Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20053/9BUezZGDjUJI1iY4PyjeXDKa9dQ.roa
File:                     9BUezZGDjUJI1iY4PyjeXDKa9dQ.roa (raw, json)
Hash identifier:          8oUZigP6xUAyYnVaZhTU4cFGImMWFGGlZz8cfFY9T84=
Subject key identifier:   F4:15:1E:CD:91:83:8D:42:48:D6:26:38:3F:28:DE:5C:32:9A:F5:D4
Certificate issuer:       /CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803
Certificate serial:       24
Authority key identifier: DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/9BUezZGDjUJI1iY4PyjeXDKa9dQ.roa
Signing time:             Sun 01 Mar 2026 01:36:19 +0000
ROA not before:           Sun 01 Mar 2026 01:36:19 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     131926
IP address blocks:        69.6.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803
        Validity
            Not Before: Mar  1 01:36:19 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F4151ECD91838D4248D626383F28DE5C329AF5D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:fe:5b:d3:cc:75:21:37:fd:ef:03:ea:f2:
                    c8:1d:a2:46:d2:73:ee:ac:12:0d:2d:a3:31:c5:a6:
                    2d:34:b0:f0:85:ad:08:7f:09:6f:ab:e3:f1:c0:b5:
                    a1:d6:cb:ee:c9:59:63:65:f5:a1:61:60:fb:6a:d3:
                    8b:4d:0a:81:de:4f:d0:e2:7c:84:8a:03:c7:a6:92:
                    64:24:79:3b:62:d0:5b:24:96:b5:05:b5:d2:68:72:
                    98:35:a2:52:55:19:30:cd:61:fb:6c:e7:48:07:f1:
                    f6:d2:02:e3:e1:1a:7a:d7:11:48:71:59:1e:d8:58:
                    83:28:1e:ad:da:70:3e:0e:a1:17:a5:4c:e0:85:3d:
                    28:f9:69:3a:15:ad:e5:c5:54:4e:a8:fc:e8:43:90:
                    0f:87:eb:d0:7d:8c:67:fc:09:39:4b:60:ea:e1:33:
                    a8:b6:12:b8:d2:c8:be:26:b2:25:8a:98:a1:87:b9:
                    1b:ec:f8:ab:35:65:51:5e:d6:2a:2c:81:08:87:de:
                    58:31:e9:7a:7d:0d:da:c1:ec:bb:a3:3b:9c:92:6c:
                    53:18:8a:57:d8:fd:4b:b6:37:15:26:1b:7d:60:7e:
                    35:b9:ff:5d:12:75:ee:fe:c4:f9:19:87:42:a3:f7:
                    6e:16:e3:be:b2:ed:2f:e2:88:12:3a:ec:d4:82:74:
                    5e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:15:1E:CD:91:83:8D:42:48:D6:26:38:3F:28:DE:5C:32:9A:F5:D4
            X509v3 Authority Key Identifier:
                keyid:DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/9BUezZGDjUJI1iY4PyjeXDKa9dQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.6.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:56:97:40:7d:e8:b0:e0:6e:d8:ea:27:2f:5c:a3:99:4c:c5:
         c5:06:7c:40:04:b0:9a:7f:be:9a:82:fc:7d:37:f6:4d:3f:3f:
         f1:fa:f5:8a:16:fc:f7:49:d9:64:b5:17:21:84:f1:60:6c:a1:
         ea:c8:cf:df:81:81:1e:19:aa:a6:06:dd:30:a4:3a:71:52:1c:
         69:67:37:53:ca:3b:c6:1c:11:d7:ff:78:b4:30:cf:89:fd:04:
         d9:e6:ba:79:23:8a:24:13:72:72:a3:df:74:c3:1e:7d:13:af:
         cf:a4:d0:1b:2e:49:9e:6d:53:ce:76:32:d4:27:95:b9:5d:88:
         a5:57:c6:1c:1e:2c:4a:e9:55:73:6a:06:6a:d0:27:d7:f8:a9:
         06:5f:fd:87:74:e2:ef:11:02:83:79:2f:5e:f8:a4:56:86:65:
         7b:b9:b0:e3:48:57:db:c9:df:d8:56:41:6c:f6:7c:03:f3:be:
         7d:b2:51:5c:44:0d:62:bc:16:71:68:1f:0d:a9:bc:c8:54:cb:
         0b:e6:5c:aa:18:88:95:c3:d0:d0:73:66:92:fb:f6:1c:04:1f:
         90:95:51:31:13:79:2a:76:d5:28:1f:ca:6d:f2:cb:ca:4a:da:
         87:fb:9e:32:f8:32:fb:d4:1e:c9:82:c4:94:d5:df:2a:f3:f3:
         b1:91:fe:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:15 2026 by rpki-client