Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1949/Ck4WI4OvNyC7Nj8rMqu7hR5aXAw.roa
File:                     Ck4WI4OvNyC7Nj8rMqu7hR5aXAw.roa (raw, json)
Hash identifier:          73kAflpzuvIWmETV3nb6gcAyIiGlI4hcqnPkewMIJC4=
Subject key identifier:   0A:4E:16:23:83:AF:37:20:BB:36:3F:2B:32:AB:BB:85:1E:5A:5C:0C
Certificate issuer:       /CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Certificate serial:       67
Authority key identifier: DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/Ck4WI4OvNyC7Nj8rMqu7hR5aXAw.roa
Signing time:             Tue 31 Mar 2026 07:37:13 +0000
ROA not before:           Tue 31 Mar 2026 07:37:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2504
IP address blocks:        192.50.26.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
        Validity
            Not Before: Mar 31 07:37:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0A4E162383AF3720BB363F2B32ABBB851E5A5C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:c4:f4:ea:f3:ae:92:48:c8:46:c2:40:ec:
                    aa:b5:70:43:b6:14:dc:5c:39:dd:31:17:99:0c:6a:
                    62:5f:71:2a:46:fd:ea:c0:c2:b4:c7:a4:fc:16:48:
                    e7:43:5e:8c:f7:9d:80:a6:23:30:2c:3a:db:d8:27:
                    f1:75:bc:2a:0b:12:e1:07:fd:c4:cd:7c:3c:8c:aa:
                    f8:c9:81:46:1c:17:a7:fa:40:b8:a7:6a:b0:19:a1:
                    7e:5f:d5:dd:b7:6b:15:b0:54:0a:0b:66:5e:a9:a7:
                    d0:a5:2e:34:ce:75:a0:0c:74:c9:51:b0:bd:ed:db:
                    c9:cf:18:4e:f4:66:d7:61:ca:d8:b2:09:f0:f7:b6:
                    4a:b7:bd:d6:76:d2:24:91:5f:7d:44:34:fe:68:be:
                    15:3a:20:bf:1d:5a:23:d6:18:a3:03:36:59:24:92:
                    65:82:46:a9:eb:9d:8a:99:e7:ff:68:f9:f6:89:f3:
                    b9:74:8f:f5:c4:84:8a:bc:9c:0f:af:93:82:17:61:
                    06:d4:0f:94:e6:7e:4c:79:99:e0:bd:72:72:83:5f:
                    81:8d:58:e8:12:8b:c1:db:80:ba:bb:0b:7d:fe:65:
                    dd:ab:5e:ac:3d:de:33:d2:ee:b9:41:72:06:49:ac:
                    be:56:84:68:3c:ba:9f:1c:65:33:bc:4d:a2:f2:1c:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4E:16:23:83:AF:37:20:BB:36:3F:2B:32:AB:BB:85:1E:5A:5C:0C
            X509v3 Authority Key Identifier:
                keyid:DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/Ck4WI4OvNyC7Nj8rMqu7hR5aXAw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:88:10:ef:6a:9f:b1:5c:9c:08:d7:84:68:ac:10:15:03:7f:
         25:ca:f9:48:55:1d:00:22:42:8f:e7:83:30:1a:bd:4c:c1:ac:
         f0:c7:37:b3:21:a1:15:c0:78:c0:92:93:1e:84:8b:d4:13:53:
         44:f7:61:3f:c8:89:bd:f7:a7:71:b8:7a:5a:76:fc:5e:5d:db:
         92:81:ad:e5:72:b9:07:18:34:cb:d2:9a:ab:ea:ed:2a:b0:4e:
         da:e5:24:88:24:5b:3a:02:48:44:16:68:f7:57:69:04:74:c0:
         b7:4d:f8:56:ce:07:cd:93:0b:09:68:62:f9:f3:b9:a5:b6:cf:
         cc:01:17:bd:4b:a4:cc:f3:8b:58:d6:a6:de:1a:5e:56:97:f2:
         ff:29:34:c1:d5:b9:8d:19:b8:dd:16:d1:2b:bd:74:49:78:95:
         2c:8e:80:69:20:1c:0a:24:6d:c0:37:26:db:75:ab:7f:a6:26:
         53:91:eb:f4:78:89:a2:91:ee:30:79:4d:95:e9:7d:f0:c1:41:
         a4:a6:e5:18:8a:90:fa:7e:8c:f3:c6:b2:b0:5e:9a:44:3b:69:
         f8:b6:33:04:f4:42:7e:e6:d5:a4:64:f7:37:8b:46:a8:e0:db:
         40:a2:ec:d5:2c:f6:22:5d:aa:11:7a:0e:2d:aa:54:a4:7c:c3:
         7d:85:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:02 2026 by rpki-client