Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/O0T8FeJEyag1CPrehF5N-Hc6k-g.roa
File:                     O0T8FeJEyag1CPrehF5N-Hc6k-g.roa (raw, json)
Hash identifier:          sdVZIfe4BPueIKPC9WXiEMMfMp6YYE/KW72SeOSBJXc=
Subject key identifier:   3B:44:FC:15:E2:44:C9:A8:35:08:FA:DE:84:5E:4D:F8:77:3A:93:E8
Certificate issuer:       /CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Certificate serial:       59
Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/O0T8FeJEyag1CPrehF5N-Hc6k-g.roa
Signing time:             Sun 01 Mar 2026 01:31:13 +0000
ROA not before:           Sun 01 Mar 2026 01:31:13 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     24289
IP address blocks:        202.223.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85
        Validity
            Not Before: Mar  1 01:31:13 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=3B44FC15E244C9A83508FADE845E4DF8773A93E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:74:28:43:c6:a0:3d:4b:11:01:bf:be:81:
                    8a:f7:da:87:68:cf:75:1e:17:5f:4e:74:d5:b0:cc:
                    97:dd:4b:b8:40:18:fc:5a:93:58:5f:eb:85:fe:a4:
                    30:9c:7a:67:98:bf:ce:59:0f:b1:27:d7:54:fb:12:
                    f9:22:59:60:3a:43:05:ea:a2:73:14:b1:86:dd:1f:
                    04:d4:1e:3f:12:81:8d:4b:23:cb:59:89:3b:95:a4:
                    81:61:cc:29:23:82:a6:98:69:3b:f8:f0:4c:e1:3e:
                    9e:a8:ff:14:1e:1d:b7:f6:43:d8:ae:d4:a6:6c:11:
                    2c:87:33:70:e3:30:f9:fb:f8:1a:fa:33:f0:09:60:
                    e7:e1:60:ee:56:ef:d7:f4:67:a5:7c:b4:f6:9d:89:
                    63:88:0c:2d:58:0b:d1:77:48:a9:ba:7b:90:20:9c:
                    67:b1:2c:78:6b:e8:57:5d:6d:de:54:7a:b6:db:8b:
                    2b:ba:54:d4:3d:8d:b1:ee:c9:18:b2:db:c3:84:7e:
                    f4:a3:b9:0d:a4:95:b5:8b:59:c5:b9:d7:fe:68:18:
                    0d:a6:c0:17:22:7f:6b:6c:c9:d9:78:ef:fb:f6:75:
                    68:1d:5b:5f:4f:42:7c:7e:85:9e:f3:e0:5e:29:e5:
                    d7:d2:20:df:68:ff:78:be:65:8c:03:76:54:05:fa:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:44:FC:15:E2:44:C9:A8:35:08:FA:DE:84:5E:4D:F8:77:3A:93:E8
            X509v3 Authority Key Identifier:
                keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/O0T8FeJEyag1CPrehF5N-Hc6k-g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.223.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:62:f9:ad:ac:6a:81:c1:2e:4c:6e:d0:b0:bd:0e:74:3b:b6:
         0f:2d:1e:de:a2:8e:67:81:8f:aa:12:b5:7a:86:06:b0:c3:4d:
         2c:d2:d6:8d:d0:34:7a:aa:01:e2:9a:ff:99:e7:39:ce:78:3d:
         e6:04:8d:78:2d:ed:2b:6c:89:a7:cd:e1:b3:04:ec:90:61:da:
         08:97:07:ee:3d:50:4f:5c:3f:84:6b:96:d1:4c:8c:5f:e6:38:
         04:50:fb:9a:86:14:50:80:07:4d:a3:c2:f5:8e:4a:de:2d:99:
         dc:4c:bb:d3:e0:20:8a:95:74:0a:ff:71:14:5a:be:3c:0f:ec:
         dd:a9:91:c5:3a:b5:41:85:90:2f:cd:59:54:63:9a:42:06:2a:
         55:92:ab:a5:77:e2:dc:67:ab:2a:8b:84:73:b8:bb:dc:b3:b7:
         ad:86:40:ab:93:a9:f3:44:60:65:02:de:c1:cc:f9:2f:32:12:
         64:99:69:e0:66:32:e5:1e:f7:0c:8c:ba:bd:b9:c3:fb:0f:1b:
         dd:19:22:72:9d:e1:89:ec:1d:23:eb:c5:f3:b4:87:a5:43:e0:
         82:0e:78:7e:9a:cc:38:89:07:0d:0b:d0:c8:6b:a3:09:de:ab:
         1b:83:2e:d4:da:74:ac:ed:c5:fd:6f:b1:3b:a4:9c:08:1f:ad:
         87:2b:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:45 2026 by rpki-client