Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/AKbDajcw44WbCCbrqquZruibnqw.roa
File:                     AKbDajcw44WbCCbrqquZruibnqw.roa (raw, json)
Hash identifier:          7pgXYdUrb9+1gpOAWcJ7J62LhoyPtatyVGpYWv7bV2M=
Subject key identifier:   00:A6:C3:6A:37:30:E3:85:9B:08:26:EB:AA:AB:99:AE:E8:9B:9E:AC
Certificate issuer:       /CN=36DA30F686577D6576F647B295455535835130C3
Certificate serial:       3A
Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/AKbDajcw44WbCCbrqquZruibnqw.roa
Signing time:             Tue 31 Mar 2026 08:43:18 +0000
ROA not before:           Tue 31 Mar 2026 08:43:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24287
IP address blocks:        192.50.12.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DA30F686577D6576F647B295455535835130C3
        Validity
            Not Before: Mar 31 08:43:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=00A6C36A3730E3859B0826EBAAAB99AEE89B9EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:b9:26:7a:b6:c0:4f:4f:c9:55:97:ba:a5:
                    1d:d8:f4:19:f2:0b:82:72:d6:9f:7e:5a:c4:5a:04:
                    7c:58:98:71:96:6b:3f:11:9d:0d:bd:a8:e8:40:ec:
                    52:e7:ab:ca:dc:77:ac:f4:77:57:2e:98:1a:2b:d0:
                    00:c9:95:05:d8:5b:8d:5c:f0:c6:50:6d:4b:e1:7c:
                    d9:88:ce:68:3a:10:10:51:c2:d0:fe:31:98:05:ff:
                    87:0e:f8:c9:11:8e:06:7c:0b:d6:a3:44:25:00:be:
                    d9:73:72:b7:9c:2c:96:ec:6b:6c:fb:1f:cc:89:1f:
                    df:25:04:bc:e1:ce:17:35:0e:b6:7f:d2:f7:51:c6:
                    99:10:55:ba:c0:91:92:cb:ca:cf:43:69:a0:f2:f0:
                    0b:43:f1:c4:f1:5f:b0:90:5f:d5:27:74:8c:56:8f:
                    d6:fc:12:c7:74:b9:fb:f6:29:af:4a:12:50:75:30:
                    ac:23:59:fb:ed:93:77:b2:d6:2a:6d:79:8d:f7:dd:
                    ef:0d:27:09:d0:b4:de:97:ca:66:94:02:34:22:e4:
                    ea:e9:55:31:09:d9:72:7e:19:5b:fd:59:10:d6:19:
                    df:4c:79:4f:eb:8c:b1:b5:c7:1f:d0:97:c1:2e:c0:
                    58:5e:93:ad:3c:75:ea:f7:fc:2b:11:44:80:d0:1e:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A6:C3:6A:37:30:E3:85:9B:08:26:EB:AA:AB:99:AE:E8:9B:9E:AC
            X509v3 Authority Key Identifier:
                keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/AKbDajcw44WbCCbrqquZruibnqw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:23:64:59:26:db:eb:08:6b:b5:a3:0e:ee:e6:4a:98:4a:30:
         e1:0e:cc:89:ab:6e:3f:1f:92:3c:07:9f:0b:2d:0e:70:20:91:
         ff:37:60:2c:a9:88:7b:9a:78:d2:26:83:28:33:4a:76:1c:4e:
         76:76:a5:f7:78:60:3c:72:9b:65:33:ef:f7:42:d2:fe:b3:86:
         79:1e:db:49:b3:36:0f:8e:82:ad:bc:38:ee:72:21:8a:26:eb:
         fe:51:d2:77:6c:95:97:ad:d7:65:b9:30:03:86:1b:14:9c:41:
         c9:47:cf:e3:e1:c5:aa:8a:70:2f:ba:d7:f0:2a:c4:4c:e7:f1:
         40:d3:e1:3c:7d:9a:86:00:d2:7e:b1:07:23:a6:47:db:77:b8:
         50:27:19:55:e2:d1:b3:e6:8a:be:69:9b:c8:03:eb:47:43:49:
         5e:22:b4:fe:39:14:52:f5:e7:03:82:88:e1:5a:c2:a4:c4:5b:
         5d:df:46:82:81:d0:6b:a8:82:2a:24:1c:ed:2b:c3:b0:69:0e:
         49:9a:29:ea:b4:6b:66:64:f4:0a:34:66:00:26:d8:64:f2:2f:
         3a:d3:6f:b5:c3:72:75:b8:ff:46:93:7c:ef:c4:b8:b2:b3:a8:
         d3:6c:18:82:c0:90:7f:27:b4:4f:1a:49:c6:26:57:6e:30:35:
         08:05:98:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:58:17 2026 by rpki-client