Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ShkBRAOAVtzAbSkKaHIp3TPnTVs.roa
File:                     ShkBRAOAVtzAbSkKaHIp3TPnTVs.roa (raw, json)
Hash identifier:          GnBLIQKMs3C/fkCjGMo8xmuPkHiUXTHrLSxsrHp+oz4=
Subject key identifier:   4A:19:01:44:03:80:56:DC:C0:6D:29:0A:68:72:29:DD:33:E7:4D:5B
Certificate issuer:       /CN=671B1E7D7C9D2925FFECAE1507C53F5041A50BF2
Certificate serial:       05
Authority key identifier: 67:1B:1E:7D:7C:9D:29:25:FF:EC:AE:15:07:C5:3F:50:41:A5:0B:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxsefXydKSX_7K4VB8U_UEGlC_I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ShkBRAOAVtzAbSkKaHIp3TPnTVs.roa
Signing time:             Thu 17 Sep 2026 08:29:10 +0000
ROA not before:           Thu 17 Sep 2026 08:29:10 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     131944
IP address blocks:        103.115.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxsefXydKSX_7K4VB8U_UEGlC_I.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 20:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=671B1E7D7C9D2925FFECAE1507C53F5041A50BF2
        Validity
            Not Before: Sep 17 08:29:10 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=4A190144038056DCC06D290A687229DD33E74D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e2:f4:2f:c6:9f:61:94:9a:8e:94:d4:b7:a4:
                    e4:8a:9b:64:45:7c:a7:ef:af:2f:cc:ef:3b:39:98:
                    13:4a:8c:7c:39:cd:b2:64:e5:ee:fd:e0:76:1d:ca:
                    df:d2:1e:d0:74:35:72:6a:15:fd:eb:94:70:00:45:
                    f7:a7:3a:82:5b:a3:9d:a3:0a:82:9d:12:cf:20:70:
                    b1:38:f3:0b:b3:3d:0e:e3:e5:1d:19:27:9a:99:25:
                    5e:44:09:1b:46:eb:e5:44:cf:e9:a0:f2:ee:22:9c:
                    54:a9:49:98:90:f4:b5:25:19:ab:72:68:57:cd:82:
                    8f:6b:7a:af:41:36:64:56:4a:f6:d1:35:ea:74:29:
                    d8:6e:79:09:41:e1:a3:aa:0c:5a:6f:f0:16:87:79:
                    db:96:32:55:85:62:80:53:de:0e:46:ce:f5:69:1a:
                    16:c8:02:a4:2b:26:fe:00:fc:a1:5d:a2:fd:bf:10:
                    cd:14:4d:c7:6f:f1:5b:0f:3a:f6:eb:f5:56:e0:be:
                    5f:32:07:93:8b:2e:83:7e:48:aa:93:f0:dc:5f:26:
                    a5:95:9f:3a:e6:a4:99:68:5c:54:ff:fa:1f:49:c3:
                    ec:c0:bb:20:9b:82:17:50:20:ad:ee:c3:cb:cb:7d:
                    20:ea:e1:ca:14:4f:6e:20:f7:67:13:c8:1d:ec:4c:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:19:01:44:03:80:56:DC:C0:6D:29:0A:68:72:29:DD:33:E7:4D:5B
            X509v3 Authority Key Identifier:
                keyid:67:1B:1E:7D:7C:9D:29:25:FF:EC:AE:15:07:C5:3F:50:41:A5:0B:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxsefXydKSX_7K4VB8U_UEGlC_I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ShkBRAOAVtzAbSkKaHIp3TPnTVs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:f7:ae:84:31:dc:a1:69:9a:4c:40:1a:8a:95:94:da:98:8d:
         57:a1:62:ee:10:14:2e:5b:87:2f:0c:02:33:9c:2a:09:f6:e7:
         49:e8:5d:c6:12:a8:db:90:27:73:3f:3b:12:67:9d:c8:4a:6b:
         3d:cb:94:e6:33:4b:0f:c7:d1:f1:c5:be:28:0a:cd:79:b2:53:
         dd:80:2c:3b:fd:15:92:eb:2e:ba:8e:e9:ab:9e:8d:1d:37:17:
         f6:ee:68:60:36:a2:11:1b:b5:10:db:8e:f4:43:94:91:74:a5:
         c0:e2:8b:65:f2:53:63:ed:51:50:15:05:0d:fb:77:9b:ff:ce:
         a8:10:5c:00:de:a0:28:93:03:c8:a4:74:41:a3:23:5d:78:a2:
         74:de:28:31:b6:70:d5:cc:6f:68:b3:42:22:73:b0:be:c2:8d:
         9e:fb:8b:01:d4:29:be:51:bb:cd:d8:d2:43:03:7d:88:c8:cc:
         05:66:57:0b:0c:c8:65:9d:8c:95:c5:53:03:9e:39:83:10:51:
         40:e1:2b:13:87:f2:1c:46:f6:d9:16:b9:6a:63:c9:99:d5:fc:
         db:d6:c8:34:49:d0:e4:08:6f:1c:a5:7e:af:9e:0f:b6:61:5e:
         29:63:f6:a9:11:bd:0c:0f:22:35:65:77:60:e6:6b:8c:db:f5:
         bd:eb:a0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:14:33 2026 by rpki-client