Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/yG5c7vhALgptvfamNJ3UPbZ48fs.roa
File:                     yG5c7vhALgptvfamNJ3UPbZ48fs.roa (raw, json)
Hash identifier:          4zUOlXGUrb3VzoeUFAy0+j1fQX1No+ckrbHGon1XbUU=
Subject key identifier:   C8:6E:5C:EE:F8:40:2E:0A:6D:BD:F6:A6:34:9D:D4:3D:B6:78:F1:FB
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       3B
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/yG5c7vhALgptvfamNJ3UPbZ48fs.roa
Signing time:             Tue 31 Mar 2026 08:34:59 +0000
ROA not before:           Tue 31 Mar 2026 08:34:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24255
IP address blocks:        202.127.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Mar 31 08:34:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C86E5CEEF8402E0A6DBDF6A6349DD43DB678F1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:12:1c:12:93:d7:71:e0:be:44:8a:e5:30:
                    2d:33:31:8c:e9:cc:28:e2:00:21:df:ee:62:3a:3e:
                    fe:1f:a3:81:4c:f5:f0:99:6e:62:a5:cf:fc:52:58:
                    4d:84:80:7c:30:67:a9:2b:cf:b7:46:c9:2e:c0:97:
                    14:51:df:b3:c3:a5:68:d9:95:7c:01:74:5e:8c:ce:
                    91:e4:66:7d:2e:04:1e:0c:22:1c:cf:d0:b7:60:2e:
                    f8:c8:88:fc:60:df:2f:ba:e3:3d:61:db:7b:9c:1c:
                    92:77:73:9b:49:8e:ea:d9:a7:7c:3b:3b:27:68:cf:
                    5f:ca:04:0a:8a:b8:42:43:80:1b:e6:4e:35:84:62:
                    01:3a:8e:37:68:98:d6:d3:ef:a7:f0:58:c2:fa:3b:
                    60:a5:fb:4c:35:d8:fd:81:4e:b5:e5:d4:10:b7:b7:
                    fc:a9:a7:fb:9b:2b:09:2b:5d:bc:4f:74:10:7d:48:
                    ee:4c:06:bf:78:90:b2:59:fe:b4:71:a5:d5:1e:bb:
                    2b:0a:cc:12:00:83:c2:c5:1d:02:af:3b:38:e9:c2:
                    70:4b:93:1b:f1:d3:21:eb:c2:ae:cd:20:05:dc:69:
                    85:23:78:52:97:fd:6f:7d:70:55:2f:7b:a1:dd:c5:
                    c2:e5:39:4c:98:21:ee:05:7f:c4:8a:8a:a3:14:cf:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6E:5C:EE:F8:40:2E:0A:6D:BD:F6:A6:34:9D:D4:3D:B6:78:F1:FB
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/yG5c7vhALgptvfamNJ3UPbZ48fs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:0b:f4:91:e2:4c:3d:2a:fb:6e:92:87:60:4e:50:f7:f8:1a:
         14:ea:84:f0:70:cc:bf:a0:d4:d5:9c:1b:df:1c:f0:c6:07:35:
         1c:3a:3a:37:e1:d7:7a:35:99:be:d2:8b:ef:cf:03:01:6a:9b:
         57:1b:77:7b:6c:ef:bb:f7:47:e1:c9:9b:63:7f:d9:45:70:0f:
         28:56:7f:19:a5:ab:b9:c0:62:6b:68:09:55:03:5e:94:0c:ae:
         67:10:04:76:b6:4b:e1:35:8d:72:f6:0a:30:e9:46:19:d0:d3:
         4e:59:c4:9c:ad:b2:0a:9a:0a:50:67:ca:cb:93:d7:a5:ca:d1:
         c9:33:94:f2:73:21:fd:60:56:04:bf:ab:c4:58:c5:03:51:63:
         2c:c8:84:50:66:5e:95:93:2b:30:7b:aa:c1:2c:78:e4:b6:10:
         cd:50:ff:ca:9a:f8:79:07:eb:8c:a9:32:73:15:7f:0b:77:eb:
         13:59:30:37:ba:83:5b:81:3b:be:ea:01:ba:f8:04:19:30:25:
         a8:69:ef:8e:6c:54:bf:67:a9:8c:9c:2d:0d:1a:66:ff:ee:4b:
         05:eb:f3:73:03:17:7e:07:c5:4f:1f:d7:d8:51:ec:d1:2d:56:
         38:5f:7f:31:77:9a:a3:2a:54:6d:ba:3c:98:2e:e2:d8:d0:d1:
         3a:b2:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:18 2026 by rpki-client