Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/d2yUWW2M_gbGmM9eftlZkmwtcO4.roa
File:                     d2yUWW2M_gbGmM9eftlZkmwtcO4.roa (raw, json)
Hash identifier:          1Gs4K2PYmgS4SkybihFAovL3Klv2FbW7NZcikb39/Xs=
Subject key identifier:   77:6C:94:59:6D:8C:FE:06:C6:98:CF:5E:7E:D9:59:92:6C:2D:70:EE
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       73
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/d2yUWW2M_gbGmM9eftlZkmwtcO4.roa
Signing time:             Sun 01 Feb 2026 01:35:58 +0000
ROA not before:           Sun 01 Feb 2026 01:35:58 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        219.101.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Feb  1 01:35:58 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=776C94596D8CFE06C698CF5E7ED959926C2D70EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:bd:88:ec:84:2a:93:ed:da:59:13:17:c1:
                    88:66:89:15:28:21:af:cc:56:c8:67:6b:27:7e:3d:
                    9a:13:d8:d7:5a:af:6d:cc:4a:b2:28:38:27:35:8c:
                    f2:4d:fd:f3:3f:b0:3b:9a:5e:9f:37:d7:1d:36:05:
                    b3:5b:cc:83:d9:68:7d:aa:cc:f9:9a:65:92:d5:cb:
                    a7:19:c8:1a:45:9b:12:15:fb:e6:bf:b4:c9:a3:43:
                    fa:7a:b3:45:41:1a:15:d7:c7:c7:71:50:1a:b0:86:
                    be:89:6c:21:59:1e:de:a8:08:b9:98:a3:45:66:cf:
                    4c:b9:71:0c:05:60:1c:cb:dd:90:25:e6:74:5e:20:
                    f7:d9:63:75:f8:f4:5a:01:03:ae:09:b1:47:bc:6b:
                    aa:05:ac:39:95:99:75:6d:13:93:2d:e6:17:cd:eb:
                    6f:23:ea:9e:e9:54:a4:d4:3a:df:2b:47:8f:4b:0c:
                    31:7e:60:35:a0:3a:4f:17:20:0e:cf:4e:14:76:49:
                    22:ff:0e:73:96:c4:2d:70:95:3e:22:e4:b4:d4:a5:
                    3d:5f:5c:5a:12:3d:b2:8c:8a:0f:0b:24:95:4f:90:
                    8d:05:3e:f7:16:64:f7:a4:83:d2:8d:0d:1a:c1:c0:
                    d0:65:37:e4:aa:e0:7b:ba:3c:2a:f9:ad:a0:8d:9a:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6C:94:59:6D:8C:FE:06:C6:98:CF:5E:7E:D9:59:92:6C:2D:70:EE
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/d2yUWW2M_gbGmM9eftlZkmwtcO4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.101.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         75:29:da:53:d1:79:bf:4f:06:aa:18:4f:22:de:9d:aa:43:7c:
         97:82:33:23:3a:5a:53:64:40:37:7b:db:ac:b5:f4:05:68:7e:
         b9:60:06:d1:11:83:a3:5d:3d:4e:23:18:2a:45:bd:0d:24:b8:
         11:e7:0f:18:40:5d:5c:0e:dc:8d:a9:aa:1b:05:e3:85:77:4b:
         43:38:21:40:91:bc:bd:e8:86:3a:53:d8:40:24:11:7b:9f:77:
         cd:d4:ad:79:f7:21:34:41:11:e9:5d:95:8d:bd:b1:55:cd:88:
         7b:f9:a3:c8:1d:1e:3c:2e:aa:19:b2:ed:5e:91:9a:ce:3e:0b:
         ca:83:ab:61:84:d5:12:8c:2a:2f:73:37:49:91:75:16:c8:d8:
         c7:1f:27:7d:99:1e:18:05:78:aa:44:16:a0:8c:8b:91:d9:00:
         df:9e:a3:53:e1:09:37:9e:7f:33:ff:9a:24:ee:6b:2c:ae:11:
         0e:e8:29:78:99:5c:a4:f0:67:38:a7:3d:99:06:1e:e9:f1:79:
         42:59:a9:63:c1:fa:aa:11:fa:9c:4d:55:5b:f0:35:00:34:57:
         32:27:5b:26:d5:f0:43:43:82:8c:3f:e4:43:f1:c5:cc:d6:9d:
         4a:e2:13:00:b4:d3:cc:40:b2:f7:38:71:d9:a3:72:d0:0d:4f:
         e3:b6:8d:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:19:33 2026 by rpki-client