Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/qGll0gUWCIPnCxAFDYSKt2WZDm8.roa
File:                     qGll0gUWCIPnCxAFDYSKt2WZDm8.roa (raw, json)
Hash identifier:          RKIGzbeXfCBYYYH9skUg0isc0m7tvrmoHHV8CoPF0eo=
Subject key identifier:   A8:69:65:D2:05:16:08:83:E7:0B:10:05:0D:84:8A:B7:65:99:0E:6F
Certificate issuer:       /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial:       4F
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/qGll0gUWCIPnCxAFDYSKt2WZDm8.roa
Signing time:             Sun 01 Mar 2026 01:31:54 +0000
ROA not before:           Sun 01 Mar 2026 01:31:54 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     131954
IP address blocks:        211.14.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
        Validity
            Not Before: Mar  1 01:31:54 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A86965D205160883E70B10050D848AB765990E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:a3:b2:7c:fd:8a:8f:99:c3:56:bb:a9:3b:
                    f9:50:f6:c3:2e:e2:09:4c:bf:1c:81:ff:5a:7b:b0:
                    56:49:ce:20:af:15:18:42:d3:1f:c1:dd:de:4d:e1:
                    eb:f5:b8:15:c4:17:31:f1:35:a7:07:06:aa:85:13:
                    fb:7e:9a:4e:8a:16:fd:ec:b2:66:b3:aa:80:6e:68:
                    85:44:53:f9:1f:49:65:ff:af:cf:77:2e:55:8a:d6:
                    15:c7:7d:07:f6:a3:35:85:16:04:8e:c2:6e:d1:e1:
                    d8:ec:7a:85:3c:dd:f9:bf:95:1d:cd:09:7c:d3:b8:
                    11:92:1f:a0:59:d5:83:4d:bd:0d:86:23:0e:b8:ae:
                    80:55:24:e5:7e:f4:4d:eb:77:31:ac:26:28:13:ad:
                    bc:89:2e:46:8a:7a:0d:31:d0:ea:a1:0e:81:88:27:
                    da:47:01:9b:4d:e4:f3:24:31:fe:cb:aa:99:a2:ab:
                    39:2b:f6:1d:b4:53:d2:f7:26:75:a7:5e:61:d4:69:
                    bf:ab:53:8a:ee:54:5f:49:ca:ce:dc:26:27:fb:25:
                    d3:64:f6:27:5e:70:76:72:d5:4e:a1:27:89:3f:d0:
                    28:8e:3f:dd:10:9d:28:81:b5:95:6f:bd:b0:95:7d:
                    b4:71:63:92:9b:35:75:a1:71:9f:b3:0c:fc:82:94:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:69:65:D2:05:16:08:83:E7:0B:10:05:0D:84:8A:B7:65:99:0E:6F
            X509v3 Authority Key Identifier:
                keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/qGll0gUWCIPnCxAFDYSKt2WZDm8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:9a:f4:38:56:eb:f7:d4:15:1c:26:4b:5b:b8:c1:49:29:d6:
         e0:8f:01:29:a5:42:34:84:30:3b:84:b8:4d:55:21:10:c1:a6:
         2e:5a:23:52:b6:6a:6a:f3:0b:21:0c:52:09:1a:63:c6:19:12:
         16:0a:03:a9:46:9b:c0:1d:a1:99:db:b4:d0:0c:7f:f8:1a:81:
         85:29:57:ca:e6:3d:73:48:27:3e:91:ad:29:26:9c:44:14:26:
         c1:97:f5:2c:67:fd:38:d7:8e:5a:54:82:0c:7f:e3:df:21:9a:
         f0:88:ee:c9:ee:c3:da:bc:45:be:a4:50:e6:ae:7b:45:d6:26:
         da:25:65:78:d7:0a:3c:46:f9:39:04:5a:ff:83:3a:83:35:6e:
         c1:1e:c3:10:33:c2:28:07:1a:34:3a:d3:3d:dd:f4:dd:a8:ef:
         3d:de:72:c2:c2:5a:da:cc:86:2e:4e:f5:62:b9:d5:ec:fb:ce:
         62:cd:8c:f4:80:24:26:65:6e:94:41:e1:64:19:61:34:ce:2d:
         8d:c4:d8:0f:fe:fb:0b:59:43:75:7e:42:07:3f:2c:d6:93:50:
         70:74:4d:ff:32:9b:75:0d:0c:e4:b7:4d:2d:d9:fc:b9:fa:ac:
         b7:43:8c:b4:74:15:72:3e:99:65:5f:f6:96:91:1e:86:79:da:
         2c:80:ca:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:18:51 2026 by rpki-client