Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/RoC8HbRnTTCEaKWNk99ZnnT1oN0.roa
File:                     RoC8HbRnTTCEaKWNk99ZnnT1oN0.roa (raw, json)
Hash identifier:          Ok5VjIYFau2laOtTK6+t/7fJtZSFCXRySwF6bVS8cQI=
Subject key identifier:   46:80:BC:1D:B4:67:4D:30:84:68:A5:8D:93:DF:59:9E:74:F5:A0:DD
Certificate issuer:       /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
Certificate serial:       2C
Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/RoC8HbRnTTCEaKWNk99ZnnT1oN0.roa
Signing time:             Sun 01 Mar 2026 01:35:21 +0000
ROA not before:           Sun 01 Mar 2026 01:35:21 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     17955
IP address blocks:        203.223.48.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
        Validity
            Not Before: Mar  1 01:35:21 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4680BC1DB4674D308468A58D93DF599E74F5A0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:92:2e:84:49:bd:d9:78:6f:de:d2:0f:15:
                    ef:98:cf:ca:4a:73:20:cc:97:2d:65:17:9d:3d:e3:
                    0a:63:f5:a1:fa:47:4e:2b:10:2f:3e:21:e6:4d:da:
                    d1:7c:30:a6:78:1c:8a:33:66:34:51:32:f5:eb:a8:
                    78:b1:c5:05:57:85:04:cb:79:1b:32:e0:5b:c8:6c:
                    f5:63:aa:f4:5d:a4:79:34:df:11:76:cb:9f:28:5d:
                    c5:7c:ac:8a:55:6a:e4:8e:0f:35:6b:96:71:34:7e:
                    e6:7a:27:f3:f8:18:73:ed:14:90:27:3b:c4:1c:35:
                    12:2b:12:84:4a:c8:b4:da:2b:b2:7c:36:66:96:df:
                    b1:88:08:c8:d2:f5:e2:d6:c7:70:0c:0d:24:c2:24:
                    70:45:a4:6a:9f:03:c5:bb:30:f6:2a:eb:f8:27:bb:
                    96:32:77:ac:91:25:4c:4c:d8:78:03:dc:6d:a9:ad:
                    a6:3b:ac:1e:a0:33:6b:01:e9:32:e6:e3:50:fa:81:
                    63:f8:b0:23:27:34:fe:08:2b:7a:63:4b:9b:2f:8b:
                    65:9a:ce:fb:16:74:62:69:36:27:ff:2b:25:f7:e5:
                    8b:99:33:26:6d:0b:ea:b4:a4:d6:2a:4a:d0:61:1d:
                    9b:43:05:5b:a2:87:45:89:1e:67:c7:5b:16:1d:ce:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:80:BC:1D:B4:67:4D:30:84:68:A5:8D:93:DF:59:9E:74:F5:A0:DD
            X509v3 Authority Key Identifier:
                keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/RoC8HbRnTTCEaKWNk99ZnnT1oN0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:0d:68:1b:08:68:97:fb:33:82:84:49:9d:e2:13:d5:63:cf:
         f5:65:d7:38:a7:e9:31:8f:ac:e8:59:aa:f3:65:3c:45:70:c7:
         c5:48:ed:01:c0:df:dc:5b:37:cf:28:b1:a4:c1:24:26:e3:58:
         e5:32:42:06:23:5e:69:f5:09:d6:c3:54:8d:e6:30:ef:ca:ff:
         b0:4e:c3:e5:c3:c3:36:a8:5d:b8:78:f8:04:3e:fd:93:75:2c:
         3e:8c:41:ff:c6:7d:f5:f4:de:09:fb:1b:50:69:97:31:33:51:
         72:75:0e:f5:8d:e0:0f:06:99:47:5d:5b:42:16:75:1a:34:01:
         08:b7:93:2c:10:04:11:46:1c:48:1e:f2:cb:63:89:32:ae:a6:
         cd:88:cb:48:58:30:ce:40:c4:68:21:7a:a2:44:c3:a5:4b:82:
         e4:32:3d:75:d2:ed:31:fb:02:39:ea:0d:16:10:b9:8a:fc:04:
         38:99:98:27:78:8b:05:7c:83:01:f9:ec:65:dd:9f:8d:42:15:
         b2:08:dd:8a:b9:53:27:ac:42:b3:ed:f6:77:e6:11:89:54:04:
         68:df:0e:9a:23:00:23:5a:b6:2f:70:83:7d:9b:d4:0f:d4:19:
         02:ab:92:0f:41:e9:f9:03:9a:1d:ac:bc:78:cd:d6:04:ee:f9:
         12:b4:4e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:56:30 2026 by rpki-client