Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/hw5BwJM1XNaPilVgjCeTyIxGy_E.roa
File:                     hw5BwJM1XNaPilVgjCeTyIxGy_E.roa (raw, json)
Hash identifier:          Qge6EXdtS3RJPzdZ1DwOQ1CSRxeP0hgRaL1BYFtqkp4=
Subject key identifier:   87:0E:41:C0:93:35:5C:D6:8F:8A:55:60:8C:27:93:C8:8C:46:CB:F1
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0158
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/hw5BwJM1XNaPilVgjCeTyIxGy_E.roa
Signing time:             Tue 31 Mar 2026 07:48:01 +0000
ROA not before:           Tue 31 Mar 2026 07:48:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        61.120.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=870E41C093355CD68F8A55608C2793C88C46CBF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:61:e9:63:5f:ba:18:31:69:6b:10:32:6a:
                    59:80:5b:3e:bd:3f:23:c7:1a:f2:91:2d:ea:5f:9c:
                    77:55:41:7b:bc:ba:b3:09:cb:3f:83:66:fb:0d:ea:
                    8a:37:35:69:24:60:1a:34:55:9c:0f:8c:75:dc:0e:
                    7d:5c:d6:eb:49:8f:c2:74:17:1b:c1:47:45:10:ad:
                    97:c3:ca:e7:27:44:9d:1c:2e:bc:59:6d:0e:aa:6d:
                    f3:31:0c:dc:5a:ec:a5:4c:d7:dd:32:17:a9:27:71:
                    6a:31:0e:e2:c2:b8:3a:2d:e0:c9:45:80:21:e7:d6:
                    20:80:16:dc:dc:54:2b:d5:41:59:4e:0a:bc:00:98:
                    22:fd:3e:8d:c8:d4:ae:ee:34:97:6b:4c:d2:f5:1d:
                    af:47:d6:74:74:86:5d:7d:36:18:eb:d4:87:3e:80:
                    74:b5:5c:22:9c:25:57:a3:4e:fd:cd:28:0d:85:1d:
                    c3:fe:dc:b9:8e:9e:66:7e:07:fe:ed:3c:87:1f:6e:
                    6f:68:e3:cb:a1:a3:0f:3d:93:23:8b:2d:f2:f4:03:
                    cb:78:8f:16:6c:82:d9:ba:2c:fd:fd:ff:57:b0:4c:
                    9e:76:84:65:67:c4:a8:50:ae:c3:c1:f7:ea:60:6c:
                    f1:4f:e2:83:0b:1b:8f:79:c4:3c:12:c0:f2:65:3e:
                    8f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0E:41:C0:93:35:5C:D6:8F:8A:55:60:8C:27:93:C8:8C:46:CB:F1
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/hw5BwJM1XNaPilVgjCeTyIxGy_E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:06:31:39:da:8c:3a:a5:77:21:30:f3:6e:56:7f:df:39:6c:
         37:cc:f6:0e:26:d4:9f:3a:f6:18:bd:62:b6:c9:77:7b:15:21:
         ed:5e:d7:4b:94:ba:cc:35:52:8c:af:8c:46:54:67:c3:ce:97:
         31:b2:7c:4b:a4:d5:6c:3f:3e:cc:99:52:1a:ac:f6:aa:03:e1:
         d6:02:89:68:f5:fb:01:01:e7:54:da:61:96:18:4e:40:91:f6:
         64:28:93:ba:98:e3:67:ba:79:53:f5:8d:b4:a9:28:7f:08:22:
         85:c3:20:e6:e7:ea:99:61:ee:2e:f6:7f:ef:ad:49:26:6e:f2:
         07:3c:43:16:c7:79:12:57:9d:e7:84:d6:8a:65:76:8f:22:8c:
         cb:fb:60:d3:6c:b3:49:5c:75:16:58:7e:fc:ac:c6:c7:aa:9d:
         00:1b:c6:85:bb:c8:ef:c1:37:64:2c:6d:06:87:01:5c:09:93:
         7c:cb:d3:b8:97:2d:c1:b7:a8:df:92:e0:46:f1:9b:de:ed:7e:
         a4:2d:dd:45:44:0b:11:0c:89:08:96:79:8c:3b:f7:65:91:dc:
         2a:1b:cb:43:92:e0:29:d5:6f:30:be:6b:02:24:f9:a7:6f:9e:
         e5:34:8c:3c:93:65:96:1a:a3:02:db:80:53:f7:18:08:81:d9:
         2c:5b:4d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:15 2026 by rpki-client