Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/KKXE-HkRT4-7XrjsVZGrZK1_mzI.roa
File:                     KKXE-HkRT4-7XrjsVZGrZK1_mzI.roa (raw, json)
Hash identifier:          5K6VBPVTgCVZJ/xfwbISr+CEtgiEorU6tw0EYd9CYuk=
Subject key identifier:   28:A5:C4:F8:79:11:4F:8F:BB:5E:B8:EC:55:91:AB:64:AD:7F:9B:32
Certificate issuer:       /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial:       37
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/KKXE-HkRT4-7XrjsVZGrZK1_mzI.roa
Signing time:             Tue 03 Mar 2026 08:03:02 +0000
ROA not before:           Tue 03 Mar 2026 08:03:02 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     18283
IP address blocks:        101.50.48.0/21 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
        Validity
            Not Before: Mar  3 08:03:02 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=28A5C4F879114F8FBB5EB8EC5591AB64AD7F9B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:70:2a:8e:ad:84:81:e5:bd:d7:f8:79:61:
                    b2:5c:e4:07:5f:97:b0:c6:68:e9:e3:28:10:3c:b2:
                    8d:58:5d:ac:e9:e9:1c:69:e5:71:52:bd:32:82:99:
                    5d:ae:b3:4d:29:fd:c2:ef:ba:ce:06:30:dd:00:3e:
                    90:f8:ac:f4:dd:98:ed:a4:79:82:5b:1b:01:47:6a:
                    10:3f:32:6d:d6:10:d4:b0:c8:2f:d6:87:ab:39:1e:
                    08:43:39:9c:59:05:79:1a:99:d6:97:ac:82:1b:d6:
                    5e:fc:36:a6:7a:ee:51:a6:4b:69:fc:93:3c:75:0d:
                    49:ff:2c:6b:6d:9c:59:6c:f8:a5:18:e7:b8:6e:11:
                    6a:63:21:3b:70:7d:73:84:8e:32:59:77:cd:84:6a:
                    24:a2:e3:f1:02:97:49:97:a8:21:97:3a:18:96:f1:
                    9b:6b:57:30:d9:fe:0b:6b:84:01:0f:57:14:33:85:
                    d7:b7:5e:0c:a6:a7:41:f1:70:5b:c7:67:4c:c4:82:
                    a5:42:3c:0d:8f:47:48:c8:02:70:34:7a:dd:ee:8b:
                    09:c8:8a:4f:fd:b5:73:3b:af:58:56:30:0d:e6:3d:
                    c4:91:d8:59:26:cc:ca:07:7f:7b:4a:9f:b7:f5:dc:
                    a1:fa:60:88:bf:b5:f3:de:8c:62:cf:9d:be:a7:8e:
                    67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A5:C4:F8:79:11:4F:8F:BB:5E:B8:EC:55:91:AB:64:AD:7F:9B:32
            X509v3 Authority Key Identifier:
                keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/KKXE-HkRT4-7XrjsVZGrZK1_mzI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:27:cf:a3:80:3a:14:ec:5b:7a:1d:85:7c:7f:ad:8d:2a:22:
         13:50:a8:02:33:8d:bc:68:b4:61:18:80:d2:6e:06:23:d9:6b:
         ef:e9:f3:26:9e:4e:4f:5c:f4:1b:f0:62:28:56:df:bc:0a:a1:
         6a:ea:8c:1a:86:44:87:05:34:77:55:97:f7:be:df:ba:08:ce:
         26:ae:6c:ef:60:f2:97:62:55:cf:52:fa:5e:33:6c:49:52:8b:
         97:75:3b:dd:f2:6a:f6:2c:a3:ac:40:4c:13:fa:f0:15:5a:ba:
         c2:2b:01:6d:21:dc:69:75:8b:56:04:fb:ce:0e:89:ba:06:42:
         56:73:5f:bf:ea:f8:d7:17:ab:a3:b5:35:bc:21:13:8f:0c:57:
         0f:f5:21:b8:11:4c:fa:47:38:39:e9:12:c1:22:96:3e:31:3b:
         24:31:d1:41:37:a5:fa:8a:51:3a:b3:7d:d2:21:c4:74:35:41:
         07:14:cc:43:fa:99:d6:41:72:a7:e4:67:01:05:be:28:50:f8:
         91:02:ef:69:93:e6:ca:dc:7a:7c:c6:3a:ec:c2:5c:7b:05:fe:
         af:b2:0d:7b:66:a0:85:d2:75:90:4c:f5:88:4c:a7:ac:5a:50:
         31:cf:72:c3:f2:a1:a2:62:5f:d6:3e:fe:93:c0:94:16:ba:7a:
         2c:0b:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:06:36 2026 by rpki-client