Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/5KcHkAjrI4KOCggqIjx7CyaySus.roa
File:                     5KcHkAjrI4KOCggqIjx7CyaySus.roa (raw, json)
Hash identifier:          /WzkMnZs0DSXKPAVZSRlY3iyKhzNdm5uWUUbo9KvHkE=
Subject key identifier:   E4:A7:07:90:08:EB:23:82:8E:0A:08:2A:22:3C:7B:0B:26:B2:4A:EB
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       A7
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5KcHkAjrI4KOCggqIjx7CyaySus.roa
Signing time:             Tue 31 Mar 2026 08:14:43 +0000
ROA not before:           Tue 31 Mar 2026 08:14:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17676
IP address blocks:        61.200.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Mar 31 08:14:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E4A7079008EB23828E0A082A223C7B0B26B24AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:d3:88:54:dd:14:49:d2:1d:da:45:4d:12:
                    34:0b:ed:05:35:23:a2:c1:06:5e:86:66:dd:84:12:
                    38:1d:bd:0f:71:cf:9d:57:d3:d1:56:ce:d0:59:8e:
                    e1:5d:48:f3:6e:68:87:f4:b1:93:fe:a3:1a:4f:3c:
                    f1:0a:aa:0a:a5:23:3f:d9:d6:eb:95:f0:ac:49:62:
                    f9:23:eb:4c:0b:04:2b:1d:54:7c:7d:a3:6d:bc:c3:
                    17:fa:f5:2b:db:30:7c:ad:04:18:f0:a2:2a:35:7f:
                    b8:53:be:8e:4b:46:b9:2f:d5:76:df:d0:6b:f7:62:
                    40:86:ef:ca:37:3f:65:21:db:ef:b5:16:a2:e9:61:
                    ea:0e:58:b1:3e:38:64:87:c9:f1:13:4f:b2:69:eb:
                    25:c0:3f:3a:93:30:8f:f6:3a:86:44:75:c2:f9:e9:
                    81:e1:84:34:0b:45:57:80:f4:65:bd:b6:36:3d:82:
                    4e:01:01:f2:9c:a3:39:3a:70:d6:9a:3b:95:59:4c:
                    c7:f3:56:4a:d3:5d:86:99:e9:92:0e:3c:de:18:6a:
                    e4:80:9b:d3:36:fe:26:ac:3f:7b:f6:a2:8d:e6:71:
                    75:d4:36:88:df:f1:d0:9d:8d:cd:52:34:31:9f:38:
                    18:4c:d6:cd:64:33:f4:63:c1:24:6b:b9:3e:16:cc:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A7:07:90:08:EB:23:82:8E:0A:08:2A:22:3C:7B:0B:26:B2:4A:EB
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5KcHkAjrI4KOCggqIjx7CyaySus.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8f:dd:13:2b:0b:8e:ea:a5:d1:34:76:f3:8b:c9:ed:c6:d4:9d:
         03:a1:b8:81:50:ce:60:a9:82:bc:dc:11:97:bb:45:3b:6f:c6:
         3e:ef:fb:0d:e7:d2:6f:5f:cc:e1:e8:33:74:9a:83:bf:fc:59:
         15:bd:75:5c:78:f9:59:87:1f:a1:93:b4:1c:dc:8a:c2:69:61:
         13:68:66:ed:8d:37:11:ed:93:3f:30:c1:4b:aa:6b:bf:69:a6:
         93:bb:47:ad:4c:68:31:00:c0:4c:63:eb:52:a7:4e:e3:7b:b4:
         30:eb:37:1c:bc:2a:8a:00:56:f8:b0:37:a9:cc:7c:e7:bd:1d:
         f1:60:8b:7a:08:e4:a2:cc:db:e8:fa:80:d8:aa:34:1b:13:24:
         ce:c3:eb:cc:a3:cc:01:70:c7:a7:47:13:1a:fd:1a:c0:8a:48:
         fd:4d:0e:f7:ac:c2:dc:3b:c1:5c:a1:e3:c4:88:8a:e5:86:44:
         2f:dc:c2:57:0f:41:f2:6d:4a:00:40:eb:d7:f7:f0:09:f9:0e:
         01:4d:37:05:72:b3:83:85:78:d6:94:07:5f:3d:da:33:a9:ca:
         d0:8e:6c:76:52:2a:46:c8:e0:d1:76:9f:fa:2c:a5:be:8e:a4:
         80:84:58:dd:46:93:e6:2b:70:e4:0a:24:db:df:2d:ec:1d:fa:
         90:54:89:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:29:30 2026 by rpki-client