Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/cTRe1bwTJ-rozvmlw1HcSTTsVCw.roa
File:                     cTRe1bwTJ-rozvmlw1HcSTTsVCw.roa (raw, json)
Hash identifier:          oewNT4H07OFLMBGt5efmbiEEK9CDu+f3WmFip/axGqI=
Subject key identifier:   71:34:5E:D5:BC:13:27:EA:E8:CE:F9:A5:C3:51:DC:49:34:EC:54:2C
Certificate issuer:       /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial:       325F
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/cTRe1bwTJ-rozvmlw1HcSTTsVCw.roa
Signing time:             Tue 31 Mar 2026 07:30:47 +0000
ROA not before:           Tue 31 Mar 2026 07:30:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        219.111.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12895 (0x325f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
        Validity
            Not Before: Mar 31 07:30:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=71345ED5BC1327EAE8CEF9A5C351DC4934EC542C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:3c:a6:fe:80:9e:e2:0d:cb:59:d3:91:2f:
                    e1:8c:f3:41:4d:58:f1:14:78:16:2f:5c:9f:77:2d:
                    73:c6:28:dd:fd:1b:f4:fe:3d:71:8c:18:d5:c1:03:
                    1d:25:95:ab:93:f6:e9:d5:60:31:2e:e1:16:11:c5:
                    37:2d:4e:d0:55:7c:cd:3f:8a:95:6d:df:45:ae:9c:
                    2e:f4:57:3f:8d:42:bb:51:91:7b:be:af:23:7f:54:
                    0b:e1:76:4c:68:26:97:dc:56:52:18:76:b3:f7:2b:
                    39:41:1b:42:f4:97:83:1a:bb:ab:ea:fa:c4:cc:56:
                    1b:43:e5:6c:37:6e:09:d7:4b:bc:9d:f6:2c:1d:e0:
                    b0:34:00:c9:65:e2:18:15:76:b8:5f:ca:f5:a0:69:
                    71:44:eb:6f:eb:12:2c:a4:78:48:cf:55:31:0b:c4:
                    89:60:51:9a:ca:c2:81:04:6f:98:cb:9f:72:c4:30:
                    b7:b1:f4:9d:ef:64:64:d9:67:76:03:92:ab:fe:e9:
                    11:d7:1f:04:fc:c3:65:6a:bd:47:cc:8a:2c:27:2e:
                    01:f0:ef:11:10:9a:e0:b5:76:c4:65:6e:32:82:ce:
                    6e:b3:20:1d:7b:46:07:bb:72:80:2d:dc:e4:d5:25:
                    36:c0:d3:74:94:59:b3:e4:1f:78:cd:83:a8:f0:9a:
                    25:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:34:5E:D5:BC:13:27:EA:E8:CE:F9:A5:C3:51:DC:49:34:EC:54:2C
            X509v3 Authority Key Identifier:
                keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/cTRe1bwTJ-rozvmlw1HcSTTsVCw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.111.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:47:bd:b5:b5:19:ff:82:3c:d7:64:ed:82:76:15:ff:9c:4a:
         dd:de:00:1b:ae:36:06:6a:a3:bc:d3:3c:e5:a7:1e:bf:f4:5a:
         ef:3b:7b:f5:d2:2b:63:6c:ec:52:5b:cb:f0:2f:f4:0a:e8:7f:
         42:78:a9:02:74:b6:08:c4:09:d3:c0:40:86:db:14:c3:a3:63:
         cd:eb:26:68:b0:5c:a2:fa:ac:00:46:89:48:af:9b:60:7b:7c:
         40:1b:b8:cb:e4:bf:b1:53:fb:ba:63:b3:1b:6d:46:24:32:ec:
         38:c6:05:f7:e5:ff:37:fc:b3:6a:37:41:51:98:29:f7:52:af:
         6d:02:3b:da:f8:dd:19:87:23:85:4e:de:98:f0:ac:95:c5:55:
         20:f6:5b:b0:c5:da:85:25:65:ab:b4:85:b9:18:16:47:0b:6a:
         dc:ed:f0:ab:0d:ca:ab:4b:c9:0c:53:b7:35:18:7e:3b:78:5f:
         72:25:00:15:78:14:ce:a6:bb:c8:7a:06:a1:db:2b:d1:f5:0d:
         72:58:dc:38:95:c6:dc:48:34:c1:42:76:b6:25:2f:0c:6f:fd:
         b3:66:e1:54:fc:89:e9:36:de:c9:78:7d:87:d0:3b:1e:ab:3a:
         d0:a3:51:92:04:ac:db:3b:34:86:04:75:31:8d:c4:5b:b8:14:
         03:fe:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:27 2026 by rpki-client