Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/SIKW784Zj270oavVypyGvsYEkYE.roa
File:                     SIKW784Zj270oavVypyGvsYEkYE.roa (raw, json)
Hash identifier:          W8zgjBdJSzh4ju1KEisyUS+0FMfvkHCMvU+PQyCH5jk=
Subject key identifier:   48:82:96:EF:CE:19:8F:6E:F4:A1:AB:D5:CA:9C:86:BE:C6:04:91:81
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       AB
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/SIKW784Zj270oavVypyGvsYEkYE.roa
Signing time:             Tue 31 Mar 2026 07:46:45 +0000
ROA not before:           Tue 31 Mar 2026 07:46:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        211.125.96.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Mar 31 07:46:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=488296EFCE198F6EF4A1ABD5CA9C86BEC6049181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:10:10:ef:de:15:91:77:3d:ca:a1:3c:09:
                    13:d3:65:76:ed:54:09:9c:f4:a3:fd:94:20:d2:5c:
                    be:b1:86:6b:a5:36:53:c7:ef:14:2c:a3:6e:b2:6a:
                    01:a3:d9:ad:b1:09:b2:c8:26:04:81:2a:31:6f:84:
                    82:c4:6a:c0:ec:07:8e:0c:b7:6c:38:3e:ec:0c:2d:
                    62:d2:5f:f9:b7:34:9c:bf:90:0d:a2:05:92:71:ce:
                    bc:fb:ca:ab:0d:0b:32:07:a0:5b:a3:f4:de:59:5f:
                    b9:8d:44:24:09:e3:32:4f:b1:68:89:38:0c:d9:fa:
                    21:f2:12:d1:7d:cd:c3:12:f3:27:ba:e8:49:25:8e:
                    34:d6:09:5d:90:38:b1:4a:de:a3:15:1e:c5:b7:04:
                    10:10:0d:61:be:04:0a:09:18:76:0b:3f:68:2e:2d:
                    99:e5:b3:e3:14:c2:4f:fe:6e:a8:06:2b:47:53:4f:
                    ba:08:1c:2e:ab:c2:a7:63:4c:b2:90:aa:bf:95:3e:
                    9d:5a:24:50:62:b8:77:3f:cd:0d:f7:c0:27:fd:3f:
                    08:96:ba:c3:9f:73:d8:1b:b9:e3:54:41:48:f0:2d:
                    e5:c0:bd:fe:d0:30:c1:8d:b4:28:fa:de:d7:11:a5:
                    5c:93:53:5f:7f:11:4a:0c:7b:d0:b5:8d:19:44:84:
                    81:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:82:96:EF:CE:19:8F:6E:F4:A1:AB:D5:CA:9C:86:BE:C6:04:91:81
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/SIKW784Zj270oavVypyGvsYEkYE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:b6:dd:be:07:0c:09:8f:4b:a1:4b:85:03:41:16:29:ea:f5:
         3c:33:a1:b6:91:7e:07:ee:e4:ac:fa:10:5c:47:fa:8c:e0:0b:
         09:31:b9:b7:06:5f:7e:10:83:ab:f4:a1:8f:f6:ca:16:b5:51:
         92:b0:55:5c:d9:c7:45:d1:ce:77:a6:f0:63:32:33:47:70:29:
         7c:5a:37:8b:ea:c6:b8:db:17:70:13:04:0c:10:37:a6:77:7c:
         75:74:2d:91:47:c4:e5:c0:0c:af:27:00:e0:67:ac:47:92:a1:
         ff:6c:2f:c9:2b:8c:63:dc:9f:7c:53:cc:1a:cb:ca:62:24:f8:
         cf:4d:80:ae:9b:79:c8:e5:40:ee:11:50:7d:ae:0f:37:39:22:
         f4:63:28:8c:7a:18:49:7a:94:0d:66:55:ae:e0:50:b5:f2:ad:
         fd:26:27:d8:36:91:0e:62:db:ed:18:09:2b:46:ab:91:bb:b3:
         66:cd:11:1b:9b:f3:ae:f6:f4:a2:0b:dc:2a:6b:9d:74:a7:26:
         5d:95:6c:f3:52:ef:0f:4c:76:34:01:bc:39:98:f6:fc:f6:12:
         76:3f:f7:34:53:3a:84:aa:c8:3c:72:ce:ed:d9:43:43:1a:cf:
         b3:4a:00:47:74:cf:f0:df:d3:b7:93:84:0e:6d:a8:fe:24:54:
         81:93:e3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:31 2026 by rpki-client