Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/T4NquQYsUGgUJh6vQwgQwdss9rE.roa
File:                     T4NquQYsUGgUJh6vQwgQwdss9rE.roa (raw, json)
Hash identifier:          w+i3O5W559NlrzxLMH5AdMcNSYQ+w4Ua3GQyetMcOJM=
Subject key identifier:   4F:83:6A:B9:06:2C:50:68:14:26:1E:AF:43:08:10:C1:DB:2C:F6:B1
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       3A
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/T4NquQYsUGgUJh6vQwgQwdss9rE.roa
Signing time:             Tue 31 Mar 2026 08:34:59 +0000
ROA not before:           Tue 31 Mar 2026 08:34:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24255
IP address blocks:        202.88.192.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Mar 31 08:34:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4F836AB9062C506814261EAF430810C1DB2CF6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:0b:db:25:31:4f:05:a7:d9:da:ab:12:81:
                    12:b3:d0:09:6b:b9:06:e8:4e:d4:a8:78:a9:b8:d3:
                    31:60:a7:6a:9e:5d:88:ea:2a:03:7b:1a:b1:2c:26:
                    eb:51:ca:fe:15:bf:e3:d9:96:8c:ce:02:92:82:c7:
                    21:cf:10:38:7e:fd:6d:be:54:fd:23:2a:6b:b5:78:
                    ba:40:2b:8d:c0:c0:b6:f2:b8:8a:0d:e6:ff:ad:39:
                    78:da:1e:8c:07:ef:ec:95:43:90:51:ac:05:df:e2:
                    61:44:23:9b:f0:89:f4:bb:68:ba:99:27:5e:7a:d8:
                    47:82:67:55:e8:f0:4e:3e:61:17:08:83:f9:8c:74:
                    80:ee:6f:2e:82:1f:34:d2:73:b3:22:a1:4f:8c:69:
                    46:4d:5e:3d:c8:04:54:77:b0:0a:87:b4:4a:45:bd:
                    55:de:96:ac:22:66:b8:d2:6c:40:79:de:09:4b:39:
                    1f:68:78:db:7f:f3:77:2a:3f:b9:f0:00:35:61:b1:
                    4c:2e:ce:ce:53:bd:27:31:31:65:32:ff:66:40:9c:
                    02:75:2f:84:b4:b6:cf:ae:12:01:83:df:b5:0d:59:
                    87:84:53:e9:c0:21:08:a7:21:2f:99:f3:fb:b0:0b:
                    8b:8e:59:fe:29:f7:34:c0:c6:67:b0:a8:13:d0:38:
                    fa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:83:6A:B9:06:2C:50:68:14:26:1E:AF:43:08:10:C1:DB:2C:F6:B1
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/T4NquQYsUGgUJh6vQwgQwdss9rE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.88.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:97:70:ac:66:4f:e0:a0:59:4e:81:34:5c:00:11:5a:7f:ea:
         f8:d7:3d:b3:7b:06:6c:b6:73:af:7e:df:da:b2:08:4d:a4:bb:
         6c:b5:42:91:bd:d6:7a:f2:c2:e9:75:38:ea:61:99:37:e9:1c:
         d2:7a:57:9f:92:3c:85:72:fd:58:42:7d:29:b3:95:19:f3:12:
         f8:1a:cd:06:80:39:db:29:3d:c8:be:fc:88:64:42:f5:33:68:
         f7:f9:44:10:bf:1b:e5:c6:05:58:3d:58:21:fb:15:96:3b:b1:
         e9:f1:58:63:19:d6:34:d3:45:13:fa:6b:78:e8:81:c7:0a:8f:
         45:13:d2:3a:f9:60:2f:f9:8d:72:d9:18:d8:c2:de:aa:69:2c:
         10:f7:1e:52:b7:63:9d:da:89:4d:44:8d:32:4c:4a:0b:e8:ff:
         44:0b:10:3e:30:96:da:c8:e3:75:f4:11:8b:82:e7:b3:9a:9e:
         09:5d:03:86:63:c3:77:42:09:83:ce:40:7e:35:95:b4:be:e6:
         89:ab:ba:6d:c1:80:1b:45:a5:cd:7e:d5:d2:04:82:59:09:8f:
         19:c6:dc:e9:ec:3a:eb:4f:9d:d6:e9:a0:8a:4d:08:e3:2e:6c:
         ab:02:8f:a3:d4:6b:3d:15:59:e1:55:f1:16:1b:54:ac:83:b5:
         bb:d8:8a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:32 2026 by rpki-client