Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/DnbLIf7CD0OQOmv9YCBJbA637v0.roa
File:                     DnbLIf7CD0OQOmv9YCBJbA637v0.roa (raw, json)
Hash identifier:          Z5dc0sZtZRFcJhxg0U7dApKC/DrmjCvMDLfMKU/zH4M=
Subject key identifier:   0E:76:CB:21:FE:C2:0F:43:90:3A:6B:FD:60:20:49:6C:0E:B7:EE:FD
Certificate issuer:       /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial:       60
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/DnbLIf7CD0OQOmv9YCBJbA637v0.roa
Signing time:             Tue 31 Mar 2026 08:16:33 +0000
ROA not before:           Tue 31 Mar 2026 08:16:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7672
IP address blocks:        119.63.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
        Validity
            Not Before: Mar 31 08:16:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0E76CB21FEC20F43903A6BFD6020496C0EB7EEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:64:af:3d:88:95:fa:c0:67:44:f9:f1:9e:
                    9e:b4:90:01:b5:86:59:4c:39:ac:ec:d4:d0:0b:1f:
                    d4:56:37:44:95:d1:6e:9d:b4:21:ee:bc:14:64:d4:
                    4b:6c:e2:04:f2:67:b0:5a:4f:2e:e8:7a:a8:fc:73:
                    e8:55:ce:1d:1b:12:16:36:4f:46:d2:b7:4c:02:04:
                    61:0c:82:42:93:ed:e1:33:b3:e2:2a:59:5e:e9:63:
                    5a:94:86:de:2a:c8:30:8d:27:05:90:73:8f:4e:09:
                    46:30:d1:33:96:91:9a:ca:84:e1:b0:0c:1b:00:ab:
                    32:5a:31:66:27:7d:b6:0b:ff:93:d5:66:db:e3:10:
                    dc:df:1f:0f:19:dd:62:12:a9:50:e8:a4:74:d6:3d:
                    ca:00:38:06:36:5a:f2:26:46:a9:24:8c:4a:57:3b:
                    89:8a:3d:66:08:65:a1:01:32:2e:70:4b:18:5a:04:
                    de:a7:3f:02:ed:3d:93:0d:bf:0e:fe:66:12:02:a8:
                    ca:b1:21:49:46:bf:22:38:06:b8:2b:67:57:9a:59:
                    f7:00:ea:cc:d1:0f:d3:45:9c:f5:7d:78:b0:21:9d:
                    4d:26:fb:5d:d0:fa:5a:e7:55:f8:2d:a8:ed:4a:d7:
                    a5:b0:b8:9a:b5:ac:ad:15:60:0b:6f:a1:b1:60:78:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:76:CB:21:FE:C2:0F:43:90:3A:6B:FD:60:20:49:6C:0E:B7:EE:FD
            X509v3 Authority Key Identifier:
                keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/DnbLIf7CD0OQOmv9YCBJbA637v0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.63.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:08:46:f9:8d:e7:0a:ab:57:5c:34:41:20:3d:cd:a7:21:39:
         ef:51:8e:b8:0d:dd:ed:4e:d3:bc:f7:fe:46:7e:0c:bf:36:27:
         fc:79:89:02:48:2b:d0:0d:ab:f8:7a:b4:16:1e:24:6b:3f:df:
         a8:5d:e0:dd:1a:21:70:17:48:af:6a:9f:f6:77:6f:e9:1b:8b:
         79:f8:4d:a0:91:de:9b:18:b2:9b:2e:3c:5c:ee:8f:5e:c6:63:
         f9:b8:77:68:91:f8:e2:a2:b4:48:28:a1:90:bd:18:af:06:7b:
         45:ee:45:1e:a9:89:ed:c6:e8:fb:c8:e1:1b:fc:24:7d:70:d7:
         8a:8d:a7:70:88:82:3d:35:1d:ce:dc:cd:96:74:47:23:1c:dc:
         88:f3:c5:14:d8:41:a2:ce:69:bf:ea:5a:f9:81:79:5b:17:0d:
         6b:26:a6:e9:20:a9:91:3e:9e:57:73:59:5b:dd:49:8b:51:d5:
         3e:af:ac:b1:6a:3c:ee:77:a9:fa:96:c5:53:f9:bf:c5:b7:86:
         45:29:4c:71:78:72:eb:3f:7a:7a:87:51:43:e1:41:05:ff:9b:
         63:4e:5d:c9:a1:fc:a9:f4:c4:9b:e5:b4:68:29:95:99:4c:d9:
         93:0e:d0:60:99:86:86:24:00:38:a4:9e:61:88:19:3d:65:36:
         d1:d9:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:25 2026 by rpki-client