Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/xnJfewHnltoirYZQVRz8sk_2T14.roa
File:                     xnJfewHnltoirYZQVRz8sk_2T14.roa (raw, json)
Hash identifier:          jYusW3Qc4BbV4wNOR+9ZhYpYf6MpsSE1U7uWIOdy/ys=
Subject key identifier:   C6:72:5F:7B:01:E7:96:DA:22:AD:86:50:55:1C:FC:B2:4F:F6:4F:5E
Certificate issuer:       /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Certificate serial:       33
Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/xnJfewHnltoirYZQVRz8sk_2T14.roa
Signing time:             Tue 31 Mar 2026 08:40:39 +0000
ROA not before:           Tue 31 Mar 2026 08:40:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24279
IP address blocks:        219.100.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
        Validity
            Not Before: Mar 31 08:40:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C6725F7B01E796DA22AD8650551CFCB24FF64F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:67:b3:59:d4:bb:0b:7c:59:07:25:91:bb:
                    62:1a:ff:6a:e2:f1:2f:13:54:ea:15:0d:7b:02:a8:
                    82:e3:60:42:23:f5:b0:c0:1b:72:e6:0e:9e:75:8c:
                    45:9b:87:aa:96:74:90:f0:12:a3:65:b5:1a:10:14:
                    8c:72:73:56:be:57:fe:97:57:f7:28:7c:6c:10:2d:
                    4c:41:89:c9:a3:02:a3:b3:7e:fe:e4:40:11:03:ad:
                    18:57:f4:a6:c0:9f:b2:bc:25:43:49:88:ba:0e:29:
                    5f:89:68:0e:50:93:41:cd:39:bd:e7:a9:01:4b:fc:
                    ca:14:30:79:bf:c8:12:54:1e:dc:2d:2c:e5:db:c9:
                    c7:76:f7:18:1d:f2:d2:73:3b:52:28:33:f8:86:70:
                    63:75:54:86:47:51:d8:73:6b:eb:11:91:33:48:12:
                    66:5b:41:e1:21:72:d1:41:56:2a:3d:98:c6:cc:2e:
                    e4:de:9f:1f:30:85:e2:fa:37:57:26:8e:e3:d1:0e:
                    ce:b5:0e:03:13:22:72:e9:91:bb:ab:1a:32:40:4f:
                    08:95:45:7c:fa:55:a1:a2:5b:bd:01:bb:b0:5e:c1:
                    2a:20:7d:7d:2f:84:d5:8c:19:41:e2:bc:aa:8d:d8:
                    33:91:fb:0c:43:4d:66:9a:30:4b:20:84:74:36:7c:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:72:5F:7B:01:E7:96:DA:22:AD:86:50:55:1C:FC:B2:4F:F6:4F:5E
            X509v3 Authority Key Identifier:
                keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/xnJfewHnltoirYZQVRz8sk_2T14.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:c4:8b:a8:6f:ad:b3:a3:96:86:99:54:8d:12:a3:99:e4:0b:
         0f:35:2f:02:b0:08:35:3b:70:c8:e5:90:b8:e6:b7:c6:63:3b:
         ec:37:ac:a8:3d:2e:ee:c9:88:cb:08:ab:7f:d1:7c:74:8c:5c:
         95:4e:41:f3:33:6b:f9:03:49:6e:75:8a:1e:4d:ab:97:ba:f2:
         82:24:f1:56:33:a4:eb:11:75:26:19:01:90:05:34:24:47:af:
         22:14:c3:6d:f2:9c:3e:4b:b7:31:77:57:d9:e8:c8:36:77:7f:
         fd:f7:e7:30:2c:0c:5c:5f:d0:4f:c5:1a:55:08:45:63:c9:d1:
         8e:54:4c:d6:1a:b5:7b:bf:f3:06:29:68:73:07:23:c6:76:1b:
         19:50:ee:cf:67:cc:8e:ba:41:51:a6:66:0c:af:35:6d:49:c7:
         3f:d8:95:e1:b5:ea:a4:a5:2e:8e:bc:ec:02:d6:42:8b:03:07:
         1e:d9:4d:b3:52:19:42:27:88:5f:36:50:25:40:d5:0e:1d:65:
         bd:bf:37:80:65:f8:43:3d:f4:fd:05:5d:42:79:59:94:d1:2f:
         90:ab:8b:9b:46:12:e2:f2:84:a6:49:11:f4:b9:4d:e5:8b:75:
         26:b0:8f:cb:ca:74:48:87:9e:95:50:bb:1c:a6:c9:d2:f1:1b:
         c1:e2:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:24:14 2026 by rpki-client