Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/SvvAuPYl5SpId5x_Ddn1Yh6nxlw.roa
File:                     SvvAuPYl5SpId5x_Ddn1Yh6nxlw.roa (raw, json)
Hash identifier:          k3di1hHNqrA5FmG1aAxoFmek0DAiw3s7LVg2v62Epo8=
Subject key identifier:   4A:FB:C0:B8:F6:25:E5:2A:48:77:9C:7F:0D:D9:F5:62:1E:A7:C6:5C
Certificate issuer:       /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
Certificate serial:       31
Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/SvvAuPYl5SpId5x_Ddn1Yh6nxlw.roa
Signing time:             Sun 01 Mar 2026 01:36:07 +0000
ROA not before:           Sun 01 Mar 2026 01:36:07 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     10002
IP address blocks:        218.231.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
        Validity
            Not Before: Mar  1 01:36:07 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4AFBC0B8F625E52A48779C7F0DD9F5621EA7C65C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:5e:20:a4:f0:50:6b:09:7d:ef:f1:b2:67:
                    50:2c:c3:e7:cc:72:06:26:e6:75:4b:e4:01:67:7a:
                    68:91:bb:96:dc:aa:2c:1c:26:f1:d9:4b:39:e6:3d:
                    61:eb:ba:75:4e:8d:1d:6a:8c:50:f6:8b:ce:85:80:
                    32:c4:6c:3a:45:df:0d:c4:23:b9:fa:05:d0:6a:5b:
                    43:52:0b:f2:a0:64:5d:92:17:4f:33:58:b7:aa:75:
                    13:e4:73:da:6f:1e:c3:fe:c5:23:45:c6:5d:80:9d:
                    63:a4:7a:d5:47:b4:4d:f5:87:f4:52:68:0b:d9:d0:
                    38:75:b1:ee:09:c0:82:8b:ea:9d:57:cb:48:62:83:
                    18:f9:c8:d2:ec:75:87:fb:97:09:12:05:38:4a:9a:
                    84:ce:f9:74:d9:23:e2:04:f4:6d:7a:ed:a4:11:47:
                    9b:bd:f0:23:e7:d9:a2:57:e9:2b:a7:27:62:1c:d9:
                    09:9f:bd:ab:3c:31:1a:62:ad:e4:0a:76:d9:27:11:
                    4b:70:48:79:54:ed:ad:5d:04:87:fb:b9:aa:21:5f:
                    5e:87:f1:b4:48:a7:9e:17:ff:53:1d:c8:5a:24:d0:
                    49:72:d9:d9:b8:c1:f5:22:02:db:0f:8b:48:1d:7b:
                    ff:92:e0:82:d8:c6:94:ad:28:bc:dc:ce:f6:32:b0:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FB:C0:B8:F6:25:E5:2A:48:77:9C:7F:0D:D9:F5:62:1E:A7:C6:5C
            X509v3 Authority Key Identifier:
                keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/SvvAuPYl5SpId5x_Ddn1Yh6nxlw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.231.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:d1:4e:bf:3b:37:5f:86:a8:54:30:a0:70:4b:c8:82:81:
         ed:20:6d:d9:61:28:aa:64:c5:31:58:ac:54:6c:2a:9c:d1:f8:
         90:56:54:49:90:a4:0f:9c:14:d1:18:bd:d0:db:6c:1c:28:1f:
         61:68:26:b8:78:3b:14:01:5b:92:de:e7:7a:f0:b1:c8:79:79:
         11:65:59:c7:c3:27:7b:33:dc:f1:9f:b5:29:db:46:45:ec:b3:
         8e:cb:e1:43:a0:e9:71:df:fa:03:a3:a3:e0:23:8d:11:b6:b9:
         78:89:3d:65:d9:97:74:71:ba:e9:9e:5d:6f:fc:4e:02:24:10:
         96:4d:ae:04:f1:ae:b1:1e:b9:de:3b:ee:8e:f5:ad:8b:0b:89:
         97:b4:8b:0b:72:96:4d:66:a6:83:8f:67:bd:7f:a7:a5:08:f3:
         50:d1:12:ee:13:8f:c8:de:de:2c:c2:2b:07:ea:02:5d:09:92:
         58:b9:ce:d3:c9:c3:29:e7:c3:7f:ce:5e:e7:4c:78:d8:08:34:
         5c:14:e1:9e:36:e9:13:79:95:95:cf:cd:8e:18:a6:dc:c0:27:
         10:31:d1:b0:f5:19:30:ba:62:c0:2d:61:3f:6a:65:9c:44:3d:
         56:70:b4:ea:15:76:52:6a:6a:aa:cf:82:6b:76:8b:97:f9:34:
         e9:75:d2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:36:58 2026 by rpki-client