Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/4xxexCfn1Ig97FaSHhhuGoBQobs.roa
File:                     4xxexCfn1Ig97FaSHhhuGoBQobs.roa (raw, json)
Hash identifier:          C/cCSHbpsS911VRFq6M/lo1MeMeK6i3erqKEhBRFfew=
Subject key identifier:   E3:1C:5E:C4:27:E7:D4:88:3D:EC:56:92:1E:18:6E:1A:80:50:A1:BB
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       4D
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/4xxexCfn1Ig97FaSHhhuGoBQobs.roa
Signing time:             Sat 07 Feb 2026 07:21:41 +0000
ROA not before:           Sat 07 Feb 2026 07:21:41 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     24259
IP address blocks:        126.52.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Feb  7 07:21:41 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=E31C5EC427E7D4883DEC56921E186E1A8050A1BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:91:7d:8a:63:e5:5e:55:b5:f9:b9:80:08:
                    47:9b:4d:37:b7:ae:30:ad:fd:ff:fb:af:7d:cb:91:
                    37:e8:fd:d8:f5:bf:fb:c5:b5:01:6d:f5:6a:6c:a8:
                    0a:ec:10:f7:0c:f8:4b:4e:52:d5:4e:46:2b:72:02:
                    26:50:df:28:30:e2:82:d4:52:f7:a0:a9:d6:58:47:
                    59:87:30:78:cb:7c:f5:1d:90:38:fd:15:04:b3:4f:
                    8a:8e:0b:90:ff:9f:1e:7c:7c:ec:2c:31:fc:4e:7b:
                    6e:86:a3:1d:94:5f:bc:57:16:31:fa:6c:da:27:a0:
                    63:c8:e6:67:bc:81:e6:a3:e7:e8:68:74:11:16:8f:
                    bc:68:bd:8b:19:4c:a2:e6:32:9f:3b:be:2e:9b:c2:
                    e8:52:97:fc:cf:4f:d5:dd:f1:ec:13:58:a1:03:c2:
                    a3:35:75:9c:fe:9c:8d:bf:0b:4e:db:b9:66:a6:94:
                    d4:0c:c2:52:22:e4:93:64:2b:bd:2d:e3:96:ed:71:
                    4e:05:66:fe:30:45:57:c1:2b:d3:ca:1b:d6:26:67:
                    ee:ca:63:d7:b7:fe:cb:7c:fb:87:37:9b:51:46:4d:
                    e1:5d:9c:8f:55:46:4e:c8:a9:d5:03:c7:6c:ed:a7:
                    3e:40:0f:1f:ce:27:39:2c:48:85:0d:19:f7:a6:d3:
                    f3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1C:5E:C4:27:E7:D4:88:3D:EC:56:92:1E:18:6E:1A:80:50:A1:BB
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/4xxexCfn1Ig97FaSHhhuGoBQobs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.52.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:f6:6c:80:fa:d3:ba:da:85:ce:4b:9c:ac:76:a9:59:4d:38:
         82:a6:7e:96:0e:0d:e1:d4:bb:da:61:5c:cf:50:69:10:a2:35:
         40:40:d9:7c:c4:03:a8:57:4d:2c:4b:b5:e9:af:a2:48:77:99:
         1c:c2:51:3f:a7:85:82:4d:e0:80:b6:32:aa:02:9e:51:a0:e8:
         75:a0:55:b8:8f:e1:09:0d:85:41:c9:08:9a:e7:96:93:3b:39:
         cc:1f:9f:9c:e9:aa:cf:55:f5:00:54:d9:90:74:22:c6:7b:56:
         8f:6e:b6:2e:e3:2b:81:0c:83:29:e5:1c:b8:08:df:dc:e7:9f:
         6b:81:ab:80:cc:60:48:65:ad:8b:0d:66:6e:a9:9c:cf:f9:ab:
         fb:52:8c:19:0e:70:e5:81:bc:c5:6a:d6:17:cd:34:ce:77:0f:
         6d:21:b1:0a:10:0c:2a:ad:0f:1f:13:0e:97:cb:fa:35:f3:fd:
         b7:5c:19:d3:bc:9c:41:67:6e:27:4d:bc:76:18:5c:c7:7a:b9:
         ea:0f:80:8f:50:3b:67:9d:af:f6:72:4c:50:ff:77:4d:4a:99:
         9e:8e:89:10:85:6d:20:a7:ee:1f:03:dc:43:de:ba:aa:b1:47:
         f8:cb:9b:20:df:ca:df:2a:3e:d3:8d:4d:9c:14:49:ff:ec:51:
         5f:3e:86:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:21 2026 by rpki-client