Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20265/4IWV-67GGw-FAaJICeKBr6Ogdew.roa
File:                     4IWV-67GGw-FAaJICeKBr6Ogdew.roa (raw, json)
Hash identifier:          CLwmg3xoJroTMNdMA2nfzw2eXMOQkwvWAZHFAC/vH4E=
Subject key identifier:   E0:85:95:FB:AE:C6:1B:0F:85:01:A2:48:09:E2:81:AF:A3:A0:75:EC
Certificate issuer:       /CN=636333030C4B314581F9CC08CD8A3EF217AEDDAD
Certificate serial:       19
Authority key identifier: 63:63:33:03:0C:4B:31:45:81:F9:CC:08:CD:8A:3E:F2:17:AE:DD:AD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y2MzAwxLMUWB-cwIzYo-8heu3a0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20265/4IWV-67GGw-FAaJICeKBr6Ogdew.roa
Signing time:             Tue 31 Mar 2026 08:44:22 +0000
ROA not before:           Tue 31 Mar 2026 08:44:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     1008
IP address blocks:        160.22.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20265/Y2MzAwxLMUWB-cwIzYo-8heu3a0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20265/Y2MzAwxLMUWB-cwIzYo-8heu3a0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y2MzAwxLMUWB-cwIzYo-8heu3a0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636333030C4B314581F9CC08CD8A3EF217AEDDAD
        Validity
            Not Before: Mar 31 08:44:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E08595FBAEC61B0F8501A24809E281AFA3A075EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:d5:19:9d:fc:20:d6:d7:be:e6:e1:0f:dd:
                    7a:01:90:d0:31:63:2b:cb:d3:18:d0:24:e2:e2:3a:
                    54:7e:21:d8:51:20:65:7f:76:ee:af:18:7d:56:95:
                    f9:94:7e:4a:ee:4d:62:c4:db:0b:05:9a:5e:96:c0:
                    d7:14:ca:a5:b7:ac:eb:92:24:7f:51:84:9e:7f:04:
                    3a:fd:45:09:a6:68:08:7b:40:1b:b4:d0:1d:f7:5e:
                    21:49:d7:a6:d9:44:15:90:dc:fe:03:92:6e:2c:89:
                    54:62:65:e8:2e:8c:16:0e:ac:56:8d:23:f9:c4:e5:
                    c6:ee:69:b5:51:5c:69:53:e4:f2:d4:11:6b:61:ed:
                    c1:99:6e:a3:ac:97:ed:40:03:e3:b4:62:de:c9:29:
                    fd:0c:34:19:cf:2a:c0:72:54:62:0b:ac:70:2a:c6:
                    91:3b:00:85:51:24:7c:9b:ad:d2:f4:b9:31:a6:a8:
                    c9:9f:97:df:ba:7f:7d:46:a9:ef:88:76:98:8c:7c:
                    4e:41:58:8f:22:a3:45:65:f3:74:9f:8a:dd:5c:81:
                    08:26:d0:b9:e9:ef:63:d7:39:d6:ac:b9:73:c5:9f:
                    78:93:ff:14:1e:ff:60:f2:36:b3:93:03:09:b3:6e:
                    f3:de:52:52:7a:48:6c:2c:dc:c0:32:d4:74:8a:6f:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:85:95:FB:AE:C6:1B:0F:85:01:A2:48:09:E2:81:AF:A3:A0:75:EC
            X509v3 Authority Key Identifier:
                keyid:63:63:33:03:0C:4B:31:45:81:F9:CC:08:CD:8A:3E:F2:17:AE:DD:AD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20265/Y2MzAwxLMUWB-cwIzYo-8heu3a0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y2MzAwxLMUWB-cwIzYo-8heu3a0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20265/4IWV-67GGw-FAaJICeKBr6Ogdew.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:12:cc:84:81:e7:36:16:82:ea:a5:aa:36:ef:06:a8:3d:17:
         26:39:74:36:4e:40:f6:b0:cf:3f:20:c1:80:db:22:7c:5e:44:
         2c:bd:ec:8f:8e:9a:6c:64:e4:4a:f5:c9:9f:35:4b:92:af:1e:
         bb:49:54:79:1a:38:4a:d7:0c:d4:b9:81:9d:98:b6:fb:32:9e:
         93:5a:79:4b:24:93:00:c7:9e:42:62:ac:fe:d6:0f:b1:95:96:
         ff:5b:32:9f:9f:cd:97:5b:bd:f6:53:95:44:17:af:fe:a8:df:
         74:13:5f:91:51:ef:31:67:65:29:c4:88:ef:86:29:9a:3d:e2:
         78:60:6b:64:ff:d9:85:cd:65:84:28:cb:dd:2e:43:3d:3f:02:
         43:bc:55:7d:16:ea:d7:f8:17:0c:5c:72:27:c3:56:d0:08:8a:
         23:90:55:40:60:1f:a3:a6:1c:26:40:dc:3d:15:95:e3:c8:b6:
         ae:17:05:43:06:33:dd:4f:6d:c4:51:e8:c4:ca:57:5e:3b:c4:
         59:dc:ca:ce:55:52:d7:ae:7a:cb:48:c7:45:ab:2e:fc:ec:61:
         f4:cc:e8:e9:fb:e5:3a:70:67:66:b2:0b:be:2b:a9:9e:09:60:
         31:d4:85:87:c1:fd:b8:2d:1d:d7:f5:59:b3:71:19:44:5f:3a:
         a2:8c:7c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:26 2026 by rpki-client