Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/rC1O20EomwvEsuL0Tp6ogq1shcg.roa
File:                     rC1O20EomwvEsuL0Tp6ogq1shcg.roa (raw, json)
Hash identifier:          Fs+XO06czQKvSQEhBX4/9NUgnWWT989lj+F/vKKr4YE=
Subject key identifier:   AC:2D:4E:DB:41:28:9B:0B:C4:B2:E2:F4:4E:9E:A8:82:AD:6C:85:C8
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0165
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/rC1O20EomwvEsuL0Tp6ogq1shcg.roa
Signing time:             Tue 31 Mar 2026 07:48:10 +0000
ROA not before:           Tue 31 Mar 2026 07:48:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        124.40.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 11:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AC2D4EDB41289B0BC4B2E2F44E9EA882AD6C85C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:17:17:16:0c:1b:d7:c4:be:62:58:39:f8:
                    f1:0d:10:90:4c:a6:e8:fe:e0:53:49:6a:dd:2e:3a:
                    70:57:86:db:b8:25:09:27:27:a5:eb:35:7f:89:a8:
                    06:9f:40:79:e6:f0:4c:77:73:7d:2f:ba:27:dd:5d:
                    f4:ca:49:21:b4:36:4c:1d:f2:3e:59:31:ec:14:ee:
                    df:a7:96:48:37:77:c5:da:ac:cd:ec:f9:c8:60:a9:
                    92:a8:97:46:57:50:12:cd:4b:bc:73:ab:60:8c:f9:
                    32:38:f9:58:ef:db:63:01:2d:76:42:45:84:5b:f4:
                    a7:31:3b:bc:66:9e:dd:75:b9:d1:e2:4e:c6:24:06:
                    8c:38:ad:44:e8:65:35:2e:31:5f:10:5f:61:57:0d:
                    d7:74:e2:77:97:fc:26:a0:2d:99:7f:80:90:14:d8:
                    05:a8:95:bd:88:d5:3f:cc:76:c0:7f:70:fa:a9:99:
                    54:33:69:9f:46:c3:03:fd:80:8d:cd:26:91:75:9b:
                    01:d8:82:95:dd:ba:d3:2e:9d:ac:d8:ad:e3:5f:54:
                    48:12:34:93:8b:96:c9:5a:d6:51:ed:41:ed:d2:24:
                    24:6b:07:43:c5:76:90:1a:ff:a3:e7:df:59:75:3e:
                    f6:e9:e6:21:b4:36:73:96:fc:cd:52:42:40:0e:85:
                    46:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2D:4E:DB:41:28:9B:0B:C4:B2:E2:F4:4E:9E:A8:82:AD:6C:85:C8
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/rC1O20EomwvEsuL0Tp6ogq1shcg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         73:26:28:79:79:cf:40:e9:30:c8:f8:e9:04:78:88:fa:82:1d:
         55:93:a0:a6:48:6e:bf:f7:1e:c1:ec:fe:ef:2c:f1:74:22:f3:
         6e:cf:46:d2:02:04:84:90:3f:21:86:32:b3:88:b3:bd:d7:47:
         12:28:12:36:c9:64:7e:7d:88:cf:77:06:48:bd:6e:63:63:b1:
         3c:2d:4a:0a:f7:b0:77:6d:60:b0:01:4e:ae:61:cd:cf:3e:51:
         35:29:30:8c:09:64:8a:2c:49:ab:aa:f1:4f:0b:a1:0e:41:21:
         e8:64:44:2c:de:61:40:7a:e3:1e:48:87:79:28:76:6e:5a:0c:
         56:24:68:e7:c8:9b:30:ec:cc:59:7e:df:3c:c8:8b:db:4a:74:
         e2:e2:8f:1c:d5:01:70:26:45:68:6d:9f:27:73:8e:3f:18:98:
         64:44:6a:45:15:ab:41:f5:94:cc:05:7c:0d:9e:14:7e:6e:44:
         90:f0:59:e5:56:86:00:bb:77:a7:55:b2:1b:12:d8:8f:9c:9c:
         b3:9a:e3:ed:e4:5b:a5:b7:70:34:01:30:87:3d:99:75:d9:e7:
         95:62:43:fe:8e:be:fc:58:40:7d:db:f7:85:36:61:13:0c:ad:
         1d:90:74:03:5d:1f:9b:55:76:b4:a3:12:51:44:c7:b7:55:dc:
         b6:0f:2d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:13 2026 by rpki-client