Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/ka_PZEYQ9w9Dsap_6f_FZRLHGkE.roa
File:                     ka_PZEYQ9w9Dsap_6f_FZRLHGkE.roa (raw, json)
Hash identifier:          SzmyUYR4tE6B+S8HO2IlMlLeffd8fYtB7FI4PpTunHI=
Subject key identifier:   91:AF:CF:64:46:10:F7:0F:43:B1:AA:7F:E9:FF:C5:65:12:C7:1A:41
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       AD
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/ka_PZEYQ9w9Dsap_6f_FZRLHGkE.roa
Signing time:             Tue 31 Mar 2026 08:14:46 +0000
ROA not before:           Tue 31 Mar 2026 08:14:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17676
IP address blocks:        218.45.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Mar 31 08:14:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=91AFCF644610F70F43B1AA7FE9FFC56512C71A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:ff:ce:04:73:18:89:c9:89:b2:5f:e8:f6:
                    97:05:d9:49:65:47:95:b6:55:b2:e4:2d:52:d5:9b:
                    88:1d:e5:c3:ae:2a:31:7b:84:14:9f:ce:86:64:51:
                    eb:fc:6d:bf:83:2f:3e:55:59:48:42:a6:3b:a1:ac:
                    8c:f5:45:81:af:66:14:27:21:fb:66:9e:36:a3:94:
                    01:15:d7:aa:bd:3e:22:aa:7f:5e:18:96:c3:51:13:
                    83:fd:d5:a5:eb:00:9e:3c:b9:ca:1e:b9:78:60:93:
                    05:3e:14:f8:ef:ab:f3:7c:fe:a6:00:48:0d:46:e5:
                    91:a5:c5:48:67:c6:69:dd:7e:26:6f:98:ca:85:f2:
                    99:31:bd:d9:d2:2f:33:04:d9:86:e2:e3:a8:e5:1d:
                    bc:b5:db:66:d3:67:ff:14:7a:7d:36:38:de:c2:c2:
                    c0:9b:78:e1:8f:be:1b:ce:2a:23:e2:ae:a3:53:ba:
                    06:b6:c9:42:04:4b:81:6f:51:0d:58:00:37:74:b1:
                    fa:57:19:39:0b:8d:4b:f1:e5:64:16:8e:80:f1:57:
                    9c:af:a6:d6:45:f2:86:91:cf:55:09:4e:7b:58:63:
                    a2:0e:46:4a:d2:45:47:8c:e7:94:21:c8:c2:bd:15:
                    c6:b4:88:33:72:96:74:87:55:dc:ec:6f:9d:10:f3:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AF:CF:64:46:10:F7:0F:43:B1:AA:7F:E9:FF:C5:65:12:C7:1A:41
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/ka_PZEYQ9w9Dsap_6f_FZRLHGkE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:59:7c:46:85:7b:1d:ce:77:29:0f:73:60:15:18:1e:0f:4f:
         27:b0:17:32:36:1a:3a:17:49:57:f9:5c:2c:0a:66:cb:25:06:
         b0:83:4a:dc:21:8e:07:ec:f1:ce:a4:aa:1d:3f:51:ca:51:0d:
         5b:82:2e:75:68:36:9c:3a:53:12:2e:85:e2:c4:3c:2e:a9:a9:
         ea:84:26:05:49:ad:45:aa:6e:48:66:2d:b4:b6:85:d0:8b:67:
         92:c3:94:9a:4e:cb:a1:97:9c:bb:41:3a:60:3a:09:e8:3c:2f:
         c6:0b:f6:40:8c:d6:83:f8:c0:d7:19:37:fc:4b:75:5b:f3:8f:
         01:b4:a6:0c:92:dd:ab:9a:f7:3f:b8:2b:a4:4a:1a:3a:53:61:
         74:88:f4:ce:b6:ac:ac:b8:9a:a2:02:f9:2a:3e:26:4e:a9:93:
         fc:d7:0e:e5:14:c0:33:69:cf:72:99:d9:c3:83:3a:05:dc:62:
         e2:45:6f:25:ea:0c:9c:cc:55:ea:d5:2d:77:bd:f1:de:eb:68:
         63:dc:df:92:72:77:72:d5:5e:6d:60:14:65:30:b9:75:eb:07:
         94:80:64:78:a7:95:5c:10:fe:a9:1c:54:36:61:6b:9f:45:00:
         83:9b:39:9b:37:12:79:21:05:04:55:70:13:7f:40:34:c7:a4:
         60:01:47:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:29:07 2026 by rpki-client