Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/900/rkpCo3O2yhAkqBHhwZYjqKnITmk.roa
File:                     rkpCo3O2yhAkqBHhwZYjqKnITmk.roa (raw, json)
Hash identifier:          bJSUILkT7M2PBo83pBBR0yRFRa16q1G4j/qne06jGX0=
Subject key identifier:   AE:4A:42:A3:73:B6:CA:10:24:A8:11:E1:C1:96:23:A8:A9:C8:4E:69
Certificate issuer:       /CN=5A79FC72D56CF387050F65AC6FF315EA92D5D651
Certificate serial:       30
Authority key identifier: 5A:79:FC:72:D5:6C:F3:87:05:0F:65:AC:6F:F3:15:EA:92:D5:D6:51
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/rkpCo3O2yhAkqBHhwZYjqKnITmk.roa
Signing time:             Fri 18 Sep 2026 08:01:09 +0000
ROA not before:           Fri 18 Sep 2026 08:01:09 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     24249
IP address blocks:        124.150.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 17:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A79FC72D56CF387050F65AC6FF315EA92D5D651
        Validity
            Not Before: Sep 18 08:01:09 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=AE4A42A373B6CA1024A811E1C19623A8A9C84E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1b:e7:7f:ad:0b:64:45:39:ee:94:fb:8d:2d:
                    d6:7a:30:28:32:ae:9e:94:a4:e1:2a:1b:9c:ce:11:
                    0b:3e:04:3f:e0:bc:9c:12:d2:b3:a2:37:97:b9:d0:
                    66:6f:07:1e:ce:22:9c:2c:10:bb:eb:ea:df:85:1e:
                    87:35:0f:d3:cc:e3:4f:3f:16:b6:64:0b:3d:53:e7:
                    30:ba:f4:93:94:70:c2:9e:a0:b1:b5:e2:40:63:ff:
                    e7:97:8c:1c:17:b8:f1:81:f2:dc:b7:e2:55:8a:72:
                    64:30:ab:75:2b:68:4a:a2:a8:f0:ba:b4:90:1f:e1:
                    c6:10:d9:26:5d:72:7a:35:15:f6:b4:07:e0:e5:a9:
                    2c:fd:a7:ac:31:3c:9a:15:cc:f5:02:81:ad:5b:92:
                    25:c2:cf:96:fa:15:54:e9:57:2e:b3:62:76:bc:80:
                    6a:69:de:b0:45:af:dc:cc:3f:6b:e1:22:ec:c4:b3:
                    60:ed:a3:62:ed:99:9b:25:e9:c2:57:11:41:0d:78:
                    6c:fc:47:71:73:eb:e4:7c:b3:61:95:45:6d:11:d4:
                    3f:ef:04:c5:b1:b6:e1:0b:31:b7:f0:38:ab:dc:3b:
                    63:3b:f5:aa:25:0d:9c:7f:44:58:86:45:32:04:82:
                    a9:7b:ba:bd:8d:ad:e2:85:a1:5e:d8:e7:c1:42:69:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4A:42:A3:73:B6:CA:10:24:A8:11:E1:C1:96:23:A8:A9:C8:4E:69
            X509v3 Authority Key Identifier:
                keyid:5A:79:FC:72:D5:6C:F3:87:05:0F:65:AC:6F:F3:15:EA:92:D5:D6:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/rkpCo3O2yhAkqBHhwZYjqKnITmk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.150.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:16:c0:ce:3d:8c:1d:3e:01:93:d0:8c:69:0e:84:99:38:f5:
         3a:f8:77:b0:dd:ca:d3:71:2f:25:16:52:d8:52:93:a3:d5:2a:
         6a:17:99:78:e6:4d:8b:f5:cc:f5:a8:6d:8f:e6:56:55:e5:41:
         b6:fd:6a:e2:c3:bf:83:af:49:c6:00:01:d6:19:0e:62:b3:e5:
         8c:04:6b:c0:a4:b9:86:2a:65:62:00:48:88:21:a8:9b:3b:f2:
         58:38:ae:e9:5f:a0:3c:fb:06:fb:49:57:f1:cc:b4:ad:46:1c:
         38:f9:d4:29:8c:31:59:3a:50:d1:a0:b5:95:15:33:ec:06:e3:
         d5:2a:5d:11:d1:ab:cf:9c:03:0e:f6:61:58:3f:d3:e9:46:cd:
         2a:a7:a0:78:bf:c0:7e:8a:51:e2:95:e8:2b:57:26:9c:71:ad:
         ac:d0:30:48:ee:74:0a:c8:2b:7c:3d:09:12:3f:81:65:3b:f9:
         59:4a:c1:53:30:74:7d:e7:43:cd:06:f5:0a:5b:20:f1:12:05:
         23:ee:4d:b1:33:db:d2:03:7f:73:5c:bf:2a:6b:99:09:bb:a9:
         08:7d:21:f6:20:3e:04:64:38:4c:e8:84:bd:c6:d6:6a:5b:3e:
         54:84:f4:d1:ee:69:b3:57:f5:c0:8a:db:29:99:1e:97:34:b1:
         3c:f4:8f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:10:30 2026 by rpki-client