Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4664/w2XNZ9UEnh00sy_jA11D-gI_e6w.roa
File:                     w2XNZ9UEnh00sy_jA11D-gI_e6w.roa (raw, json)
Hash identifier:          ufq/BPb4kHv3aSyHlLqpItCv+cO5JzdhD6cYxlASiDM=
Subject key identifier:   C3:65:CD:67:D5:04:9E:1D:34:B3:2F:E3:03:5D:43:FA:02:3F:7B:AC
Certificate issuer:       /CN=557A7467D8581336E27A3C4D52256C7931DC8636
Certificate serial:       29
Authority key identifier: 55:7A:74:67:D8:58:13:36:E2:7A:3C:4D:52:25:6C:79:31:DC:86:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VXp0Z9hYEzbiejxNUiVseTHchjY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/w2XNZ9UEnh00sy_jA11D-gI_e6w.roa
Signing time:             Tue 31 Mar 2026 08:36:17 +0000
ROA not before:           Tue 31 Mar 2026 08:36:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131976
IP address blocks:        218.100.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/VXp0Z9hYEzbiejxNUiVseTHchjY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/VXp0Z9hYEzbiejxNUiVseTHchjY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VXp0Z9hYEzbiejxNUiVseTHchjY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557A7467D8581336E27A3C4D52256C7931DC8636
        Validity
            Not Before: Mar 31 08:36:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C365CD67D5049E1D34B32FE3035D43FA023F7BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:27:ea:47:8b:aa:90:ed:d1:1f:cb:92:6b:
                    10:15:f4:9d:d3:fd:ff:c9:e7:90:74:c8:bd:5a:59:
                    e3:b3:bb:41:17:4b:1e:b3:aa:47:3a:de:c4:5c:51:
                    ee:c3:a2:18:45:2b:23:02:c8:66:f7:d2:d9:e2:b4:
                    4e:53:aa:43:88:00:05:6d:45:ef:c9:c2:f5:03:d9:
                    1d:77:94:5b:c1:52:49:3f:ed:32:02:43:07:a4:77:
                    2a:ba:3e:9b:9b:cf:7c:f6:bf:2d:04:8c:4c:b1:fc:
                    33:34:c7:3a:cc:1e:65:b6:a1:84:c6:ed:3c:9d:72:
                    51:03:f7:4a:d9:bc:60:5d:0f:3c:6c:a9:3f:e1:2d:
                    84:19:e1:9e:d4:d3:fa:fe:c2:c1:3c:00:bf:6b:7e:
                    d4:de:0b:e3:95:fa:93:42:72:33:92:6e:c2:db:3f:
                    4b:49:76:d1:72:a0:94:f1:ce:5b:f6:79:5e:3c:b8:
                    05:86:40:b3:9e:8d:17:51:8b:30:ac:10:4d:8a:03:
                    6c:5c:8a:5f:0a:e6:5f:8c:88:0d:4d:d1:87:c1:fd:
                    fd:02:c0:1b:a7:66:8a:99:d4:fa:38:e4:f8:b3:b7:
                    14:23:e3:82:d0:68:63:a0:3b:45:60:93:81:12:63:
                    41:e9:8f:92:3d:47:1c:45:3d:1f:e3:44:0f:8a:10:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:65:CD:67:D5:04:9E:1D:34:B3:2F:E3:03:5D:43:FA:02:3F:7B:AC
            X509v3 Authority Key Identifier:
                keyid:55:7A:74:67:D8:58:13:36:E2:7A:3C:4D:52:25:6C:79:31:DC:86:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/VXp0Z9hYEzbiejxNUiVseTHchjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VXp0Z9hYEzbiejxNUiVseTHchjY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/w2XNZ9UEnh00sy_jA11D-gI_e6w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.100.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:72:6f:45:15:46:20:48:9c:d3:e7:55:2d:79:47:2e:89:25:
         ff:e1:5c:82:2b:c8:4c:a3:d0:71:51:88:20:61:13:a6:5c:cd:
         7b:b1:1e:1e:b3:08:f1:26:86:e4:04:06:e8:90:b5:f7:39:05:
         c2:fe:36:15:7a:fb:71:97:e0:2d:74:ff:a9:e7:09:4f:94:10:
         80:c4:46:8e:7f:2f:cc:1d:21:89:96:a3:92:2f:1b:16:c7:94:
         c7:f3:07:12:fa:d9:ca:3b:a0:f8:f5:18:30:55:39:0a:fa:67:
         03:b1:58:2e:ec:a5:75:a8:9e:f4:16:e6:45:c7:04:d7:16:b9:
         ef:0d:43:25:00:14:92:2f:92:4d:0f:16:61:d8:59:80:30:5b:
         d3:78:fe:20:38:9b:9c:23:e2:f6:1e:e8:22:18:2d:04:8c:15:
         79:1f:58:23:ea:48:22:98:68:7b:49:9a:5c:9a:83:ae:6a:76:
         94:4c:99:a0:31:fc:3e:e5:2d:d3:a5:10:fc:16:48:6f:68:f8:
         9f:14:c2:b7:59:b3:80:5a:2b:fb:31:a0:8c:48:d0:ca:e1:f0:
         66:a1:aa:0f:17:47:34:8a:97:de:0e:c8:e0:2f:93:a3:e4:48:
         d1:07:61:b2:5b:4c:6f:6a:5a:0c:1d:f3:25:8c:d6:9d:f7:ff:
         f9:8e:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:25 2026 by rpki-client