Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/224/64k4iIkNz-KI1bNp9DY4WhOVxdQ.roa
File:                     64k4iIkNz-KI1bNp9DY4WhOVxdQ.roa (raw, json)
Hash identifier:          U/yS8LpD5f+CnzAjZVbqJG0+GW2jJ42LoxSeRo/0vGo=
Subject key identifier:   EB:89:38:88:89:0D:CF:E2:88:D5:B3:69:F4:36:38:5A:13:95:C5:D4
Certificate issuer:       /CN=D623C38C2A127007F93E7C840DF875022E51C547
Certificate serial:       32
Authority key identifier: D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/64k4iIkNz-KI1bNp9DY4WhOVxdQ.roa
Signing time:             Tue 31 Mar 2026 08:41:27 +0000
ROA not before:           Tue 31 Mar 2026 08:41:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7668
IP address blocks:        202.213.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D623C38C2A127007F93E7C840DF875022E51C547
        Validity
            Not Before: Mar 31 08:41:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EB893888890DCFE288D5B369F436385A1395C5D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:58:29:5c:1b:59:64:8f:51:86:82:af:eb:
                    ca:e2:50:d0:5e:90:55:e7:0d:64:72:6c:76:87:d9:
                    81:40:27:75:3e:e5:fa:2a:d0:cc:2f:ba:e8:21:92:
                    b5:8d:ff:74:58:9a:55:b7:d5:f7:db:92:90:37:3d:
                    4e:28:30:0d:eb:4c:6b:cb:97:f7:e9:f3:90:24:5e:
                    50:79:c1:7d:9d:6e:2a:33:a3:c3:ce:06:38:86:7a:
                    67:20:37:55:84:86:80:02:c8:7c:4c:55:5c:dc:20:
                    54:fa:df:e4:39:84:5a:1f:e8:ff:eb:b9:8a:65:62:
                    ce:44:b5:5f:b0:98:da:5b:00:8b:ac:f3:3f:44:ff:
                    94:bb:d3:ed:7f:15:a9:d7:26:f2:27:d2:a8:4b:49:
                    0b:0f:1c:a2:2d:b6:81:fe:2c:79:c8:13:53:33:2d:
                    69:34:c9:ac:07:13:8b:83:41:4d:6a:3c:ff:4f:a2:
                    95:9a:85:07:bf:32:c5:0a:14:bf:fb:a0:0f:bf:4c:
                    e8:82:63:78:e9:12:37:8b:0d:c8:20:bf:40:c3:da:
                    36:fd:fd:d7:cb:10:eb:5a:17:f8:35:04:e4:ac:ac:
                    03:1b:61:01:72:cd:36:45:9c:aa:f6:b4:9f:e0:14:
                    36:08:0f:c1:64:28:ef:65:c7:d8:6d:49:63:36:84:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:89:38:88:89:0D:CF:E2:88:D5:B3:69:F4:36:38:5A:13:95:C5:D4
            X509v3 Authority Key Identifier:
                keyid:D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/64k4iIkNz-KI1bNp9DY4WhOVxdQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.213.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:07:c1:b4:3a:05:01:4d:e8:a8:b1:6b:17:06:cd:b4:ff:92:
         6d:ef:bc:f8:49:ad:ec:4b:bc:53:98:ef:79:22:de:cd:a5:35:
         7a:21:cb:78:71:bb:fc:2c:e9:14:59:55:58:f1:8e:a6:c5:74:
         63:01:0d:f0:fe:4b:cf:f3:47:82:7c:0c:a2:e1:de:b9:e1:b6:
         9a:90:bf:51:73:e7:88:10:d5:3a:da:dc:55:c4:b8:7f:f3:93:
         ef:87:69:1d:4c:74:84:a4:d9:33:02:c6:98:a1:4a:f8:6b:ff:
         17:2f:f8:b0:d5:13:14:34:af:75:00:33:16:0b:d6:f2:ab:01:
         17:47:7a:ed:24:da:54:f3:b0:02:88:56:3c:d0:a6:38:3f:10:
         6d:3e:7d:da:3f:41:eb:b0:70:21:62:63:bc:3d:c1:d6:4e:f2:
         83:a4:e1:c9:7e:e3:91:87:10:d4:95:4f:a2:f0:55:70:66:8e:
         be:b1:be:9d:e0:b6:45:4f:f6:ab:ca:78:f8:d2:83:b5:e5:5b:
         a6:e2:74:cf:67:62:d5:3d:f1:6b:26:83:b8:6b:bd:9c:68:07:
         27:e8:75:d1:a9:c7:ba:fc:72:78:f5:bd:e0:16:6b:66:fd:57:
         f5:40:c7:87:44:c5:d0:3b:97:66:00:8e:f7:8e:b9:2f:75:26:
         42:d6:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:34 2026 by rpki-client