Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/18UrJQmyXFMDjHX6My7xgn1OI-A.roa
File:                     18UrJQmyXFMDjHX6My7xgn1OI-A.roa (raw, json)
Hash identifier:          mK2jExUPYIHEZvy+pryirtMuvYFIAlpeM0sXtNbxWw4=
Subject key identifier:   D7:C5:2B:25:09:B2:5C:53:03:8C:75:FA:33:2E:F1:82:7D:4E:23:E0
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       7A
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/18UrJQmyXFMDjHX6My7xgn1OI-A.roa
Signing time:             Tue 31 Mar 2026 07:49:17 +0000
ROA not before:           Tue 31 Mar 2026 07:49:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24296
IP address blocks:        203.95.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Mar 31 07:49:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D7C52B2509B25C53038C75FA332EF1827D4E23E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:82:7a:b6:a1:d3:4b:ff:10:9f:7e:a0:ec:
                    1f:25:99:d2:02:df:73:f9:22:5a:aa:f3:ba:1f:c3:
                    d7:2b:3d:af:66:25:60:6a:38:0a:d5:fe:91:00:77:
                    32:fa:73:6f:ec:9e:d3:6a:c0:29:07:69:d5:cc:51:
                    58:c1:19:fb:66:a9:6f:09:49:77:67:61:36:77:e9:
                    a9:bc:38:89:e4:ff:b3:1f:6e:92:a5:68:67:28:82:
                    9c:d9:ba:1d:7a:b1:6d:b7:36:a9:b3:ef:1a:2b:a6:
                    eb:ea:c8:60:b1:38:92:c7:b5:7c:ad:61:80:91:5c:
                    90:9c:e4:bf:66:6b:33:b2:3d:0a:36:31:70:34:b0:
                    31:3e:1a:1c:f3:e2:b5:b8:b4:f9:1e:63:60:34:b1:
                    3f:49:c8:55:bd:7c:8a:08:37:4f:e3:16:f8:5e:37:
                    e1:3b:e0:0d:3c:c1:0b:e3:23:68:6a:93:94:73:ca:
                    13:03:36:41:e8:50:04:ad:a8:8e:88:80:ed:48:41:
                    21:7b:ca:23:1f:41:ce:1a:98:32:7a:e7:fc:b6:f9:
                    1a:72:3d:28:df:56:29:14:f0:40:83:6f:90:9c:5d:
                    48:7c:28:8d:e7:c7:28:6c:bf:1a:14:07:22:93:ef:
                    cb:79:22:61:97:a6:6f:60:67:e9:df:81:87:ee:ac:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C5:2B:25:09:B2:5C:53:03:8C:75:FA:33:2E:F1:82:7D:4E:23:E0
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/18UrJQmyXFMDjHX6My7xgn1OI-A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d2:b4:cb:6c:ea:3c:48:a0:eb:33:06:1e:36:6a:ac:ec:79:5f:
         54:77:93:c7:e2:ab:f0:bf:92:55:38:27:f8:87:94:97:6e:57:
         87:91:d7:73:20:74:cb:37:fe:5a:39:91:3e:79:cf:5e:ea:c9:
         e7:b6:35:2e:94:7d:1c:f9:c4:39:e8:b9:84:21:64:90:ff:12:
         78:ae:42:c9:38:b7:25:10:7a:83:68:d5:80:fe:1d:4c:a6:72:
         12:dd:e3:48:b6:ea:d2:8c:4d:13:47:5a:b6:26:14:1a:6f:2d:
         03:e6:33:72:e7:48:4e:cc:51:ba:ec:ca:f1:61:76:31:70:d1:
         91:d6:e7:33:5c:6b:d0:65:e2:03:24:cd:6f:af:ef:e1:37:ee:
         6c:4d:a5:a8:96:60:2d:4d:c9:e7:6b:f5:bc:45:c7:f0:3b:6f:
         c2:33:ac:bd:9d:58:a7:be:d4:09:84:dc:9e:2c:cf:ac:37:81:
         2d:ce:99:40:ec:c0:e5:f3:ee:3f:16:1b:e5:49:14:90:ba:1d:
         a7:d7:b6:bf:bd:89:d9:78:0a:ed:87:f0:81:20:25:ea:89:1e:
         63:b8:ef:b0:3f:7c:ac:b1:15:f0:10:e7:c9:c6:15:4b:4c:d3:
         52:be:9f:36:03:6e:42:dc:fa:7c:2f:86:95:9e:7d:98:f5:31:
         1d:e6:ce:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:39:11 2026 by rpki-client