Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/psNkmekOemLNnUTQ7kj3Fw9na1Y.roa
File:                     psNkmekOemLNnUTQ7kj3Fw9na1Y.roa (raw, json)
Hash identifier:          dRqH1Su4AfpsFjwXEb0YA+kAE+pSqFx/e+2dIfy5HqE=
Subject key identifier:   A6:C3:64:99:E9:0E:7A:62:CD:9D:44:D0:EE:48:F7:17:0F:67:6B:56
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       BE
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/psNkmekOemLNnUTQ7kj3Fw9na1Y.roa
Signing time:             Fri 17 Apr 2026 02:24:47 +0000
ROA not before:           Fri 17 Apr 2026 02:24:47 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        202.52.16.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr 17 02:24:47 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=A6C36499E90E7A62CD9D44D0EE48F7170F676B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:85:e2:1c:46:fa:ec:36:78:dc:0e:34:a4:
                    dd:71:51:56:cb:a8:8b:98:d6:a6:60:16:f0:6b:fa:
                    b3:ed:ff:f8:a4:09:1d:bd:6c:77:e9:50:db:18:b5:
                    62:54:c9:a9:e7:54:0e:6d:8b:3e:41:b9:06:1e:7e:
                    7a:7c:c1:74:90:e9:08:21:21:68:f4:ae:6f:dc:94:
                    63:fb:44:ab:de:a7:ba:de:cf:c3:36:e7:9b:a4:ed:
                    83:3b:bd:6e:57:95:d5:b3:f2:0c:37:e4:b9:c9:4e:
                    25:c8:19:e2:c2:d0:c8:c5:97:3c:06:94:df:ec:96:
                    d3:73:c7:3b:35:81:5b:e4:ec:e3:22:02:87:4c:9f:
                    fb:23:11:66:23:14:a1:70:22:e5:a3:a9:10:1c:6e:
                    0c:a1:a6:08:84:88:06:74:c6:77:61:0e:f3:ad:9b:
                    7d:7d:99:d0:28:6d:88:3c:a1:de:50:60:c9:62:94:
                    23:da:ba:6d:0c:64:d3:98:bc:57:fc:e7:de:4f:d3:
                    63:47:18:f5:cb:d1:6b:af:5c:b0:71:6d:8b:59:df:
                    ca:ac:b4:77:14:62:99:a3:a8:5a:7b:37:d8:77:35:
                    21:f6:9f:b7:21:24:23:6a:79:8c:f5:bf:43:8a:6e:
                    21:79:32:14:20:19:88:59:c2:25:b2:f0:38:6d:08:
                    7f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C3:64:99:E9:0E:7A:62:CD:9D:44:D0:EE:48:F7:17:0F:67:6B:56
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/psNkmekOemLNnUTQ7kj3Fw9na1Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:f3:2c:02:46:a5:a3:50:11:48:cb:3c:2b:50:37:85:11:2c:
         f8:27:3a:d3:25:f9:0d:ad:29:3f:4b:9b:3d:b5:cc:b1:ba:25:
         d0:75:ce:d5:c8:a0:6a:40:c4:2b:0a:51:46:09:26:a0:e0:ed:
         4e:95:54:2a:37:28:d8:c3:65:d5:14:09:36:2d:66:d4:bb:2f:
         fe:87:ce:6b:94:2b:af:b1:f6:af:1a:02:a8:0d:3d:3d:99:50:
         bc:94:f5:7c:d9:cb:92:de:41:d8:1d:45:40:a2:98:22:e5:55:
         0b:31:21:db:5c:1f:18:43:a2:de:49:44:57:8e:9b:c2:44:86:
         4c:d9:68:bb:e1:a0:79:cf:96:66:ae:ec:27:18:a5:ca:5d:01:
         d2:c7:8e:5b:59:a7:57:e8:02:7f:3d:f4:37:1e:3a:41:3b:86:
         3d:f2:47:3f:4f:3d:9b:e7:57:40:aa:e8:82:74:85:da:29:e1:
         a6:f4:da:68:17:53:8c:e8:e8:3e:02:3d:b2:74:ed:03:a0:1c:
         30:db:4b:c1:d2:e6:b6:c1:cc:2b:cb:6d:cc:98:c9:33:c4:59:
         bb:82:c6:21:c9:eb:6a:4f:9c:bb:43:05:16:0f:aa:31:72:a2:
         95:d2:2a:93:2f:ab:54:a7:f6:8f:d7:97:f4:c6:ef:0c:64:78:
         02:3c:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:03 2026 by rpki-client