Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/25mSffADTDEwUH0INQB7EcKqZuc.roa
File:                     25mSffADTDEwUH0INQB7EcKqZuc.roa (raw, json)
Hash identifier:          1LZHuonsA2UFU+rNcGn2uglwZVxd63g5fx39UmJ5tZA=
Subject key identifier:   DB:99:92:7D:F0:03:4C:31:30:50:7D:08:35:00:7B:11:C2:AA:66:E7
Certificate issuer:       /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial:       5D
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/25mSffADTDEwUH0INQB7EcKqZuc.roa
Signing time:             Tue 31 Mar 2026 08:16:32 +0000
ROA not before:           Tue 31 Mar 2026 08:16:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7672
IP address blocks:        110.232.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
        Validity
            Not Before: Mar 31 08:16:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DB99927DF0034C3130507D0835007B11C2AA66E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:03:10:9d:d0:80:36:9e:f8:63:5e:47:4f:
                    65:0b:a1:22:54:44:90:d7:39:21:6e:1e:51:fa:ec:
                    e9:22:7b:aa:ee:0e:d7:9f:74:9f:ca:3e:06:d8:b8:
                    a5:a4:c0:d4:72:27:6e:0d:f7:09:44:47:0e:cd:be:
                    b2:82:a6:7a:1f:9a:ee:7e:af:9c:e3:b6:bd:76:2d:
                    e7:7f:f1:03:14:dd:2e:b3:7f:5e:1b:a9:5f:9b:17:
                    c1:7b:5d:b6:a7:ef:bc:b9:f1:bd:af:69:37:df:5a:
                    54:25:7c:2c:b5:90:95:75:95:ba:20:6e:8b:61:54:
                    a5:86:bb:bf:94:27:8b:c7:4d:d2:2c:3d:89:69:12:
                    28:1f:e6:d4:35:6d:55:62:2f:17:d6:c7:73:12:4a:
                    56:f1:fb:48:b8:d3:8a:a7:e1:89:ff:10:0c:72:89:
                    0a:70:46:4d:86:32:94:df:31:3c:71:be:ef:fc:59:
                    1f:e5:08:09:96:4b:d3:25:53:13:eb:e0:c9:ab:0f:
                    50:fb:e7:07:17:bf:2e:38:ef:65:b6:1a:29:8a:a9:
                    93:24:38:90:f9:00:48:2e:ce:ce:7d:4a:34:ed:70:
                    f5:d6:87:24:0a:4c:28:e7:32:ae:3d:d7:00:d2:fc:
                    fb:cd:04:2e:ec:dc:d3:b5:84:64:b2:a4:f8:0d:9d:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:99:92:7D:F0:03:4C:31:30:50:7D:08:35:00:7B:11:C2:AA:66:E7
            X509v3 Authority Key Identifier:
                keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/25mSffADTDEwUH0INQB7EcKqZuc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:30:1f:62:04:94:1b:67:a9:38:98:ff:0c:82:1d:29:8c:be:
         6f:04:0c:fe:9d:93:f8:48:b3:04:ca:ac:1c:2a:4a:e7:31:72:
         cf:1c:f0:ce:1b:ed:08:34:14:ed:24:70:c8:66:d8:76:12:94:
         90:f5:31:55:fb:6c:a0:f8:f6:d6:12:04:28:18:e0:79:14:2d:
         21:30:96:4d:a2:07:24:0b:bf:f4:0d:c2:9b:e3:a5:38:e0:ba:
         0a:73:cb:81:92:6f:6e:4d:7f:ec:76:0a:55:58:c0:6f:f8:9e:
         ba:c1:f1:62:94:b7:4e:64:0a:dd:d8:70:12:74:21:e0:5f:a2:
         d2:18:90:d2:07:0a:55:f5:e1:3e:68:38:20:ca:b0:05:78:d0:
         67:f5:db:fc:70:c9:43:8d:df:e4:d7:a7:ef:2f:56:d0:1f:54:
         9e:eb:b7:9a:64:b3:51:56:9f:06:b0:b8:61:47:c6:28:49:94:
         47:78:da:a9:9d:5a:46:74:6e:b6:ba:9b:43:3f:3e:a4:9e:fb:
         40:f2:15:76:b8:23:00:47:41:bb:19:4a:05:35:14:d8:1e:93:
         f0:2e:73:e2:1c:cf:ec:fc:5d:61:e3:fb:9d:85:22:ab:b8:80:
         1d:f3:58:a0:98:82:c2:a8:02:ea:27:8c:9e:c7:e9:54:76:47:
         c2:90:66:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:16 2026 by rpki-client