Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/XW7-wHoB8BxJP3qDxWmCuFsDw-8.roa
File:                     XW7-wHoB8BxJP3qDxWmCuFsDw-8.roa (raw, json)
Hash identifier:          BhNMauS+7CadSnEZWdcerF8GZKkTtT8Ue6bQPjv/his=
Subject key identifier:   5D:6E:FE:C0:7A:01:F0:1C:49:3F:7A:83:C5:69:82:B8:5B:03:C3:EF
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       77
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/XW7-wHoB8BxJP3qDxWmCuFsDw-8.roa
Signing time:             Sun 01 Feb 2026 01:36:00 +0000
ROA not before:           Sun 01 Feb 2026 01:36:00 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        220.213.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Feb  1 01:36:00 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=5D6EFEC07A01F01C493F7A83C56982B85B03C3EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:b3:a7:5c:57:62:e6:38:13:ff:64:6a:ea:
                    3b:37:6a:db:34:b7:32:c9:65:ce:37:ea:dd:54:4f:
                    d1:89:d6:e3:29:55:45:c4:28:72:52:4d:ae:9f:c3:
                    1c:25:38:2c:04:de:df:94:7a:c4:4f:db:04:73:3c:
                    0d:56:10:29:f2:23:0d:d2:cd:2c:6c:16:27:85:64:
                    47:06:e9:a3:c4:8b:0a:12:06:47:37:b0:a1:2a:24:
                    f0:84:93:e9:e6:1c:42:c4:c6:4f:a6:3e:18:cb:80:
                    35:91:83:9d:15:42:24:1a:d4:fc:3b:57:e0:18:4a:
                    40:0c:f6:eb:71:04:6a:8d:12:35:4a:b2:07:00:66:
                    38:f4:f5:a3:d1:eb:40:ba:4e:ac:2c:96:2e:56:2a:
                    da:35:14:bf:c9:2c:b1:a0:11:f4:a0:55:60:22:a0:
                    dc:62:06:91:d8:05:14:fc:10:59:78:46:bf:a6:26:
                    2e:b3:56:e0:05:6d:0b:83:e3:20:e3:e7:18:a1:aa:
                    bb:78:53:bb:9d:ec:a9:d4:53:81:1e:63:60:ac:b0:
                    ac:7e:fb:c2:b3:af:f0:49:50:3a:02:aa:0c:c3:04:
                    78:2d:f1:c7:17:e4:01:63:bd:33:23:22:59:e2:f0:
                    b1:06:61:34:7b:a5:09:cc:4f:7c:cd:30:4a:66:b5:
                    8b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6E:FE:C0:7A:01:F0:1C:49:3F:7A:83:C5:69:82:B8:5B:03:C3:EF
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/XW7-wHoB8BxJP3qDxWmCuFsDw-8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.213.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:eb:25:6b:1d:73:92:57:2f:aa:0d:9d:36:b6:cc:8c:2e:14:
         53:54:0e:67:4b:58:f7:e3:db:a9:54:70:60:1b:53:88:8e:20:
         27:8f:78:b4:0b:ae:c2:a1:c8:d4:9d:c2:3e:44:62:54:eb:1d:
         24:1c:3a:0b:cd:cf:26:e2:67:44:86:c0:14:4a:e9:08:1a:ee:
         94:f7:71:78:fc:1a:c8:d3:de:29:c2:e7:5d:f5:b3:52:92:26:
         d3:74:48:66:8a:9c:be:73:3d:c0:2e:00:80:a9:51:74:4d:bd:
         78:5b:da:66:67:6c:ce:f2:36:5e:f7:70:e6:7e:9f:cd:b2:73:
         7a:b2:ef:d8:04:a3:d6:54:6b:e2:8d:11:45:04:1b:47:b9:25:
         2f:65:7d:ab:8b:62:f3:6e:96:82:0a:eb:65:60:3d:77:10:07:
         a1:78:14:72:61:87:7b:15:f8:23:41:3d:53:c7:b2:fd:22:b6:
         9d:07:71:f8:44:bf:a6:fe:f1:24:59:13:41:f8:47:6b:ab:fa:
         8a:4a:57:d1:71:8d:5e:68:87:2a:10:9c:75:97:c3:3e:05:e6:
         4a:ac:a0:b2:2a:ac:3e:74:c6:b0:ef:8b:fe:54:ba:b5:ad:bb:
         a2:8b:e3:12:53:be:2d:d5:e6:f4:1e:99:cf:16:58:3e:4f:63:
         b2:8d:83:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:04:53 2026 by rpki-client