Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20297/OlcNDUb0-xWEwrBCVxWhzbAKq8I.roa
File:                     OlcNDUb0-xWEwrBCVxWhzbAKq8I.roa (raw, json)
Hash identifier:          0NAsiilFrTmjUHB/ET2K19kK29geGM6mR6GkqBHfmSo=
Subject key identifier:   3A:57:0D:0D:46:F4:FB:15:84:C2:B0:42:57:15:A1:CD:B0:0A:AB:C2
Certificate issuer:       /CN=5C59845A8FCDD26E1C1CCE64D37B23473EF73E0E
Certificate serial:       0B
Authority key identifier: 5C:59:84:5A:8F:CD:D2:6E:1C:1C:CE:64:D3:7B:23:47:3E:F7:3E:0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/OlcNDUb0-xWEwrBCVxWhzbAKq8I.roa
Signing time:             Mon 14 Sep 2026 03:01:41 +0000
ROA not before:           Mon 14 Sep 2026 03:01:41 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     197196
IP address blocks:        162.4.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C59845A8FCDD26E1C1CCE64D37B23473EF73E0E
        Validity
            Not Before: Sep 14 03:01:41 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=3A570D0D46F4FB1584C2B0425715A1CDB00AABC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:43:a2:67:51:b6:5a:09:c9:1e:0c:40:34:
                    b2:ec:81:7e:b9:16:3b:7e:5c:59:53:83:a0:f4:3d:
                    2a:0e:06:05:ab:a0:13:b7:1e:13:4e:0d:5f:83:79:
                    b4:98:51:1e:24:20:9d:09:ac:d5:e4:d6:53:46:e0:
                    1a:f3:6e:db:a9:e6:80:b5:79:b6:90:39:83:1a:8b:
                    e4:41:35:4c:6b:66:e1:dd:3d:dd:f5:4b:64:73:65:
                    00:58:39:87:8f:f5:b6:37:6b:e8:af:c0:64:6a:ba:
                    8c:7c:86:28:7f:84:de:a2:8c:93:59:f1:51:2e:37:
                    76:6e:72:db:13:33:a4:b3:ec:87:04:1c:df:11:13:
                    a1:14:cb:7f:8a:45:65:20:f6:32:0c:03:c4:f3:a3:
                    6b:3c:1a:ca:3f:62:e5:e7:f4:b9:8b:8e:f5:f7:72:
                    1c:24:7a:a4:f3:8e:6a:f8:d8:a4:f7:35:51:ea:67:
                    b2:7e:96:a0:8a:e1:0b:d8:fd:4d:ad:01:df:e8:09:
                    f6:af:5c:c1:7f:e1:cd:ab:8c:73:34:be:99:8f:a3:
                    6e:ee:0c:22:9e:6c:d9:7b:44:e0:b1:65:77:a6:7f:
                    1c:ac:52:dd:e4:c0:21:a9:e8:86:d8:58:cb:c4:b9:
                    4f:50:67:3f:77:0a:79:00:73:6c:33:56:69:05:42:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:57:0D:0D:46:F4:FB:15:84:C2:B0:42:57:15:A1:CD:B0:0A:AB:C2
            X509v3 Authority Key Identifier:
                keyid:5C:59:84:5A:8F:CD:D2:6E:1C:1C:CE:64:D3:7B:23:47:3E:F7:3E:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/XFmEWo_N0m4cHM5k03sjRz73Pg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFmEWo_N0m4cHM5k03sjRz73Pg4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20297/OlcNDUb0-xWEwrBCVxWhzbAKq8I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:e5:39:a5:a3:c2:77:bd:ff:2a:85:59:cb:93:8f:be:af:7c:
         20:8c:41:61:9b:17:71:59:12:be:b5:07:b1:e7:a5:8f:a1:2c:
         80:2f:07:40:98:4f:88:85:0d:c2:f0:6c:09:41:72:40:d5:93:
         d3:f0:41:16:61:88:dc:ac:f3:0e:f9:77:a4:14:7d:73:47:18:
         ce:77:88:26:3b:38:80:7b:0a:3a:37:1e:40:9e:b8:1c:ea:54:
         bb:d2:ee:06:f1:3a:5b:cc:e0:76:e0:14:13:e0:52:16:8b:8d:
         69:b2:da:4a:55:72:df:b3:a9:81:dc:31:ca:f6:ee:01:40:02:
         47:88:77:bd:2f:30:5a:ce:f4:70:da:67:d8:9f:64:b7:60:8a:
         9f:a0:17:10:0d:23:71:f8:ff:8d:69:c3:21:c0:dc:1a:0c:04:
         a2:7f:86:15:d8:e1:be:f2:7c:ea:a9:8b:9c:30:27:4d:f0:24:
         0f:13:1b:8e:c3:83:f1:04:4d:91:d0:bd:17:3e:e2:a8:c1:80:
         3e:ec:11:4e:d1:02:1c:38:5b:1f:6e:84:9a:76:f5:fe:df:ac:
         e4:24:f1:3a:52:bf:aa:20:32:d5:10:48:04:64:b8:b4:0f:e9:
         cf:38:e4:45:a8:0a:93:7a:70:b5:65:63:99:9a:21:f7:e4:6f:
         55:ba:1a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:50:04 2026 by rpki-client