Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20065/d0dlhxutYGnCVU4ASHZrzuie2mg.roa
File:                     d0dlhxutYGnCVU4ASHZrzuie2mg.roa (raw, json)
Hash identifier:          QUQDy3nPftJHc9TNpTBtNP6XsN2/nNAMBpEzD9mciuY=
Subject key identifier:   77:47:65:87:1B:AD:60:69:C2:55:4E:00:48:76:6B:CE:E8:9E:DA:68
Certificate issuer:       /CN=671B1E7D7C9D2925FFECAE1507C53F5041A50BF2
Certificate serial:       03
Authority key identifier: 67:1B:1E:7D:7C:9D:29:25:FF:EC:AE:15:07:C5:3F:50:41:A5:0B:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxsefXydKSX_7K4VB8U_UEGlC_I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/d0dlhxutYGnCVU4ASHZrzuie2mg.roa
Signing time:             Tue 15 Sep 2026 06:40:06 +0000
ROA not before:           Tue 15 Sep 2026 06:40:06 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     38634
IP address blocks:        202.223.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxsefXydKSX_7K4VB8U_UEGlC_I.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 20:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=671B1E7D7C9D2925FFECAE1507C53F5041A50BF2
        Validity
            Not Before: Sep 15 06:40:06 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=774765871BAD6069C2554E0048766BCEE89EDA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:d7:d3:fe:9e:66:48:4a:1d:0a:84:6c:6a:
                    6c:64:52:48:4d:dd:5e:50:75:22:38:b5:ad:36:e2:
                    70:95:08:59:5c:26:67:05:ab:a4:6b:c0:25:99:58:
                    4a:e2:cf:6e:04:f2:f4:d6:03:ba:b9:0e:75:e4:15:
                    04:98:c7:34:74:53:48:4c:c8:a0:2e:cd:3e:bb:f4:
                    1c:a7:e0:c4:06:e8:e3:32:44:38:26:3a:a1:e3:c2:
                    e0:6c:8d:e1:66:62:a5:c9:a3:6b:b9:55:ca:9e:29:
                    ad:42:6b:84:13:a8:ee:d7:e2:59:f4:95:ab:6e:91:
                    61:9c:a8:0c:6f:7b:5b:b8:e5:b7:fe:03:2d:e4:0e:
                    53:4f:af:6a:3c:bd:2a:2e:8e:8c:ec:22:8f:74:56:
                    e1:b9:ad:a1:60:ff:23:48:2d:2e:af:18:6c:09:56:
                    8e:be:24:53:c3:63:58:c3:60:77:49:0d:d9:76:f8:
                    f2:7b:6e:7a:86:d4:d6:cc:2a:eb:e1:59:f9:38:65:
                    85:12:d8:f7:9b:b8:23:70:ba:63:f2:d4:7e:f6:e6:
                    48:af:f0:ca:f0:70:fe:e6:27:ba:57:fe:df:60:27:
                    c9:28:3c:96:d6:bb:5e:78:7a:d3:3a:ee:40:58:40:
                    9b:1a:80:cb:b5:d1:3d:c2:73:fc:40:b3:7b:af:f5:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:47:65:87:1B:AD:60:69:C2:55:4E:00:48:76:6B:CE:E8:9E:DA:68
            X509v3 Authority Key Identifier:
                keyid:67:1B:1E:7D:7C:9D:29:25:FF:EC:AE:15:07:C5:3F:50:41:A5:0B:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxsefXydKSX_7K4VB8U_UEGlC_I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/d0dlhxutYGnCVU4ASHZrzuie2mg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.223.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:ba:11:44:c5:a8:81:f3:05:07:d7:5c:9e:c3:be:ac:84:e4:
         d2:97:47:98:ab:d8:67:e7:6b:f5:32:34:2a:f6:5d:b1:93:37:
         07:ac:03:e5:66:1b:b1:32:89:c4:96:0e:86:8f:22:c1:33:0f:
         04:ea:00:74:79:1d:0c:97:14:85:ab:35:9d:ad:59:94:e0:10:
         20:0c:ff:d7:9c:6d:10:f4:97:cd:2d:19:2f:6f:2e:93:fa:e7:
         fc:18:8f:5d:2f:7f:54:3f:8a:e9:c7:55:24:a0:2d:59:09:2a:
         d3:24:39:8d:d0:62:d4:d0:59:c3:d6:53:f3:02:e3:ff:23:5e:
         01:3e:bc:66:a7:24:3d:0a:31:c3:d9:e5:70:83:11:2e:e4:4a:
         03:8d:5e:fb:4f:19:2e:7c:9f:d6:7c:f9:67:24:88:26:44:6e:
         a0:e5:ef:87:d4:ba:33:ce:08:54:f4:bb:5c:80:fb:70:2d:e9:
         6e:7b:ac:82:e4:e1:92:fe:2a:86:a2:59:77:5b:17:76:76:d7:
         cd:17:b7:7b:92:08:5a:a2:5d:ae:2e:d1:0b:38:0a:d9:a8:e0:
         66:50:1b:86:c9:87:2d:8e:af:95:ce:69:00:93:45:2d:ee:e3:
         4b:70:e0:0e:04:56:f3:86:69:bf:2f:1d:09:c9:09:21:58:a3:
         06:c9:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:26 2026 by rpki-client