Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2787/neRdLLd4PZ7GNfNNIFKaduOTobs.roa
File:                     neRdLLd4PZ7GNfNNIFKaduOTobs.roa (raw, json)
Hash identifier:          VLgTEry8rXoV2/nnN1XNVB7UX45GBnoXcMOcedEmHyg=
Subject key identifier:   9D:E4:5D:2C:B7:78:3D:9E:C6:35:F3:4D:20:52:9A:76:E3:93:A1:BB
Certificate issuer:       /CN=FBD12BD05282FF382B4B1DAF0B460E85FE44FE65
Certificate serial:       66
Authority key identifier: FB:D1:2B:D0:52:82:FF:38:2B:4B:1D:AF:0B:46:0E:85:FE:44:FE:65
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/neRdLLd4PZ7GNfNNIFKaduOTobs.roa
Signing time:             Tue 31 Mar 2026 07:31:21 +0000
ROA not before:           Tue 31 Mar 2026 07:31:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59128
IP address blocks:        192.50.220.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/-9Er0FKC_zgrSx2vC0YOhf5E_mU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/-9Er0FKC_zgrSx2vC0YOhf5E_mU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 12:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD12BD05282FF382B4B1DAF0B460E85FE44FE65
        Validity
            Not Before: Mar 31 07:31:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9DE45D2CB7783D9EC635F34D20529A76E393A1BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:f1:5d:c2:ed:d8:21:dd:18:cb:2c:3e:cd:
                    88:40:7f:f6:96:38:28:34:0a:a0:18:d8:69:42:2b:
                    3a:c6:e2:62:c4:f2:5d:e9:ac:49:b9:1a:b5:ab:29:
                    5c:2e:e3:bd:12:cb:0f:1b:fc:38:2e:de:09:4d:6b:
                    d1:77:55:70:62:dc:0c:a5:49:32:f9:1e:3b:eb:30:
                    78:6e:bc:78:cf:4c:5a:a9:a0:e1:8d:14:dc:72:63:
                    00:fa:9a:3a:db:9c:a2:9d:9a:ff:81:d2:4a:d7:a0:
                    62:9d:10:04:70:79:94:3b:72:35:14:83:82:dd:d5:
                    68:5d:e7:c4:38:2b:7d:e6:09:41:80:c9:df:ca:74:
                    95:b9:83:20:6f:31:c7:9e:b7:07:f2:78:23:9b:03:
                    2f:b9:4c:ea:0a:68:7a:2f:d6:01:4a:fb:54:eb:d6:
                    e1:16:3d:76:ae:0f:3b:cb:17:d7:5a:d5:f3:f0:b0:
                    49:c5:9f:34:ca:35:19:4e:9f:e4:56:c7:d7:76:b0:
                    35:4f:b5:ae:9d:1e:08:be:85:c2:4e:2d:35:00:6f:
                    83:4b:1f:e9:d9:95:23:1e:b5:95:23:4a:e8:45:e0:
                    49:64:4e:de:1a:65:de:65:c5:66:45:d1:09:ce:42:
                    22:04:22:10:ae:74:e2:53:ec:2e:8a:fe:bc:69:d3:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E4:5D:2C:B7:78:3D:9E:C6:35:F3:4D:20:52:9A:76:E3:93:A1:BB
            X509v3 Authority Key Identifier:
                keyid:FB:D1:2B:D0:52:82:FF:38:2B:4B:1D:AF:0B:46:0E:85:FE:44:FE:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/-9Er0FKC_zgrSx2vC0YOhf5E_mU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/neRdLLd4PZ7GNfNNIFKaduOTobs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:06:c5:47:b9:f6:f6:1c:91:1f:4c:97:4f:9a:43:b7:bd:a5:
         e1:60:a3:41:be:be:5e:03:98:7c:80:05:e9:30:98:a5:48:da:
         b1:df:22:b5:ed:83:95:e0:2a:86:19:e9:a4:5f:02:3b:de:2e:
         e5:ba:9a:6f:f5:72:28:cb:60:b3:ad:21:5e:0e:bf:0a:60:68:
         7a:b0:55:52:bf:78:69:53:76:a7:d7:e4:b5:da:30:8d:af:22:
         d7:c6:9a:70:20:bd:44:5f:37:af:77:1f:32:e0:92:94:fc:42:
         b7:47:31:ba:df:62:ab:55:f6:af:15:2b:b3:99:7e:9c:2c:b8:
         d6:81:f4:2b:d4:66:23:f9:8b:9b:b1:f4:69:ef:b4:5e:ee:45:
         a8:48:2e:a6:cc:58:0e:d8:bb:df:a5:58:d3:12:29:c2:3e:0e:
         7d:c2:f8:ae:aa:ed:68:49:58:e0:e0:44:0d:b5:24:78:5b:d8:
         03:69:91:61:f4:3f:98:a8:0c:cb:f1:75:a7:c2:20:b1:3c:f5:
         4c:da:46:ec:4a:86:4a:8d:91:db:12:5d:10:a2:e2:18:07:27:
         e3:80:b8:8f:da:70:b8:e3:b4:51:d6:b9:03:69:d3:60:b9:ef:
         1e:50:0d:d6:77:e1:42:31:c5:75:0b:54:2c:26:b7:40:12:85:
         3a:2d:68:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:37 2026 by rpki-client