Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/99BjNZ_q58l6NpbTfqFW6atiBTA.roa
File:                     99BjNZ_q58l6NpbTfqFW6atiBTA.roa (raw, json)
Hash identifier:          kwFAcS3yFbBAmx5j/2K1htclywQ3UKFwnpoPP7H6hzM=
Subject key identifier:   F7:D0:63:35:9F:EA:E7:C9:7A:36:96:D3:7E:A1:56:E9:AB:62:05:30
Certificate issuer:       /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial:       68
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/99BjNZ_q58l6NpbTfqFW6atiBTA.roa
Signing time:             Tue 31 Mar 2026 07:40:50 +0000
ROA not before:           Tue 31 Mar 2026 07:40:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        219.100.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
        Validity
            Not Before: Mar 31 07:40:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F7D063359FEAE7C97A3696D37EA156E9AB620530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:cb:2b:36:ed:af:6d:d7:bd:c6:34:ae:29:
                    c9:2a:e1:81:6c:ff:2b:8e:6b:fc:d0:be:3c:5a:03:
                    fc:8d:4d:81:07:a8:9d:42:fe:9d:b8:cc:58:f1:25:
                    63:5c:78:f8:0b:3e:06:32:96:94:72:69:52:8f:8e:
                    b8:ca:2b:d8:65:e8:a2:04:a0:cf:47:9c:7c:b9:6a:
                    36:9d:82:bf:0a:84:da:8c:de:5b:c0:c6:03:f9:0e:
                    65:17:db:e1:71:ee:22:14:68:f0:95:eb:19:2a:9d:
                    5f:20:4b:16:a4:23:65:31:02:92:e0:21:12:df:e1:
                    f4:00:12:fd:fa:e2:b5:0d:24:57:42:f2:96:a0:0f:
                    48:ab:89:3a:a7:cb:96:3b:3e:70:a3:66:c6:5c:06:
                    ba:36:4b:40:46:33:e3:b7:e4:cb:b0:2a:b6:9c:4a:
                    76:a7:bc:47:71:8d:ad:e5:91:7b:e1:f4:04:95:40:
                    df:9f:5c:cb:19:47:38:cb:46:c5:96:e1:6a:d9:9d:
                    75:81:c1:b8:3b:1e:c2:09:5a:ba:53:aa:99:c6:b7:
                    f8:fb:77:87:bb:f0:61:93:5e:37:56:76:bb:35:14:
                    a6:a7:b2:78:85:11:6e:4a:e8:16:d2:25:dc:81:b9:
                    0f:4f:b6:78:e9:e1:8a:65:23:3e:29:65:60:79:06:
                    22:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D0:63:35:9F:EA:E7:C9:7A:36:96:D3:7E:A1:56:E9:AB:62:05:30
            X509v3 Authority Key Identifier:
                keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/99BjNZ_q58l6NpbTfqFW6atiBTA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:01:c9:61:9e:6b:df:ec:75:f0:e8:99:83:60:6a:f1:ce:f4:
         bb:05:1d:91:e2:47:aa:32:ef:9e:90:46:d3:a2:df:79:cb:12:
         bf:af:3c:61:54:ab:76:dd:c0:a8:04:24:04:29:2f:0e:78:e1:
         87:92:18:b6:a9:1d:87:49:c7:d4:b0:d3:1a:93:5f:c7:04:a3:
         aa:35:46:85:ed:77:5f:21:56:2e:1c:07:4d:d6:d2:cf:ac:0b:
         a2:12:3f:7d:68:b2:6d:39:37:58:b4:6d:ae:ff:3c:8b:9b:73:
         f2:83:c9:51:8e:1f:70:6d:eb:d3:0e:fe:c7:3b:fb:52:84:3d:
         3d:7a:70:bf:08:a7:a6:35:df:0e:42:e9:86:da:2c:ad:72:66:
         56:53:09:c7:df:a0:3f:19:9d:54:df:77:06:66:5a:e5:d7:f0:
         97:0f:65:25:d7:c9:38:aa:9e:6c:76:73:8e:9d:b6:f8:2f:bd:
         3f:4d:e3:47:e9:7a:e0:5d:77:75:71:52:a9:aa:36:75:96:00:
         84:6a:23:dc:e6:db:18:f6:b5:68:8c:72:47:9b:69:46:ad:9b:
         6e:4a:91:28:0c:be:ae:42:7f:de:f6:0c:53:7e:a2:88:28:46:
         bb:b3:0a:d1:d1:1c:eb:52:2b:d9:37:43:70:f4:3d:24:f5:6d:
         6b:9d:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:20:47 2026 by rpki-client