d:18:1e:18:28:ea:
         3e:1c:7f:50:82:55:94:c9:df:3c:e1:e4:85:5a:9f:2d:69:a9:
         ab:4a:3a:7f:4c:a9:41:88:55:b3:b1:f6:3f:ff:b0:ea:45:73:
         ab:4d:47:7f:78:21:d8:d9:cc:47:ea:5b:51:a0:f6:d3:93:29:
         3f:a2:95:81:a5:14:1c:8f:a2:e8:ff:bd:2c:53:d4:bb:61:47:
         f5:f6:75:70:16:59:9a:bc:7f:2a:7f:f2:88:aa:0a:92:e3:69:
         3d:c8:7b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 02:06:23 2026 by rpki-client