Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/P8ysW_kh4jwQeksNPDm_kkrAnpc.roa
File:                     P8ysW_kh4jwQeksNPDm_kkrAnpc.roa (raw, json)
Hash identifier:          XU4ZefGi4joK7nncke3c6I/C0x6+1BmpTJtFP5eB1w4=
Subject key identifier:   3F:CC:AC:5B:F9:21:E2:3C:10:7A:4B:0D:3C:39:BF:92:4A:C0:9E:97
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       8F
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/P8ysW_kh4jwQeksNPDm_kkrAnpc.roa
Signing time:             Wed 18 Mar 2026 09:45:44 +0000
ROA not before:           Wed 18 Mar 2026 09:45:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2915
IP address blocks:        126.209.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Mar 18 09:45:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3FCCAC5BF921E23C107A4B0D3C39BF924AC09E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:4b:77:6d:d9:c9:db:8f:4f:b3:2e:73:97:
                    59:8f:65:9c:27:4c:dd:8e:c6:58:f6:9c:ca:2f:b3:
                    64:4b:1d:8d:7d:66:6f:8b:43:3c:55:7a:c3:f4:8a:
                    3a:d1:d9:cb:4f:8d:de:1f:fe:d3:95:73:42:91:a1:
                    ca:1a:a7:ea:44:d0:0c:56:c8:3b:cc:36:c2:46:34:
                    4a:4f:55:c2:41:02:3e:ab:4b:33:22:d9:5c:3e:b3:
                    f1:8b:c7:ad:7d:e2:09:99:ec:5a:c8:fb:27:c6:ba:
                    dd:4c:4f:5d:fb:f9:8e:f7:24:6f:32:1e:56:ef:a0:
                    af:1b:8a:8e:06:53:31:55:66:7f:74:4c:7b:ef:bc:
                    88:55:7f:91:1a:84:0e:97:86:8a:59:57:1f:44:96:
                    0d:1e:e5:e1:f2:38:db:9d:6b:bf:b5:ff:dd:b8:66:
                    e8:bf:54:1b:92:a0:8e:28:42:6d:8f:9d:e8:64:7a:
                    af:cc:90:d6:a7:d3:a5:04:af:c1:13:e1:c6:09:b0:
                    a3:1f:e4:60:6b:ae:11:0c:68:c8:65:0b:4f:2a:d7:
                    e9:f5:1a:9a:21:96:e3:ad:56:0c:3b:cd:a2:39:cd:
                    a5:3d:14:e4:8e:f4:a1:b1:54:06:7a:02:bd:13:fc:
                    76:49:1e:0e:f8:71:a0:96:b0:75:bd:9b:88:81:c2:
                    bf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CC:AC:5B:F9:21:E2:3C:10:7A:4B:0D:3C:39:BF:92:4A:C0:9E:97
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/P8ysW_kh4jwQeksNPDm_kkrAnpc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.209.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:a3:53:08:58:7c:b1:6e:3d:c3:1c:10:d2:7c:de:f6:9b:f5:
         7a:8a:cf:c6:1e:57:45:aa:c1:5a:42:69:89:ef:19:0e:0e:39:
         0f:60:41:52:5c:14:41:21:bf:f0:78:1e:fe:73:88:f3:7c:05:
         67:44:5b:81:ca:21:53:71:7d:19:39:72:b0:43:d5:a0:ba:40:
         d0:2e:6e:25:67:29:f3:43:8d:1f:7d:eb:e5:30:4f:33:56:66:
         76:8c:d4:a6:ef:3f:16:a6:57:eb:65:db:cb:18:6b:4a:09:65:
         54:f9:14:84:ea:ee:b5:64:93:20:f1:29:c7:e4:eb:d6:40:a5:
         9b:ef:45:3f:a2:9d:4f:16:25:35:aa:8b:1f:fd:6a:ed:58:02:
         87:61:65:90:b3:57:18:fd:de:fd:26:50:0c:55:c9:70:a8:6b:
         3b:0f:10:3a:95:fb:71:4e:54:ea:e6:62:73:ba:44:cd:91:05:
         8d:c0:ee:d7:2e:a5:9a:e0:36:91:5f:04:21:58:9a:1f:ed:66:
         c1:fe:77:0f:0d:b7:2a:36:78:1f:86:05:e9:cc:f0:3c:9b:86:
         98:82:9b:6e:75:90:0b:a5:a2:45:d4:35:f5:8e:3c:d4:f8:e4:
         ae:60:c8:0d:58:63:c3:25:50:d6:f0:ed:07:20:33:d0:7e:01:
         dd:75:ba:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:43:04 2026 by rpki-client