Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/yNAbpCQ6ZGx1yG_EE_eftgMrUdc.roa
File:                     yNAbpCQ6ZGx1yG_EE_eftgMrUdc.roa (raw, json)
Hash identifier:          5yjcDstsF4EQolo0bZTZVhnSGulUVoYZSmNvVWTg12Y=
Subject key identifier:   C8:D0:1B:A4:24:3A:64:6C:75:C8:6F:C4:13:F7:9F:B6:03:2B:51:D7
Certificate issuer:       /CN=36DA30F686577D6576F647B295455535835130C3
Certificate serial:       33
Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/yNAbpCQ6ZGx1yG_EE_eftgMrUdc.roa
Signing time:             Tue 31 Mar 2026 08:43:15 +0000
ROA not before:           Tue 31 Mar 2026 08:43:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2907
IP address blocks:        192.153.104.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DA30F686577D6576F647B295455535835130C3
        Validity
            Not Before: Mar 31 08:43:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C8D01BA4243A646C75C86FC413F79FB6032B51D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cd:14:02:7d:b0:cf:12:d7:38:9d:3c:e6:5e:
                    4b:bb:c3:0a:35:f4:c6:a5:6e:aa:a6:12:0d:80:c6:
                    9a:43:7a:72:57:6f:6d:7a:b0:d0:ed:40:5f:ca:79:
                    f5:8a:63:ac:3c:6e:37:2d:05:56:a1:53:9f:d9:4f:
                    9c:33:a0:71:a0:3e:11:08:27:61:c9:4c:fc:4c:6b:
                    23:f8:04:e5:3e:fd:d2:1b:a8:ce:1f:70:70:1e:24:
                    77:cd:e0:e4:90:9d:03:b4:e6:c8:e7:87:f9:42:74:
                    fd:c3:2b:3b:f2:c1:29:10:a0:aa:c5:68:96:7a:c3:
                    c9:c4:ee:7f:b8:81:e2:0f:1a:38:b2:88:22:1a:2d:
                    60:c5:45:a3:a8:99:d1:ef:7e:72:22:3c:ec:7e:ff:
                    0f:16:e3:5c:00:ce:ec:4f:e1:f2:9a:fb:32:f9:cf:
                    ec:0f:20:c2:9d:b3:2b:7c:11:24:6a:27:36:d2:7c:
                    7d:42:8a:6b:b2:62:3d:ed:3b:de:35:98:a7:a1:98:
                    5f:a9:7b:7a:3e:01:56:62:71:20:e7:3a:90:06:e0:
                    ec:07:7c:06:27:7e:30:38:45:16:50:7b:31:98:cb:
                    8f:b5:64:13:f3:0a:ea:21:8c:21:f9:ff:d2:45:39:
                    f4:cb:09:22:c0:96:ab:42:d0:42:92:58:38:17:e2:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D0:1B:A4:24:3A:64:6C:75:C8:6F:C4:13:F7:9F:B6:03:2B:51:D7
            X509v3 Authority Key Identifier:
                keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/yNAbpCQ6ZGx1yG_EE_eftgMrUdc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:da:58:6a:17:b2:39:47:37:64:d9:04:66:8c:89:9c:fe:24:
         4e:72:ee:a4:fc:7d:9c:c3:d4:df:7e:23:60:21:e3:3c:61:eb:
         fe:29:20:e7:a6:09:8e:2e:b7:0e:c0:0d:1c:f5:7c:fa:5d:84:
         b8:87:19:7d:e6:fe:03:06:7b:06:f8:80:be:58:f9:27:aa:85:
         ae:0f:80:81:c5:de:7b:47:e3:cf:dd:92:a3:5a:84:32:d0:22:
         bf:d3:54:5d:76:38:7f:88:16:4e:50:49:8e:74:c2:9a:90:16:
         d4:c8:31:97:03:18:ff:aa:ce:28:bb:a3:67:b7:d2:5c:c9:63:
         b8:f3:1c:59:7c:2f:b1:46:04:c9:eb:94:5b:54:74:ca:33:d6:
         e3:73:f3:14:d0:9f:73:46:99:65:43:59:b6:ce:a5:b6:61:ed:
         3c:33:b9:27:e3:29:7c:0b:31:16:ce:0f:21:67:df:cc:09:15:
         0f:a1:37:7b:9b:95:d4:b4:ec:1e:1f:83:88:f8:6b:0d:dc:01:
         49:fb:25:d0:77:d6:a6:48:06:af:3d:92:23:7c:d3:d6:e2:1e:
         e3:31:9b:77:dd:df:20:4d:ed:30:f7:b4:e3:39:9f:70:af:b7:
         69:02:b4:b0:ee:51:43:f6:e7:3e:2b:c9:2b:3d:c3:02:e9:41:
         94:a7:1b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:42 2026 by rpki-client