Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/mwpyhfr02EPtwQQvjfmcC2hwNLo.roa
File:                     mwpyhfr02EPtwQQvjfmcC2hwNLo.roa (raw, json)
Hash identifier:          jRZYAjTqNECYAbS1mNaaXuQqce1W8rko2z0pG0cu1BY=
Subject key identifier:   9B:0A:72:85:FA:F4:D8:43:ED:C1:04:2F:8D:F9:9C:0B:68:70:34:BA
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       96
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/mwpyhfr02EPtwQQvjfmcC2hwNLo.roa
Signing time:             Tue 31 Mar 2026 08:30:41 +0000
ROA not before:           Tue 31 Mar 2026 08:30:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2915
IP address blocks:        211.14.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Mar 31 08:30:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9B0A7285FAF4D843EDC1042F8DF99C0B687034BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:13:82:72:62:e1:93:41:13:81:9d:49:84:
                    0d:36:8c:9f:97:e9:d0:93:98:2d:d3:34:d9:5b:e0:
                    8c:80:e7:0b:ac:83:d4:e8:78:91:89:b9:0f:7b:2b:
                    2b:7a:af:38:37:bc:c4:b0:72:05:b2:5b:32:a0:14:
                    d5:51:a3:b7:65:64:8c:06:e8:ad:7f:c5:77:7a:59:
                    9e:7e:2d:77:97:1f:f7:83:e6:c9:d5:c9:3f:58:5f:
                    3d:fd:64:2c:69:cc:8e:6f:99:28:b9:e5:6b:2a:82:
                    7f:97:e3:fa:65:45:01:47:91:76:04:82:51:f2:75:
                    0e:c7:17:3d:46:41:0d:1a:4c:0f:67:a3:71:de:62:
                    a9:41:a5:1a:ad:76:2d:1a:28:37:5e:05:7a:94:59:
                    bb:ef:db:a0:53:53:06:4a:a6:e9:37:dc:a5:70:04:
                    9d:64:d2:58:54:b7:d6:25:fc:a2:71:26:c4:41:c3:
                    07:01:17:d5:d0:47:cc:50:8a:99:35:22:c9:a6:33:
                    23:ea:db:fd:c7:79:e9:6a:6e:9e:c8:c5:35:03:5d:
                    87:d6:33:da:b8:fc:c8:a9:30:3e:b5:b4:15:a8:21:
                    83:5b:ed:6a:73:d8:4c:96:26:37:df:93:88:f7:65:
                    c9:8b:3a:67:da:80:d0:16:70:eb:b4:6f:7c:e4:b0:
                    59:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0A:72:85:FA:F4:D8:43:ED:C1:04:2F:8D:F9:9C:0B:68:70:34:BA
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/mwpyhfr02EPtwQQvjfmcC2hwNLo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:b7:ed:b9:e3:7e:36:77:01:b1:37:03:93:22:e6:57:91:60:
         3d:e5:f4:53:e8:68:be:cd:48:cc:05:dc:36:22:61:b0:c6:0e:
         e3:73:ec:a5:0e:b5:20:f6:0c:ad:86:e0:f9:ab:2f:e3:84:89:
         76:80:dd:23:77:07:d2:6a:ca:df:25:1f:f5:d2:e4:07:2c:78:
         28:9c:ce:8a:e4:00:05:7f:a0:75:40:b6:ba:38:83:8c:59:38:
         99:96:b6:a6:d4:77:db:65:24:17:4f:28:ac:4e:b0:9f:b9:17:
         00:d1:22:fa:86:9b:99:9e:25:29:35:2c:5f:5b:52:b6:66:97:
         72:c6:90:1b:7e:60:69:8f:0d:02:08:f4:52:54:54:1f:ee:ad:
         c6:b9:e0:5b:2f:50:5e:15:e2:e3:09:21:ba:ac:7b:84:a1:c9:
         f1:69:60:c1:d0:c8:75:d3:db:d2:05:71:a2:e7:3a:b7:81:8e:
         62:fd:d7:69:2f:fa:3a:a6:7e:31:68:8f:87:8b:74:32:36:d2:
         2f:f8:39:03:ed:49:e2:31:53:bf:6f:59:c1:78:46:46:90:e7:
         05:0a:de:b7:29:68:11:3f:68:67:c9:ca:1d:16:98:c3:2e:89:
         4f:89:50:b1:b8:8d:56:d0:ef:26:2c:f1:80:6b:24:b8:f7:5d:
         b0:7f:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:31:19 2026 by rpki-client