Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/wG-bZJvktlZLa7Z1p6VeBuo3-fo.roa
File:                     wG-bZJvktlZLa7Z1p6VeBuo3-fo.roa (raw, json)
Hash identifier:          lWXQH6lSLJVrBi0nCqJ/60gj6odzTt+Arca683kxSBA=
Subject key identifier:   C0:6F:9B:64:9B:E4:B6:56:4B:6B:B6:75:A7:A5:5E:06:EA:37:F9:FA
Certificate issuer:       /CN=26F775BAC748E9582AC68A36AF57544FD74D8525
Certificate serial:       2E
Authority key identifier: 26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/wG-bZJvktlZLa7Z1p6VeBuo3-fo.roa
Signing time:             Tue 31 Mar 2026 08:35:22 +0000
ROA not before:           Tue 31 Mar 2026 08:35:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63772
IP address blocks:        103.99.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F775BAC748E9582AC68A36AF57544FD74D8525
        Validity
            Not Before: Mar 31 08:35:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C06F9B649BE4B6564B6BB675A7A55E06EA37F9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ed:8e:0b:b3:a7:e5:cf:87:b7:81:3e:4f:c0:
                    1b:b6:6e:ee:94:f6:0b:d2:6f:f7:73:23:db:9f:78:
                    54:99:d5:ea:62:e6:8e:4d:8e:fc:44:af:40:fe:04:
                    98:a7:05:20:63:6c:31:e5:8f:ad:63:c3:db:49:1d:
                    91:71:65:11:9a:6b:2d:9b:cf:19:c7:ad:64:c2:f0:
                    c2:c9:de:27:52:7e:cd:e3:eb:b5:50:b8:8a:33:93:
                    43:9c:f2:52:a2:02:b6:f7:99:b9:75:3c:b2:d7:f3:
                    6a:2d:4c:a3:3f:b9:31:e1:3f:6f:da:94:ff:ef:38:
                    80:27:7a:51:fa:3a:c3:19:3b:13:d4:80:64:d1:87:
                    71:8b:82:16:05:42:72:81:8d:16:8b:69:58:f1:c4:
                    ed:5b:bd:0a:37:f0:0d:bf:6a:a0:f5:18:10:c5:33:
                    03:73:f6:a1:e1:6b:70:46:ab:7b:e5:e4:54:82:b0:
                    a7:88:60:16:fa:d3:b8:59:7b:d0:42:9b:ef:26:ee:
                    d7:b8:dd:14:50:bf:f3:d4:97:77:97:3e:cf:53:86:
                    76:61:cc:e5:8d:6d:ab:96:f0:2c:50:7f:75:0a:62:
                    42:03:39:c8:60:b6:1a:06:43:03:f1:eb:6b:24:83:
                    57:f7:50:63:ee:82:4a:91:c6:70:8f:ae:e2:47:51:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6F:9B:64:9B:E4:B6:56:4B:6B:B6:75:A7:A5:5E:06:EA:37:F9:FA
            X509v3 Authority Key Identifier:
                keyid:26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/wG-bZJvktlZLa7Z1p6VeBuo3-fo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:95:79:38:c5:90:c0:d9:bb:87:86:71:60:3a:bb:b0:8c:5d:
         90:4d:6c:35:a1:07:7e:a8:ec:32:54:ba:e1:10:43:c8:3e:d9:
         a6:d9:34:e1:ce:5a:13:de:e0:2c:84:1c:0f:23:ad:9f:c3:0a:
         33:93:e5:aa:27:9f:60:45:42:3f:71:70:73:31:66:28:72:42:
         ba:08:08:57:39:bc:29:52:01:1b:9d:6d:38:17:47:e5:62:79:
         43:03:96:4a:61:3a:fe:71:5d:ea:8a:03:4d:6d:31:5e:cf:ef:
         8e:61:ec:ae:29:b5:74:2a:7f:82:65:bb:9d:9b:3f:92:39:e9:
         7e:c8:44:55:fb:5d:0f:6d:aa:bc:eb:23:85:06:16:d8:83:42:
         df:2b:20:03:61:22:08:bf:18:9f:1e:de:f2:f6:1b:66:c4:1d:
         a3:01:ec:31:77:26:b7:3c:56:db:18:92:5e:46:73:f1:4f:8a:
         6d:c0:f4:5b:a4:35:c1:5c:52:16:5c:6c:dc:7e:aa:89:12:f2:
         fe:28:ea:3e:b9:5d:85:4e:19:bb:ee:be:f9:fe:18:db:37:6e:
         a9:29:46:4e:15:5b:8a:e6:b8:ea:2d:3a:f7:d7:f4:51:64:f1:
         d5:c0:1e:2e:3a:41:8d:15:16:9e:63:f9:92:e1:ca:f8:ae:9c:
         27:6f:3f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:14 2026 by rpki-client