Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/k_1zywqlgGioiV9C76_MHfjF-gQ.roa
File:                     k_1zywqlgGioiV9C76_MHfjF-gQ.roa (raw, json)
Hash identifier:          gz8/0u++3MYfa6Al3PdCtyneci9SkQmBpto3EKFyR10=
Subject key identifier:   93:FD:73:CB:0A:A5:80:68:A8:89:5F:42:EF:AF:CC:1D:F8:C5:FA:04
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       014A
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/k_1zywqlgGioiV9C76_MHfjF-gQ.roa
Signing time:             Tue 31 Mar 2026 07:47:54 +0000
ROA not before:           Tue 31 Mar 2026 07:47:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        153.254.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:47:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=93FD73CB0AA58068A8895F42EFAFCC1DF8C5FA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:f4:7a:39:47:d7:f4:cf:04:01:94:ba:df:
                    83:df:fb:e2:04:6f:0b:12:da:45:a7:2f:cc:43:2e:
                    9c:33:c3:5e:ac:db:19:39:30:18:d6:c8:40:ba:ae:
                    cf:37:8b:3c:20:0e:d2:86:76:63:38:96:8d:11:fa:
                    83:dd:d5:52:ce:4f:eb:fa:f4:02:59:4f:77:6c:75:
                    da:99:18:5d:15:96:e4:4b:4e:71:3f:78:5f:dd:fe:
                    ff:98:b0:7f:f7:82:b8:88:0c:a7:a0:de:80:09:b0:
                    9d:d0:43:93:45:52:63:00:1b:79:dd:d7:29:d2:00:
                    89:22:73:33:ff:16:4d:c1:40:53:99:63:52:8a:b6:
                    13:7f:75:62:ca:a3:cd:84:fd:24:65:61:7e:9e:86:
                    b8:10:f8:db:6b:a5:ec:e4:82:4e:a8:f1:b8:72:83:
                    9c:92:0c:e5:6d:b1:6c:45:e2:11:1b:9b:29:11:7c:
                    4d:2f:de:a3:8c:4a:32:77:f9:50:35:a0:9a:3b:19:
                    8c:f8:b5:b9:f9:87:88:d5:16:16:14:88:76:79:c8:
                    be:f8:9a:10:94:bb:0d:f5:d4:8f:6d:eb:98:77:bc:
                    37:13:24:4e:c9:9f:e7:ff:b3:08:cd:d8:c6:3c:49:
                    79:73:19:13:f1:57:05:b9:4a:83:78:69:78:2a:15:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FD:73:CB:0A:A5:80:68:A8:89:5F:42:EF:AF:CC:1D:F8:C5:FA:04
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/k_1zywqlgGioiV9C76_MHfjF-gQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:73:3e:1a:78:2e:fc:22:d3:de:e0:ba:ea:1e:58:7e:27:f7:
         38:a1:ec:81:b9:8f:e7:12:8d:ee:1a:d5:0d:38:68:64:c0:da:
         46:06:6c:b3:ca:2c:1f:2a:7c:84:d2:b2:a7:e2:30:95:95:62:
         fd:15:18:20:9c:86:34:44:fb:a5:09:f6:1e:03:30:dd:7d:ba:
         68:55:e9:bd:2b:ed:1c:99:1f:c9:4d:55:1e:92:3c:09:94:4c:
         61:99:d2:f6:68:a7:b6:dd:fc:f4:46:41:fa:db:2d:eb:67:db:
         f7:25:9f:23:83:9e:99:82:dd:be:17:b4:01:55:36:1d:c8:c4:
         7e:a9:aa:75:76:70:b0:82:d5:a7:a9:5f:93:b5:45:9b:fb:f2:
         54:b2:e5:88:ae:e8:97:17:f4:79:a9:dd:36:1d:4e:12:5b:88:
         bc:c8:50:c8:f6:3e:40:51:ca:e9:2e:92:6d:e7:91:51:3a:14:
         6c:a0:62:5a:69:2c:8f:73:6a:67:39:e1:d7:96:4d:3a:b5:98:
         6a:36:37:87:36:d0:b6:44:af:92:ac:36:03:d1:46:92:98:b6:
         04:64:54:e3:db:01:24:f4:d9:28:80:7e:5e:95:65:d8:1a:7a:
         67:d5:8b:6d:5a:21:fb:02:24:0f:4b:3e:5a:53:5b:ec:64:b3:
         ae:cb:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:14 2026 by rpki-client