Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20102/_PGXPDMqwFgeeaPXOS5nWfANFKY.roa
File:                     _PGXPDMqwFgeeaPXOS5nWfANFKY.roa (raw, json)
Hash identifier:          STEU67SZV1eDwg++mPgb0dShFQX31iRllGeCX7BJsvI=
Subject key identifier:   FC:F1:97:3C:33:2A:C0:58:1E:79:A3:D7:39:2E:67:59:F0:0D:14:A6
Certificate issuer:       /CN=33D2C2C8816F30E6B58262B93C717C85513505C5
Certificate serial:       26
Authority key identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/_PGXPDMqwFgeeaPXOS5nWfANFKY.roa
Signing time:             Tue 31 Mar 2026 08:41:06 +0000
ROA not before:           Tue 31 Mar 2026 08:41:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131952
IP address blocks:        202.233.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D2C2C8816F30E6B58262B93C717C85513505C5
        Validity
            Not Before: Mar 31 08:41:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FCF1973C332AC0581E79A3D7392E6759F00D14A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:1c:1c:1c:fe:d9:37:cf:aa:99:89:6a:54:
                    a3:a9:0c:f5:3b:73:b4:0f:95:10:ee:06:73:90:00:
                    9e:71:3c:e6:a1:23:d9:37:53:0c:a7:8e:05:49:09:
                    2b:81:f1:4d:a5:9b:05:8d:08:c8:83:8e:1a:70:87:
                    de:a5:ca:ca:b4:23:79:47:12:e6:b6:ab:d0:0c:85:
                    f4:9d:dc:a9:f1:7a:e5:e9:50:22:1a:df:03:f2:c2:
                    4e:18:15:c9:e7:6b:af:17:12:92:ae:8a:13:0e:97:
                    d8:e2:b7:f7:6e:11:c8:85:7f:24:7d:c4:df:50:bb:
                    59:0a:8a:6e:6a:61:22:67:c9:65:2a:f3:54:a6:c4:
                    bd:7a:8b:99:72:a2:33:75:c6:a2:ca:ce:8f:ca:f7:
                    be:ef:ae:23:ee:98:61:b6:0d:42:b1:3a:5d:c0:7c:
                    41:38:75:92:b7:4a:ad:d9:20:cf:15:c9:ad:25:ee:
                    29:fa:7d:ab:2e:dc:41:1d:4e:d0:08:de:c6:06:69:
                    5d:41:2b:74:03:4c:9a:75:be:7d:7c:d8:96:05:83:
                    b7:97:91:4f:12:73:fd:f9:ab:7b:6a:01:2b:af:ba:
                    2d:17:db:be:55:08:02:60:4a:b6:60:96:0e:9c:1a:
                    91:fa:3d:fe:d9:22:eb:93:be:71:6c:12:6f:02:6b:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F1:97:3C:33:2A:C0:58:1E:79:A3:D7:39:2E:67:59:F0:0D:14:A6
            X509v3 Authority Key Identifier:
                keyid:33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/_PGXPDMqwFgeeaPXOS5nWfANFKY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.233.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:a0:5e:61:80:f4:8e:fa:ea:2d:e0:a1:1a:43:aa:02:83:4a:
         a9:eb:5d:f4:6a:2c:33:a7:0b:b9:02:1a:5d:ff:e3:e9:15:bd:
         1e:c9:11:14:ac:ba:98:3d:5f:b7:b4:f0:ec:a4:67:59:14:c6:
         ce:e6:97:4e:2f:ad:cf:dc:c6:5e:94:dd:d4:db:61:30:86:f1:
         fa:a7:e7:05:00:b2:bc:10:10:41:82:7b:3d:ee:3c:1b:4c:a1:
         c3:aa:5a:1c:c0:b5:2d:88:87:5d:81:b1:97:c5:7c:49:83:92:
         d1:dd:31:ba:a3:f5:b6:e8:ab:0c:97:cc:56:70:45:74:ef:34:
         94:47:9d:d0:f6:11:8f:fd:38:a1:83:bd:3a:85:e5:cc:4a:a8:
         b0:c8:31:23:be:fc:ef:3d:75:2e:43:db:17:d5:08:3b:c3:2b:
         f3:cc:c3:7d:19:05:82:e4:ea:79:19:a5:b2:eb:ad:bc:f8:31:
         08:5b:df:2c:c6:c0:1b:be:a0:50:a6:b6:c6:aa:c7:de:05:6f:
         ee:ba:60:ac:f2:93:1c:ef:05:ee:8e:b1:9c:3f:90:37:b4:6b:
         49:26:34:e0:1b:24:b3:03:bd:b8:e9:65:04:c9:25:06:7e:6b:
         81:c4:d3:2e:d1:1d:04:d6:16:c4:4f:03:95:c0:ad:0f:a8:30:
         d7:aa:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:43:54 2026 by rpki-client