Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/V5gM_u21zryCW4CMvKV8R2dUL_c.roa
File:                     V5gM_u21zryCW4CMvKV8R2dUL_c.roa (raw, json)
Hash identifier:          CSM2zFUpg8ceCsVUFzEHWi32f6Yr0RnX/aMKcB9ntvM=
Subject key identifier:   57:98:0C:FE:ED:B5:CE:BC:82:5B:80:8C:BC:A5:7C:47:67:54:2F:F7
Certificate issuer:       /CN=EE749AEDB27453827DBA8325F42984FA79C3CF76
Certificate serial:       2F
Authority key identifier: EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/V5gM_u21zryCW4CMvKV8R2dUL_c.roa
Signing time:             Tue 31 Mar 2026 08:35:21 +0000
ROA not before:           Tue 31 Mar 2026 08:35:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63772
IP address blocks:        172.86.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE749AEDB27453827DBA8325F42984FA79C3CF76
        Validity
            Not Before: Mar 31 08:35:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=57980CFEEDB5CEBC825B808CBCA57C4767542FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:34:8f:03:ad:5a:30:92:98:84:bd:6f:bd:
                    7a:56:7c:b0:fa:a2:e7:96:0d:87:29:a1:5c:94:52:
                    f3:3e:58:ce:25:f1:35:50:50:ce:e3:1a:70:04:dd:
                    24:43:e1:ee:57:23:d6:64:31:fd:85:56:e4:d1:f2:
                    a6:44:e2:b1:4c:27:fc:0a:ce:fc:cc:53:56:ca:37:
                    a0:b1:d0:42:19:e0:aa:ae:18:74:a0:90:20:41:0f:
                    10:01:6e:99:5d:a7:ea:92:da:60:2d:11:e1:52:54:
                    4b:94:9b:e2:76:ad:c5:ae:84:92:25:cb:f8:b7:6a:
                    06:0e:b5:73:82:81:94:b5:63:1a:c5:a8:b1:e1:3e:
                    19:74:63:44:34:74:3f:53:e1:13:3c:7f:ef:ec:ef:
                    c4:6f:2f:a8:de:9c:75:45:67:f8:25:6e:3b:1c:11:
                    a7:03:56:ea:1e:16:81:14:3c:38:36:b5:d9:3d:ad:
                    ac:2d:0e:88:c1:b9:05:84:e6:02:1d:78:83:0c:f0:
                    2b:37:14:db:08:64:61:31:3e:5a:30:2c:fc:e2:7f:
                    f4:da:2a:ce:e4:ae:d0:d7:1a:6d:73:60:d0:ad:59:
                    b9:43:d2:c8:00:18:c9:2b:7a:cc:fc:f7:01:34:1d:
                    17:5f:a5:e1:36:97:03:f7:42:66:44:f7:7c:14:f2:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:98:0C:FE:ED:B5:CE:BC:82:5B:80:8C:BC:A5:7C:47:67:54:2F:F7
            X509v3 Authority Key Identifier:
                keyid:EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/V5gM_u21zryCW4CMvKV8R2dUL_c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:06:38:f8:56:bd:f7:8b:eb:9d:95:49:2f:5e:c1:8c:f2:3d:
         a6:89:41:84:bd:b4:bb:86:05:05:72:91:a9:44:39:72:2f:f0:
         3f:b2:79:b0:d5:da:73:d1:68:6f:2e:5b:a2:62:e2:45:fe:a1:
         43:79:95:13:8e:08:4e:dd:21:0e:bf:64:83:d2:9e:fe:6e:62:
         22:7d:ac:da:4d:87:ff:00:a5:45:dc:2a:27:ee:e2:42:17:01:
         39:c2:b8:22:b0:3f:96:3b:ef:1b:59:0f:7f:5d:54:01:b3:43:
         a6:df:94:15:f7:34:d3:55:88:7c:06:53:06:49:46:9f:0a:92:
         1d:6e:0d:c3:fc:35:5e:aa:8e:e8:08:c4:69:7b:6a:2b:3a:46:
         de:9f:bf:41:69:0f:e6:c1:7a:45:c0:7f:be:90:19:c6:d0:be:
         67:50:a1:ad:47:9d:42:ba:25:44:21:bb:16:6c:03:14:d2:c8:
         8d:60:53:ad:66:0c:7d:0b:3c:a5:a8:ec:0a:2f:99:3e:3d:17:
         fd:ed:05:f3:f2:ec:8a:80:4b:d9:2b:8d:0f:0b:1e:e3:8d:33:
         e1:71:56:00:59:53:e3:c8:35:8a:fb:47:3d:ef:42:ee:6f:1e:
         a2:d1:23:74:65:1e:06:77:7a:a3:7b:36:c1:ea:57:2d:c1:4d:
         b2:a0:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:51 2026 by rpki-client