Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/oBlfzfMz1PJ9tFOX5mx8FHMuaOE.roa
File:                     oBlfzfMz1PJ9tFOX5mx8FHMuaOE.roa (raw, json)
Hash identifier:          rXwqXIX1C75AxK4tvoHY2O4GkJ+NAj1iMkInSmLeGuk=
Subject key identifier:   A0:19:5F:CD:F3:33:D4:F2:7D:B4:53:97:E6:6C:7C:14:73:2E:68:E1
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       016D
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/oBlfzfMz1PJ9tFOX5mx8FHMuaOE.roa
Signing time:             Tue 31 Mar 2026 07:48:13 +0000
ROA not before:           Tue 31 Mar 2026 07:48:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        202.47.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A0195FCDF333D4F27DB45397E66C7C14732E68E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:78:10:b4:6e:0e:2a:cd:33:c2:e2:5c:7d:
                    dc:9f:18:de:97:65:c5:23:1d:aa:2f:e0:29:e4:9c:
                    76:8b:dc:1e:8c:8e:c6:75:80:fa:99:56:5d:44:51:
                    2d:6b:55:7e:3f:53:5c:30:dc:3f:41:c2:f7:45:b6:
                    2c:a5:12:69:cc:53:a4:fc:2a:39:d9:82:fa:4e:f1:
                    15:de:d8:ac:29:1d:89:9f:fa:f4:f4:b7:bc:98:b8:
                    6b:4b:b2:39:d7:5a:95:d1:7d:92:02:d5:8c:81:93:
                    ad:d0:29:94:ac:67:7a:a9:80:b0:51:fc:cf:ae:65:
                    59:6b:c3:2b:d1:f6:bf:4f:db:14:78:c5:c4:3b:de:
                    ce:a0:3a:41:d4:2f:21:40:74:2b:56:96:6b:02:e4:
                    cd:27:94:3b:41:00:85:ce:14:70:7a:e2:f1:fe:18:
                    f4:b2:1c:24:2d:9e:14:85:34:c0:8e:9c:e9:84:df:
                    27:e7:68:25:66:71:1d:64:f6:84:64:e8:0a:69:12:
                    20:52:7d:cd:e1:cb:88:d8:3c:9d:28:44:51:f4:46:
                    49:13:ca:21:69:6a:55:3f:e3:9c:26:85:91:d5:c7:
                    a4:94:ea:4f:24:35:4b:9f:65:51:de:de:de:ee:cc:
                    c4:49:ec:ea:31:3e:bb:7f:97:20:6a:36:13:e9:ce:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:19:5F:CD:F3:33:D4:F2:7D:B4:53:97:E6:6C:7C:14:73:2E:68:E1
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/oBlfzfMz1PJ9tFOX5mx8FHMuaOE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:02:e8:4d:23:d5:eb:df:c3:2d:39:10:24:02:13:8e:5e:b9:
         9f:16:da:eb:be:f5:92:2a:7c:0f:79:84:25:48:36:7a:a1:07:
         55:3d:24:34:9f:cd:34:38:eb:d0:79:fe:66:a8:fa:32:1a:a8:
         f3:40:42:c2:13:13:f1:78:5c:8f:7b:a6:cd:1b:6c:19:5e:24:
         0d:a3:ec:df:1b:14:3d:f8:1f:10:91:cc:96:e4:5c:d7:8e:90:
         c2:59:14:fa:c7:6e:a1:5b:5c:40:7d:d3:58:a5:54:45:5a:94:
         9f:0a:2b:14:c0:9b:5e:db:37:49:59:2c:6e:39:9e:67:df:3e:
         c0:f1:6a:2c:0c:de:f8:c8:68:fe:51:67:fb:27:84:11:b3:c6:
         91:ac:55:43:9b:c1:12:c3:bb:4f:1a:e4:bd:4f:f7:e0:14:fb:
         a5:c4:a2:b0:f2:4d:4c:40:7e:2f:53:fc:68:a3:46:b4:51:99:
         90:d2:93:12:fd:be:b2:bf:e4:b4:1c:a7:6e:de:72:5f:ce:e8:
         35:ed:c3:35:b3:8c:c1:92:8e:34:61:f6:3b:da:f9:cd:3d:75:
         74:67:7d:e2:b7:3e:00:99:89:95:a4:d8:ea:84:89:73:be:88:
         c1:28:10:58:70:21:c0:f0:2f:36:3f:72:3e:1e:67:18:47:eb:
         6f:45:3c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:15 2026 by rpki-client