Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/VQfHZDUin3SP2vF8kLeN6VPBvW8.roa
File:                     VQfHZDUin3SP2vF8kLeN6VPBvW8.roa (raw, json)
Hash identifier:          93X5sldaSTcS0gs0H+83LkZfx+nSlJlBbBAMw/pqD7I=
Subject key identifier:   55:07:C7:64:35:22:9F:74:8F:DA:F1:7C:90:B7:8D:E9:53:C1:BD:6F
Certificate issuer:       /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial:       61
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/VQfHZDUin3SP2vF8kLeN6VPBvW8.roa
Signing time:             Tue 31 Mar 2026 08:16:34 +0000
ROA not before:           Tue 31 Mar 2026 08:16:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7672
IP address blocks:        202.125.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
        Validity
            Not Before: Mar 31 08:16:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5507C76435229F748FDAF17C90B78DE953C1BD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:fd:34:d1:81:35:2e:ba:5a:22:db:15:cf:
                    13:49:52:77:33:ec:d7:d5:24:9f:c0:66:2f:89:29:
                    3e:27:eb:b0:c0:5c:b5:06:94:78:b0:f9:bb:81:ea:
                    a9:8f:7b:c1:0a:0a:3e:3a:e8:c3:74:4b:3b:f8:4f:
                    f6:65:b2:1f:49:48:5d:a3:9a:b3:ee:68:7b:5a:fa:
                    b3:e5:ec:e5:97:e3:17:78:54:22:13:ac:85:c9:8f:
                    dc:02:ce:08:3d:df:d1:06:d3:ae:55:21:30:55:35:
                    75:69:c6:07:93:19:ec:f3:0d:03:04:97:71:1c:f1:
                    b5:bc:bf:f1:da:ae:dd:5c:28:d4:b1:7d:48:84:8f:
                    76:c9:cc:03:4c:fd:85:e3:83:3b:8a:f7:94:a7:ad:
                    84:3f:ba:38:0e:7c:6b:42:3b:66:37:80:27:67:2e:
                    67:89:15:1c:6c:8b:e6:a1:12:5a:7e:d5:71:d5:e8:
                    61:f9:ae:3c:36:8b:b6:76:b9:02:fb:be:b3:95:a4:
                    34:68:fb:09:29:1a:5f:e3:23:28:9a:2e:c0:a3:85:
                    97:2a:de:96:34:d8:ed:45:af:eb:3a:60:30:17:12:
                    f5:2a:57:7d:13:16:c1:74:15:ff:81:ca:09:6a:da:
                    90:5a:2a:6a:3d:db:97:a7:e9:ff:f5:2f:80:3f:4d:
                    aa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:07:C7:64:35:22:9F:74:8F:DA:F1:7C:90:B7:8D:E9:53:C1:BD:6F
            X509v3 Authority Key Identifier:
                keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/VQfHZDUin3SP2vF8kLeN6VPBvW8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.125.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:ed:72:ab:0e:03:f5:17:61:9a:48:4d:4f:fe:e2:95:c2:87:
         01:ce:40:67:49:e1:64:af:7f:c7:83:cd:6b:3a:08:31:ce:64:
         af:f7:bc:f3:ba:dc:65:ce:89:39:35:69:f0:25:cc:7f:f9:42:
         8c:bf:57:67:9f:1e:d7:b5:af:16:f6:05:a3:43:c9:cc:78:6d:
         e9:fe:6c:dc:ea:03:c3:53:db:00:bd:da:95:9e:e0:44:b5:d3:
         0c:f3:27:90:8a:bb:e2:cd:04:fa:e4:15:85:76:c8:57:ae:94:
         20:89:9c:e2:1d:fc:e7:fb:21:23:6f:8c:25:55:1c:9e:dd:ca:
         c8:e1:76:22:94:32:1f:09:81:5c:d8:80:32:14:32:a1:ce:12:
         6b:42:7b:ec:e4:fa:38:2b:ad:ac:9d:3b:a0:de:19:81:9c:03:
         f4:58:46:ba:51:ac:ad:f5:d1:f3:06:14:c5:76:73:77:58:09:
         9c:bf:a2:8f:e8:e7:d7:02:05:9e:be:33:bd:25:7f:ac:87:c1:
         e5:f7:6a:67:11:63:1a:ad:53:4d:60:78:33:eb:cd:c4:e2:8d:
         1e:92:00:34:1e:30:ea:77:da:34:81:10:e7:14:5a:9f:d8:6a:
         ab:b1:e5:cb:58:69:5d:f3:dd:ee:da:e5:e9:b0:ac:a3:11:b7:
         2c:34:ac:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:19 2026 by rpki-client