Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/DIy7IpqHf-TqXAmWjzuagMxzwv8.roa
File:                     DIy7IpqHf-TqXAmWjzuagMxzwv8.roa (raw, json)
Hash identifier:          EHQrOBUJi8F0FYCGa/GlJCJ1iTrVv/F7lgLjgL4JUKs=
Subject key identifier:   0C:8C:BB:22:9A:87:7F:E4:EA:5C:09:96:8F:3B:9A:80:CC:73:C2:FF
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       A0
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/DIy7IpqHf-TqXAmWjzuagMxzwv8.roa
Signing time:             Tue 31 Mar 2026 07:52:30 +0000
ROA not before:           Tue 31 Mar 2026 07:52:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        110.232.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Mar 31 07:52:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0C8CBB229A877FE4EA5C09968F3B9A80CC73C2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:4a:e1:bc:28:e0:8d:ea:df:4c:72:fc:e4:
                    0e:c6:1e:fe:04:47:08:82:61:83:86:4b:ca:58:6f:
                    cf:fa:ab:8f:c2:f4:38:b6:58:09:20:33:93:5d:a0:
                    44:12:ff:89:65:67:e6:74:8c:9b:55:8a:c3:74:ce:
                    ec:2c:5c:90:dd:16:be:eb:27:00:8c:9c:83:ee:2e:
                    3f:10:af:7b:ae:40:e4:b1:7f:1d:9b:9e:02:41:97:
                    e7:50:4a:59:93:22:25:de:d5:63:b2:b6:61:72:92:
                    05:e7:9b:f5:d0:98:af:be:52:cb:d1:63:f3:04:3f:
                    d2:19:f0:07:76:3e:36:6f:c7:ac:94:cd:e8:1f:3e:
                    32:bd:b3:07:8d:a0:a8:5b:e4:a3:65:c3:64:cd:5b:
                    63:77:32:25:b0:a3:51:99:35:c4:40:a7:c3:2e:2a:
                    6c:14:12:d3:1a:6c:eb:23:01:53:34:ca:f5:d7:a2:
                    9d:9f:ce:98:4c:be:69:0a:c0:47:77:72:34:fc:99:
                    fb:89:e3:02:f0:f6:e9:55:f2:62:de:24:5d:d8:3f:
                    60:e1:97:90:9f:e7:cd:50:82:be:2e:88:92:be:d8:
                    91:d5:fc:eb:85:14:a4:ab:90:10:4c:f9:d5:03:75:
                    a6:65:67:9b:6f:88:a9:d0:bd:29:06:3b:fb:11:ca:
                    47:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8C:BB:22:9A:87:7F:E4:EA:5C:09:96:8F:3B:9A:80:CC:73:C2:FF
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/DIy7IpqHf-TqXAmWjzuagMxzwv8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:c3:ad:86:e8:be:a3:92:59:96:f2:81:4d:0d:8f:d2:a6:f0:
         e4:db:01:dd:c2:1a:9c:d3:49:1b:19:b1:bc:83:55:34:d0:df:
         45:72:06:74:d4:02:e8:cb:f9:fe:56:1b:9e:79:4a:f6:24:44:
         35:9e:33:a3:42:bd:6f:46:e8:57:39:61:3d:dd:39:f1:8c:41:
         9b:8a:ee:a3:44:73:12:10:9c:27:86:9f:6f:b8:f5:42:2d:02:
         6d:a1:bd:54:3b:eb:ba:1d:4d:b3:d3:6d:ea:9f:ec:0b:1e:10:
         80:7b:c4:df:08:79:11:b0:93:68:1f:1f:c3:ef:d9:11:dd:66:
         d9:7b:19:46:f6:9c:1e:f0:42:3c:34:e8:1f:1a:25:d6:b4:21:
         26:ec:16:56:a0:72:b3:f7:36:1d:6a:64:1b:31:4f:ea:4e:33:
         67:46:3f:d1:b4:95:a9:f7:0a:3d:ee:32:1c:e9:95:a5:fb:4f:
         91:96:73:15:63:e2:9e:ff:cd:13:8b:fe:5b:85:ed:4f:70:89:
         23:d9:27:33:29:a5:b3:1a:51:9a:9a:98:eb:32:ac:3b:1f:9a:
         57:eb:a5:61:a6:93:c5:5e:2b:65:78:b9:0b:ea:9c:44:45:ec:
         45:e3:f7:64:e2:f3:a1:56:50:6d:db:9b:21:9c:1a:6b:76:f6:
         19:ca:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:34 2026 by rpki-client