Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/zyeRPSq_zFn-az1whCAWTqo-5C4.roa
File:                     zyeRPSq_zFn-az1whCAWTqo-5C4.roa (raw, json)
Hash identifier:          Hgj9s69Y4dyNvq1y9XEvCMUceVebKa02YZq/j20WmAw=
Subject key identifier:   CF:27:91:3D:2A:BF:CC:59:FE:6B:3D:70:84:20:16:4E:AA:3E:E4:2E
Certificate issuer:       /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Certificate serial:       33
Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/zyeRPSq_zFn-az1whCAWTqo-5C4.roa
Signing time:             Sun 01 Mar 2026 01:36:15 +0000
ROA not before:           Sun 01 Mar 2026 01:36:15 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     17931
IP address blocks:        218.45.16.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
        Validity
            Not Before: Mar  1 01:36:15 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=CF27913D2ABFCC59FE6B3D708420164EAA3EE42E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:0c:f4:9a:40:f8:b6:41:1c:85:2d:7c:09:
                    af:8a:bc:8b:1f:d3:53:80:03:a3:ce:fd:8d:50:a2:
                    bc:b2:f0:85:f3:9b:54:c3:da:45:bc:c6:42:58:c6:
                    2e:00:b8:cb:be:6e:21:25:05:4f:32:9b:e1:42:2d:
                    ba:30:ae:c6:61:72:57:81:c2:cc:c9:99:21:d3:2d:
                    f1:7b:d9:eb:c9:5a:b3:9c:fa:19:04:ce:41:2d:ca:
                    01:c2:ad:9a:c3:1f:35:72:46:2c:29:b6:d0:01:62:
                    50:7f:dd:21:69:ed:27:15:2e:ec:9c:61:3c:5d:2f:
                    62:0c:9e:f9:57:0f:1e:cf:bf:1f:81:a8:2f:aa:05:
                    06:c0:83:33:5e:2f:b0:7a:bb:81:0d:cf:bd:2a:89:
                    e7:e8:9f:8e:32:c2:f3:4a:8a:3e:d7:c3:d5:53:c9:
                    b7:38:69:fd:ee:af:99:88:60:73:b2:be:c7:27:43:
                    f2:30:e2:73:95:7f:be:fb:3f:73:d6:db:a2:a7:34:
                    9d:2c:fd:95:2d:98:01:39:2c:5c:f6:39:a3:a0:b8:
                    8c:09:76:8c:36:8c:75:3c:7c:09:8b:88:37:9a:38:
                    16:58:1a:a1:cb:ee:78:f7:1f:80:bf:0e:89:fd:10:
                    49:78:54:99:36:34:81:cd:ec:09:f9:7d:19:fb:f2:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:27:91:3D:2A:BF:CC:59:FE:6B:3D:70:84:20:16:4E:AA:3E:E4:2E
            X509v3 Authority Key Identifier:
                keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/zyeRPSq_zFn-az1whCAWTqo-5C4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         db:3c:ca:21:13:0c:df:68:6c:15:2a:4a:ac:05:a2:5a:73:92:
         87:86:69:27:6e:0f:79:d3:a5:4e:4e:4e:a2:5c:c9:89:e0:48:
         5d:cb:d0:9c:b0:a3:98:aa:5d:17:3f:70:17:42:5c:c6:bc:99:
         47:0e:21:91:b5:1f:aa:5d:8a:68:b9:4f:d5:ad:88:f3:bc:2a:
         22:31:78:fc:53:fe:61:4d:4c:49:c5:c0:79:ea:a8:93:33:64:
         a5:08:5e:e9:43:aa:6e:0b:d3:6b:9a:34:be:27:da:23:a4:2f:
         82:da:51:ce:99:71:17:c6:0c:03:b5:8b:bb:33:ab:c3:4d:22:
         c8:02:36:45:b9:c6:7d:21:9e:54:b9:0e:76:57:2b:c0:83:9e:
         20:d7:d3:70:fa:92:6a:48:f0:ce:c2:68:13:27:34:61:24:cf:
         ad:54:db:5e:f1:42:9f:18:32:be:1a:e3:37:34:b5:57:f8:59:
         e7:db:71:54:43:92:9c:71:92:d6:56:75:95:38:40:9f:a2:16:
         e7:e7:ad:c7:50:c8:36:7c:4b:da:48:5a:7d:01:6d:b6:a5:24:
         fa:67:5c:61:24:4d:c2:ab:6b:e2:b5:b7:61:67:91:70:bc:0a:
         18:ff:10:dd:df:71:5b:ef:8a:04:f3:10:f6:f7:45:a7:ea:4f:
         d0:69:b5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:21:25 2026 by rpki-client