Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/VoD5ZKx58mb_dpl1ytc_417i5V0.roa
File:                     VoD5ZKx58mb_dpl1ytc_417i5V0.roa (raw, json)
Hash identifier:          zoEEfvdMIhr5v9V+z6/zYfCzzurhDTuZYwL0tQGEPRQ=
Subject key identifier:   56:80:F9:64:AC:79:F2:66:FF:76:99:75:CA:D7:3F:E3:5E:E2:E5:5D
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       93
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/VoD5ZKx58mb_dpl1ytc_417i5V0.roa
Signing time:             Tue 31 Mar 2026 07:29:22 +0000
ROA not before:           Tue 31 Mar 2026 07:29:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16625
IP address blocks:        115.69.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Mar 31 07:29:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5680F964AC79F266FF769975CAD73FE35EE2E55D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3e:23:1c:01:fa:d5:a6:7c:be:85:f4:3f:61:
                    57:6d:5b:f8:ce:4b:28:fd:44:1b:fb:5c:88:31:98:
                    af:79:1e:63:89:0f:f5:c4:3d:da:de:a8:54:6c:f1:
                    98:0d:ee:b4:db:08:01:03:8e:51:91:d6:01:32:b5:
                    ab:5e:db:f4:d3:7a:68:8f:5d:43:bf:0e:24:72:bf:
                    05:79:13:63:bb:36:b4:e4:76:95:c7:29:30:80:52:
                    44:dd:91:e9:b1:f7:80:0e:87:2f:df:d2:b3:2c:85:
                    27:64:91:ee:f2:8e:a9:18:b8:2d:b9:bf:04:d5:1f:
                    7e:98:54:24:01:2c:2b:1d:18:28:d0:c1:90:80:3a:
                    fa:a1:e3:42:40:77:d6:ed:6c:0e:92:81:2a:6f:bd:
                    7f:96:eb:56:31:6b:fa:35:4b:40:ee:23:40:be:07:
                    70:82:2e:39:ed:06:ad:ef:ca:f6:68:b7:b0:df:f2:
                    56:a8:cd:67:c1:7d:10:6a:2f:48:98:18:19:b2:3a:
                    b8:f5:e1:a7:32:94:cc:10:d2:25:a8:9e:8b:2e:09:
                    7d:fd:25:1a:13:a0:0b:48:5f:2a:80:37:fe:ef:16:
                    3a:87:17:4a:7c:15:a8:13:3a:cb:78:7a:30:2d:fa:
                    25:48:52:50:bc:a6:79:c9:7e:49:1e:87:83:d8:36:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:80:F9:64:AC:79:F2:66:FF:76:99:75:CA:D7:3F:E3:5E:E2:E5:5D
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/VoD5ZKx58mb_dpl1ytc_417i5V0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:2a:a3:55:b4:7a:64:de:99:65:71:dd:d4:de:c3:d5:a6:a0:
         87:c0:ce:2e:43:13:44:9c:54:19:47:e2:64:df:f4:10:64:12:
         0c:16:27:7a:d1:41:68:52:76:2a:63:e5:7f:42:fd:e1:57:e2:
         83:e7:32:83:8a:0a:ac:a1:de:c6:28:fa:7c:8b:b9:a7:cb:14:
         b5:6d:ed:58:21:fc:11:5e:96:54:06:c1:eb:1d:1c:e5:7f:44:
         7f:cd:ea:ab:28:c2:76:f4:d3:4e:eb:98:30:28:fa:71:94:8a:
         29:a1:3a:50:43:97:c1:88:e1:2e:17:1a:40:8b:53:cc:5e:9a:
         89:07:59:5f:8e:4c:52:ca:5b:49:d0:c5:e0:da:38:23:09:d7:
         23:a6:88:17:67:09:fa:3c:87:8c:45:eb:5f:1d:54:58:f9:83:
         76:ba:a2:60:1a:bf:c9:d5:4c:1a:3e:54:7b:29:88:dd:52:15:
         ad:de:26:27:4b:77:d1:5f:ca:a2:93:37:74:28:29:e0:b2:8f:
         4b:5c:4b:b8:23:14:a8:40:30:ef:84:58:73:97:3e:ab:7c:80:
         43:aa:ad:91:df:4d:91:9f:79:52:04:d1:ab:60:66:d2:f0:94:
         91:53:3b:92:46:2e:98:20:8c:20:94:09:9f:30:43:f7:c2:f4:
         50:47:64:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:05 2026 by rpki-client