Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/dMuxElRdEe9hH_HhSJYUTaa98DU.roa
File:                     dMuxElRdEe9hH_HhSJYUTaa98DU.roa (raw, json)
Hash identifier:          mdprt5IFZxaeEMV8PYNKIEoMTB+pmxdBFDjtgNP8ZD0=
Subject key identifier:   74:CB:B1:12:54:5D:11:EF:61:1F:F1:E1:48:96:14:4D:A6:BD:F0:35
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0175
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/dMuxElRdEe9hH_HhSJYUTaa98DU.roa
Signing time:             Tue 31 Mar 2026 07:48:17 +0000
ROA not before:           Tue 31 Mar 2026 07:48:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        111.68.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 11:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=74CBB112545D11EF611FF1E14896144DA6BDF035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:a7:af:13:ae:a0:2b:3b:9f:7b:57:0b:92:
                    45:c9:46:06:a5:79:54:35:71:79:61:9f:a2:67:30:
                    d3:00:d7:12:0a:57:f4:78:49:db:ce:8f:b6:0a:06:
                    bc:0d:08:e2:df:c2:ae:44:e1:d9:7b:41:36:84:6c:
                    b5:bf:04:38:76:c1:36:83:86:11:3a:6f:bb:c9:4f:
                    99:72:df:ed:a1:00:6b:15:33:af:a3:53:4d:ba:b7:
                    a0:7e:b8:3c:f3:23:de:fa:53:1c:24:f6:3b:7d:b7:
                    33:26:f0:bf:38:a9:1b:31:30:df:96:eb:cf:67:3f:
                    09:8a:ed:cf:f3:2e:67:ae:6e:17:f2:4c:8b:dd:d2:
                    42:34:73:db:95:65:2a:e5:2d:a1:49:26:3b:d6:fe:
                    9f:76:13:dc:05:5d:18:6d:f4:06:6f:53:8e:6f:6e:
                    e3:d0:9c:ad:4b:cb:b4:89:cc:b2:1a:61:53:57:a3:
                    d0:f0:62:97:25:5f:db:95:0a:57:d1:c2:f0:df:8f:
                    61:bd:be:d6:02:e6:2a:7b:aa:31:2b:05:b6:64:a1:
                    e9:47:df:99:34:a1:57:59:2e:63:68:1d:c4:69:5a:
                    50:fa:7c:14:63:8f:63:e3:5f:e7:0a:cd:1b:e0:27:
                    0b:88:dd:ce:20:c7:fd:25:8e:cf:5d:f0:33:cf:ba:
                    82:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CB:B1:12:54:5D:11:EF:61:1F:F1:E1:48:96:14:4D:A6:BD:F0:35
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/dMuxElRdEe9hH_HhSJYUTaa98DU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.68.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         67:04:d4:17:c1:9a:99:f1:55:82:be:6e:9a:be:2c:49:d8:c7:
         89:7d:48:2d:86:50:7e:bf:e6:e1:58:bb:fa:19:56:17:0c:30:
         af:8d:70:ad:41:9c:32:b3:37:ba:1c:08:3b:a7:08:73:1d:34:
         29:4f:d7:f7:01:2e:29:48:49:a2:08:ab:62:49:cf:64:bd:c6:
         d2:f2:4e:c0:80:fa:47:58:e0:b3:82:15:a6:aa:bd:38:01:67:
         c4:e1:53:f9:f1:7d:b9:32:bb:e2:27:03:2e:1a:93:94:fa:03:
         70:3d:83:76:51:85:d7:c1:81:e3:62:52:de:25:5d:09:cd:05:
         2e:7d:28:2c:b7:4d:6f:53:b2:45:5c:e7:79:be:f3:e7:7c:2a:
         7e:fd:d4:26:25:4d:c4:c8:ac:a3:52:65:ab:99:3a:db:eb:c8:
         8f:bd:4d:9d:96:d2:b7:49:0c:30:40:e3:34:b2:2a:eb:0c:b4:
         c9:ab:c0:00:0e:66:0b:08:4f:9b:4c:5b:b2:ab:df:e9:0b:99:
         0c:1e:31:9d:92:52:8a:ec:5a:61:42:37:f2:43:48:4b:6f:b7:
         2d:1a:cb:0a:90:f2:29:3a:e4:33:62:69:7e:9f:09:52:aa:0f:
         db:5e:df:fd:69:49:f1:3b:03:f9:bf:84:85:44:5d:4f:b2:29:
         2c:7e:9b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:15 2026 by rpki-client